8785 matches found
kernel: concurrency use-after-free between drm_setmaster_ioctl and drm_mode_getresources
A use-after-free vulnerability was found in drmleaseheld in drivers/gpu/drm/drmlease.c in the Linux kernel due to a race problem. This flaw allows a local user privilege attacker to cause a denial of service DoS or a kernel information leak...
kernel: concurrency use-after-free between drm_setmaster_ioctl and drm_mode_getresources
A use-after-free vulnerability was found in drmleaseheld in drivers/gpu/drm/drmlease.c in the Linux kernel due to a race problem. This flaw allows a local user privilege attacker to cause a denial of service DoS or a kernel information leak...
kernel: KVM: NULL pointer dereference in kvm_irq_delivery_to_apic_fast()
A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a...
GSD-2022-1007437 btrfs: fix race between quota enable and quota rescan ioctl
btrfs: fix race between quota enable and quota rescan ioctl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...
GSD-2022-1007419 platform/chrome: fix memory corruption in ioctl
platform/chrome: fix memory corruption in ioctl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...
GSD-2022-1007089 platform/chrome: fix memory corruption in ioctl
platform/chrome: fix memory corruption in ioctl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...
GSD-2022-1006837 platform/chrome: fix memory corruption in ioctl
platform/chrome: fix memory corruption in ioctl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
PT-2022-35344 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: The issue concerns a memory corruption in ioctl. It was introduced in version v5.4 and fixed in Linux Kernel version v5.15.75. The actual impact and attack plausibility have not yet been...
PT-2022-35540 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: The issue concerns a memory corruption in ioctl. It was introduced in version v5.4 and fixed in Linux Kernel version v5.10.150. The actual impact and attack plausibility have not yet been...
PT-2022-35092 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns a memory corruption in ioctl. It was introduced in version v5.4 and fixed in Linux Kernel version v6.0.3. The actual impact and attack plausibility have not yet been proven...
PT-2022-35674
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.220 Description The issue concerns a memory corruption in ioctl. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.4.220, update to...
PT-2022-35326
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.75 Description A potential refcount leak issue exists in the afu ioctl function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2022-35789 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.262 Description: The issue is related to a race between quota enable and quota rescan ioctl in btrfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...
PT-2022-35324 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: The issue is related to preventing integer overflow in the dfl feature ioctl set irq function. The actual impact and attack plausibility have not yet been proven. Recommendations: For...
PT-2022-35340 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15 through v5.15.74 Description: A memory leak issue was discovered in the vmw mksstat add ioctl function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...
PT-2022-35663 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.220 Description: A potential refcount leak was discovered in the afu ioctl function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...
CVE-2022-27674
Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks potentially leading to a Windows kernel crash resulting in denial of service...
CVE-2022-23831
Insufficient validation of the IOCTL input buffer in AMD μProf may allow an attacker to send an arbitrary buffer leading to a potential Windows kernel crash resulting in denial of service...
CVE-2022-27674
AMD μProf is affected by CVE-2022-27674 due to insufficient validation of the IOCTL input/output buffer, potentially allowing bypass of bounds checks and causing a Windows kernel crash with denial of service. The AMD security bulletin AMD-SB-1046 describes the condition and lists affected platfor...
