3937 matches found
Exploit for CVE-2022-21907
cve-2022-21907-http.sys by 1vere$k CVE-2022-21907 - Double Fre...
Exploit for CVE-2021-43008
cve-2022-21907-http.sys by 1vere$k CVE-2022-21907 - Double Fre...
kernel: out-of-bounds read in bpf_skb_change_head() of filter.c due to a use-after-free
An out-of-bounds OOB memory access flaw was found in net/core/filter.c in bpfskbmaxlen in the Linux kernel. A missing sanity check to the current MTU check may allow a local attacker with special user privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal...
kernel: RDMA/core: Make sure "ib_port" is valid when access sysfs node
A NULL pointer dereference flaw was found in the Linux kernel RDMA core's sysfs handling. A local user with access to InfiniBand sysfs nodes can read sysfs attributes while an InfiniBand port is being removed, causing the kernel to dereference a NULL ibport pointer when the port structure has bee...
kernel: wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems()
An integer overflow flaw was found in the Linux kernel's nl80211 wireless configuration interface in the MBSSID element parsing logic. A local user with CAPNETADMIN capability can trigger this issue by specifying 256 or more MBSSID elements through the nl80211 interface, causing the u8 counter...
kernel: eBPF multiplication integer overflow in prealloc_elems_and_freelist() in kernel/bpf/stackmap.c leads to out-of-bounds write
An out-of-bounds OOB memory write flaw was found in preallocelemsandfreelist in kernel/bpf/stackmap.c in the bpf in the Linux kernel. In this flaw, the multiplication to calculate the size could lead to an integer overflow which could allow a local attacker, with a special user privilege, to gain...
kernel: Linux kernel: integer overflow and information disclosure via undefined shift operation in drm/amdkfd
A flaw was found in the Linux kernel’s AMD Kernel Fusion Driver amdkfd within the drm subsystem. When either getnumsdmaqueues or getnumxgmisdmaqueues returned 0, the driver performed a bit shift where the number of bits shifted equaled the operand width. Such a shift is undefined behavior in C an...
kernel: out-of-bound Read in qrtr_endpoint_post in net/qrtr/qrtr.c
An out-of-bounds OOB memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel. A missing sanity check allows a local attacker to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information. The highest threat from this...
PT-2022-2585 · Linux +8 · Linux Kernel +8
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to the fixed version Description: A flaw was found in the Kernel-based Virtual Machine KVM subsystem of the Linux kernel. The issue is related to the get user pages fast function and involves writing data outside t...
UBUNTU-CVE-2021-4203
A use-after-free read flaw was found in sockgetsockopt in net/core/sock.c due to SOPEERCRED and SOPEERGROUPS race with listen and connect in the Linux kernel. In this flaw, an attacker with a user privileges may crash the system or leak internal kernel information...
CVE-2022-25822
An use after free vulnerability in sdp driver prior to SMR Mar-2022 Release 1 allows kernel crash...
CVE-2022-25822
An use after free vulnerability in sdp driver prior to SMR Mar-2022 Release 1 allows kernel crash...
CVE-2022-25822
An use after free vulnerability in sdp driver prior to SMR Mar-2022 Release 1 allows kernel crash...
Design/Logic Flaw
An use after free vulnerability in sdp driver prior to SMR Mar-2022 Release 1 allows kernel crash...
Samsung sdp driver 资源管理错误漏洞
Samsung sdp driver is a driver for a digital presenter from Samsung South Korea. A security vulnerability exists in Samsung sdp driver that can cause a kernel crash...
CVE-2022-25822
An use after free vulnerability in sdp driver prior to SMR Mar-2022 Release 1 allows kernel crash...
CVE-2022-25822
Technical details about CVE-2022-25822 are not publicly available in the provided documents; monitor for updates.
CVE-2021-22479
The interface of a certain HarmonyOS module has an invalid address access vulnerability. Successful exploitation of this vulnerability may lead to kernel crash...