Linux Kernel AoE Driver Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the AoE driver. The iss...

The vulnerability of the opmap_dma_probe() function in the drivers/dma/ti/omap-dma.c file of the Linux kernel’s DMA driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the opmapdmaprobe function in the drivers/dma/ti/omap-dma.c file of the Linux kernel’s DMA driver module is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability allows a remote attacker to compromise the confidentialit...

The vulnerability in the function intel_gvtdebugfs_add_vgpu() of the driver/gpu/drm/i915/gvt/debugfs.c file of the Direct Rendering Infrastructure (DRI) kernel module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the intelgvtdebugfsaddvgpu function in the drivers/gpu/drm/i915/gvt/debugfs.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2025-69784

A local, non-privileged attacker can abuse a vulnerable IOCTL interface exposed by the OpenEDR 2.5.1.0 kernel driver to modify the DLL injection path used by the product. By redirecting this path to a user-writable location, an attacker can cause OpenEDR to load an attacker-controlled DLL into...

CVE-2025-69783

A local attacker can bypass OpenEDR's 2.5.1.0 self-defense mechanism by renaming a malicious executable to match a trusted process name e.g., csrss.exe, edrsvc.exe, edrcon.exe. This allows unauthorized interaction with the OpenEDR kernel driver, granting access to privileged functionality such as...

The vulnerability of the vxlan_init() function in the drivers/net/vxlan/vxlan_core.c file of the Linux kernel’s network device driver module allows a hacker to cause a service failure.

The vulnerability of the vxlaninit function in the drivers/net/vxlan/vxlancore.c file of the Linux kernel’s network device driver module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

Exploit for CVE-2024-51324

CVE-2024-51324 — BYOVD: BdApiUtil64.sys Process Killer · Maste...

The vulnerability of the hsw_disable_crt() function in the drivers/gpu/drm/i915/display/intel_crt.c module of the Linux kernel’s Direct Rendering Infrastructure (DRI) support driver allows a attacker to cause a service failure.

The vulnerability of the hswdisablecrt function in the drivers/gpu/drm/i915/display/intelcrt.c module of the DRI support driver for the Linux operating system is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the acpi_cppc_processor_probe() function in the drivers/acpi/cppc_acpi.c driver module of the ACPI support driver for the Linux kernel allows a malicious actor to access protected information or cause system failures.

The vulnerability of the acpicppcprocessorprobe function in the drivers/acpi/cppcacpi.c driver module of the ACPI support driver extended configuration and power management interface for the Linux kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow...

The vulnerability of the `vidtv_bridge_dvb_init()` function in the `drivers/media/test-drivers/vidtv/vidtv_bridge.c` file of the Linux kernel-based multimedia device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vidtvbridgedvbinit function in the drivers/media/test-drivers/vidtv/vidtvbridge.c file, a driver for multimedia devices in the Linux operating system, is related to the use of memory after deallocation. Exploiting this vulnerability could allow an attacker to compromise t...

ROS-20260323-73-0013

A vulnerability in the drm/amdkfd component of the Linux kernel is related to mutual blocking of execution threads. Exploitation of the vulnerability allows an attacker to cause a denial of service...

The vulnerability of the `nvme_fc_create_association()` function in the drivers/nvme/host/fc.c module of the Linux operating system’s NVME kernel driver allows a attacker to cause a service failure.

The vulnerability of the nvmefccreateassociation function in the drivers/nvme/host/fc.c file of the Linux kernel’s NVME driver is related to the lack of synchronization. Exploiting this vulnerability could allow a attacker to cause a service failure...

EUVD-2025-208750

A local attacker can bypass OpenEDR's 2.5.1.0 self-defense mechanism by renaming a malicious executable to match a trusted process name e.g., csrss.exe, edrsvc.exe, edrcon.exe. This allows unauthorized interaction with the OpenEDR kernel driver, granting access to privileged functionality such as...

CVE-2025-69784

A local, non-privileged attacker can abuse a vulnerable IOCTL interface exposed by the OpenEDR 2.5.1.0 kernel driver to modify the DLL injection path used by the product. By redirecting this path to a user-writable location, an attacker can cause OpenEDR to load an attacker-controlled DLL into...

CVE-2025-69783

A local attacker can bypass OpenEDR's 2.5.1.0 self-defense mechanism by renaming a malicious executable to match a trusted process name e.g., csrss.exe, edrsvc.exe, edrcon.exe. This allows unauthorized interaction with the OpenEDR kernel driver, granting access to privileged functionality such as...

CVE-2025-69783

A local attacker can bypass OpenEDR's 2.5.1.0 self-defense mechanism by renaming a malicious executable to match a trusted process name e.g., csrss.exe, edrsvc.exe, edrcon.exe. This allows unauthorized interaction with the OpenEDR kernel driver, granting access to privileged functionality such as...

CVE-2025-69784

CVE-2025-69784 describes a local, non-privileged attacker abusing a vulnerable IOCTL interface in the OpenEDR 2.5.1.0 kernel driver to alter the DLL injection path. By redirecting the path to a user-writable location, the attacker can cause OpenEDR to load an attacker-controlled DLL into high-pri...

The vulnerability of the acpi_ns_walk_namespace() function in the drivers/acpi/acpica/nswalk.c driver for the ACPI driver (an extended configuration and power management interface) in the Linux kernel allows a malicious actor to cause a service failure.

The vulnerability of the acpinswalknamespace function in the drivers/acpi/acpica/nswalk.c driver of the ACPI driver an extended configuration and power management interface of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a...

CVE-2025-69783

CVE-2025-69783 concerns OpenEDR’s 2.5.1.0 self-defense mechanism. A local attacker can rename a malicious executable to a trusted process name (for example, csrss.exe, edrsvc.exe, edrcon.exe), enabling unauthorized interaction with the OpenEDR kernel driver. This exposes privileged functionality ...

CVE-2025-69784

A local, non-privileged attacker can abuse a vulnerable IOCTL interface exposed by the OpenEDR 2.5.1.0 kernel driver to modify the DLL injection path used by the product. By redirecting this path to a user-writable location, an attacker can cause OpenEDR to load an attacker-controlled DLL into...