9115 matches found
CVE-2025-22030 mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead()
In the Linux kernel, the following vulnerability has been resolved: mm: zswap: fix cryptofreeacomp deadlock in zswapcpucompdead Currently, zswapcpucompdead calls cryptofreeacomp while holding the per-CPU acompctx mutex. cryptofreeacomp then holds scomplock through cryptoexitscompopsasync. On the...
Linux mm/slub.c Slab Buffer Overflow
The vulnerability of the slaballoc function in the mm/slub.c module of the Linux kernel’s memory management subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...
CVE-2025-29812
Untrusted pointer dereference in Windows Kernel Memory allows an authorized attacker to elevate privileges locally...
Linux kernel padata_free_shell Heap Buffer Overflow DoS
The vulnerability of the padatafreeshell function in the kernel/padata.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
Linux kernel NFSD Confidential Data Access
The vulnerability of the NFSD component in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...
CVE-2025-29812
Untrusted pointer dereference in Windows Kernel Memory allows an authorized attacker to elevate privileges locally...
CVE-2025-29812
Untrusted pointer dereference in Windows Kernel Memory allows an authorized attacker to elevate privileges locally...
DirectX Graphics Kernel Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Kernel Memory allows an authorized attacker to elevate privileges locally...
PT-2025-15589 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an untrusted pointer dereference in Windows Kernel Memory, which allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there i...
CVE-2025-29812: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows Kernel Memory allows an authorized attacker to elevate privileges locally...
PT-2025-22167
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the firmware arm scmi. The issue arises when using device find child to lookup the proper SCMI device to destroy, causin...
CVE-2025-25178
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause kernel system memory corruption...
CVE-2025-25178
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause kernel system memory corruption...
CVE-2025-25178 GPU DDK - PhysmemWrapExtMem uiSize=0 corrupts kernel memory
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause kernel system memory corruption...
CVE-2025-25178 GPU DDK - PhysmemWrapExtMem uiSize=0 corrupts kernel memory
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause kernel system memory corruption...
CVE-2025-25178
A security vulnerability exists in the Imagination Technologies GPU Driver (Graphics DDK) that allows an unprivileged user to conduct improper GPU system calls. This flaw results in kernel system memory corruption , which can lead to unauthorized memory access, memory manipulation, and system ins...
CVE-2025-0468
A security vulnerability exists in the Imagination GPU Driver (specifically identified in some records as Graphics Ddk ) where software running as a non-privileged user can perform improper GPU system calls. This allows an attacker to subvert the GPU hardware to write to arbitrary physical memory...
CVE-2025-0468 GPU DDK - ui64RobustnessAddress can overwrite Freelist / HWRT (and bypass PMMETA)
Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kern...
CVE-2025-0468: Improper Handling of Insufficient Permissions or Privileges
Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kern...
PT-2025-14907 · Imagination Technologies · Graphics Ddk
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Software installed and run as a non-privileged user may conduct improper GPU system calls to cause kernel system memory corruption. Recommendations: At the moment, there is no information...