CVE-2024-35250 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

...

CVE-2024-35250

CVE-2024-35250 is a Windows kernel‑mode driver LPE in ks.sys (Kernel Streaming core) caused by an untrusted pointer dereference. PoCs and exploits exist (e.g., PoCs on GitHub; KS driver) with active demonstrations, and exploitation has been observed in public material. Microsoft addressed the iss...

CVE-2024-35250 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

...

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

...

PT-2024-4289

Name of the Vulnerable Software and Affected Versions Windows Kernel-Mode Driver affected versions not specified Description The issue is related to errors in synchronization when using a shared resource, which can allow an attacker to elevate their privileges. This is a local privilege escalatio...

KLA68914 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Windows Distributed...

PT-2024-4291

Name of the Vulnerable Software and Affected Versions Windows Kernel-Mode Driver affected versions not specified Description The issue is related to an untrusted pointer dereference weakness in the Microsoft Kernel Streaming Service MSKSSRV.SYS, allowing local attackers to gain SYSTEM privileges ...

CVE-2024-35250: Untrusted Pointer Dereference

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability...

Microsoft Windows Kernel Mode Drivers Security Vulnerability

Microsoft Windows Kernel Mode Drivers is a Windows kernel mode driver from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel Mode Drivers. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:Windo...

Microsoft Windows Kernel-Mode Drivers Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel-Mode Drivers. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 18...

CVE-2024-30084: Time-of-check Time-of-use (TOCTOU) Race Condition

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability...

SUSE CVE-2021-47534

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: kms: Add missing drmcrtccommitput Commit 9ec03d7f1ed3 "drm/vc4: kms: Wait on previous FIFO users before a commit" introduced a global state for the HVS, with each FIFO storing the current CRTC commit so that we can...

CVE-2021-47563

A vulnerability was found in the Linux kernel's ice driver, where the addpbleprm function improperly manages the reference counting of the bpfprog object. This issue occurs during the VSI rebuild process, causing a reference count underflow when an old program is mistakenly decremented while stil...

CVE-2021-47572

In the Linux kernel, the following vulnerability has been resolved: net: nexthop: fix null pointer dereference when IPv6 is not enabled When we try to add an IPv6 nexthop and IPv6 is not enabled !CONFIGIPV6 we'll hit a NULL pointer dereference1 in the error path of nhcreateipv6 due to calling...

CVE-2021-47563

In the Linux kernel, the following vulnerability has been resolved: ice: avoid bpfprog refcount underflow Ice driver has the routines for managing XDP resources that are shared between ndobpf op and VSI rebuild flow. The latter takes place for example when user changes queue count on an interface...

CVE-2021-47557

In the Linux kernel, the following vulnerability has been resolved: net/sched: schets: don't peek at classes beyond 'nbands' when the number of DRR classes decreases, the round-robin active list can contain elements that have already been freed in etsqdiscchange. As a consequence, it's possible t...

CVE-2021-47563

In the Linux kernel, the following vulnerability has been resolved: ice: avoid bpfprog refcount underflow Ice driver has the routines for managing XDP resources that are shared between ndobpf op and VSI rebuild flow. The latter takes place for example when user changes queue count on an interface...

CVE-2021-47572 net: nexthop: fix null pointer dereference when IPv6 is not enabled

In the Linux kernel, the following vulnerability has been resolved: net: nexthop: fix null pointer dereference when IPv6 is not enabled When we try to add an IPv6 nexthop and IPv6 is not enabled !CONFIGIPV6 we'll hit a NULL pointer dereference1 in the error path of nhcreateipv6 due to calling...

CVE-2021-47463 mm/secretmem: fix NULL page->mapping dereference in page_is_secretmem()

In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix NULL page-mapping dereference in pageissecretmem Check for a NULL page-mapping before dereferencing the mapping in pageissecretmem, as the page's mapping can be nullified while gup is running, e.g. by reclaim or...

CVE-2021-47463 mm/secretmem: fix NULL page->mapping dereference in page_is_secretmem()

In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix NULL page-mapping dereference in pageissecretmem Check for a NULL page-mapping before dereferencing the mapping in pageissecretmem, as the page's mapping can be nullified while gup is running, e.g. by reclaim or...