6104 matches found
CVE-2021-46947
In the Linux kernel, the following vulnerability has been resolved: sfc: adjust efx-xdptxqueuecount with the real number of initialized queues efx-xdptxqueuecount is initially initialized to numpossiblecpus and is later used to allocate and traverse efx-xdptxqueues lookup array. However, we may e...
CVE-2021-46964
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Reserve extra IRQ vectors Commit a6dcfe08487e "scsi: qla2xxx: Limit interrupt vectors to number of CPUs" lowers the number of allocated MSI-X vectors to the number of CPUs. That breaks vector allocation assumptions...
CVE-2021-46947
CVE-2021-46947 is a Linux kernel issue in the sfc (Solarflare) driver where efx->xdp_tx_queue_count can reflect too many uninitialized slots after probing, risking a NULL pointer dereference (e.g., when running ethtool -S). The root cause is that xdp_tx_queue_count starts at num_possible_cpus(...
CVE-2021-46925
A flaw was found in the Linux kernel affecting the net/smc Synchronous Message Channel subsystem. This vulnerability is caused by a race condition between the smccdctxhandler and smcrelease functions and can cause kernel panics. Mitigation There are no known mitigations to the problem and Red Hat...
CVE-2023-52434 smb: client: fix potential OOBs in smb2_parse_contexts()
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOBs in smb2parsecontexts Validate offsets and lengths before dereferencing create contexts in smb2parsecontexts. This fixes following oops when accessing invalid create contexts from server: BUG: unabl...
CVE-2023-52434 smb: client: fix potential OOBs in smb2_parse_contexts()
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOBs in smb2parsecontexts Validate offsets and lengths before dereferencing create contexts in smb2parsecontexts. This fixes following oops when accessing invalid create contexts from server: BUG: unabl...
CVE-2023-20579
CVE-2023-20579 involves improper access control in the AMD SPI protection feature. A local Ring0 (kernel mode) user could bypass protections, potentially affecting integrity and availability. Connected documents confirm this is an AMD SPI protection flaw and cite multiple advisories (NVD, Red Hat...
PT-2024-11956
Name of the Vulnerable Software and Affected Versions AMD SPI protection feature affected versions not specified Description The issue is related to improper access control in the AMD SPI protection feature, which may allow a user with Ring0 kernel mode privileged access to bypass protections. Th...
The vulnerability of the Kernel-mode operating system driver in Windows allows a hacker to increase their privileges.
The vulnerability of the Kernel-mode operating system drivers in Windows is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Exploring malicious Windows drivers (Part 1): Introduction to the kernel and drivers
Drivers have long been of interest to threat actors, whether they are exploiting vulnerable drivers or creating malicious ones. Malicious drivers are difficult to detect and successfully leveraging one can give an attacker full access to a system. Real-world examples can be found in our previous...
CVE-2024-21309
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability...
CVE-2024-21309
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability...
Privilege escalation
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability...
CVE-2024-21309 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
...
CVE-2024-21309
Technical details (affected product/component, root cause, impact, or fix) for CVE-2024-21309 are not publicly provided in the connected documents. Monitor for updates from authoritative sources.
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
...
Microsoft Windows Kernel-Mode Drivers Security Vulnerability
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Kernel-Mode Drivers. An attacker could exploit the vulnerability to elevate privileges. The following products an...
CVE-2024-21309: Integer Underflow (Wrap or Wraparound)
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability...
PT-2024-1572 · Microsoft · Windows Kernel-Mode Driver +1
Name of the Vulnerable Software and Affected Versions: Windows Kernel-Mode Driver affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Kernel-Mode Driver, which is caused by insufficient access restrictions. This vulnerability...
