kernel: use-after-free in drivers/bluetooth/hci_ldisc.c

A flaw was found in the Linux kernel's implementation of the HCI UART driver. A local attacker with access permissions to the Bluetooth device can issue an ioctl, which triggers the hciuartsetproto function in drivers/bluetooth/hcildisc.c. The flaw in this function can cause memory corruption or ...

Buffer Overflows

A race condition flaw, leading to heap-based buffer overflows, was found in the way the Linux kernel's NTTY line discipline LDISC implementation handled concurrent processing of echo output and TTY write operations originating from user space when the underlying TTY driver was PTY. An unprivilege...

PT-2016-4076

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5 Description The issue allows local users to obtain sensitive information from kernel memory by reading a tty data structure, specifically through the tty set termios ldisc function in drivers/tty/tty ldisc.c...

kernel: pty layer race condition on tty ldisc shutdown.

A flaw was discovered in the way the Linux kernel's TTY subsystem handled the tty shutdown phase. A local, unprivileged user could use this flaw to cause denial of service on the system by holding a reference to the ldisc lock during tty shutdown, causing a deadlock...

kernel: pty layer race condition on tty ldisc shutdown.

A flaw was discovered in the way the Linux kernel's TTY subsystem handled the tty shutdown phase. A local, unprivileged user could use this flaw to cause denial of service on the system by holding a reference to the ldisc lock during tty shutdown, causing a deadlock...

Linux Kernel tty ldisc驱动空指针引用拒绝服务漏洞

BUGTRAQ ID: 36191 CVECAN ID: CVE-2009-3043 Linux Kernel是开放源码操作系统Linux所使用的内核。 如果本地用户执行了某些伪终端I/O操作，就可以在Linux Kernel的drivers/char/ttyldisc.c文件的ttyldischangup函数中触发空指针引用，导致系统崩溃。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...