Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates when calling IOCTL calls from user space to set generic private commands in the WLAN driver, which may result in memory corruption if these commands are...

PT-2024-30273 · Unknown · Wlan Driver

Name of the Vulnerable Software and Affected Versions: WLAN driver affected versions not specified Description: The issue involves memory corruption when invoking IOCTL calls from user space to issue a factory test command inside the WLAN driver. This can lead to unintended consequences. The...

PT-2024-10609 · Qualcomm · Snapdragon +22

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue allows certain unprivileged processes to perform IOCTL calls. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

DEBIAN-CVE-2024-53086

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Drop VM dma-resv lock on xesyncinfenceget failure in exec IOCTL Upon failure all locks need to be dropped before returning to the user. cherry picked from commit 7d1a4258e602ffdce529f56686925034c1b3b095...

UBUNTU-CVE-2024-53087

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix possible exec queue leak in exec IOCTL In a couple of places after an exec queue is looked up the exec IOCTL returns on input errors without dropping the exec queue ref. Fix this ensuring the exec queue ref is dropped...

kernel: platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: crosecchardev: fix kernel data leak from ioctl It is possible to peep kernel page's data by providing larger insize in struct croseccommand1 when invoking EC host commands. Fix it by using zeroed memory. 1:...

PT-2024-27991 · Hgsl · Hgsl

Name of the Vulnerable Software and Affected Versions: HGSL affected versions not specified Description: The issue involves memory corruption that occurs when invoking IOCTL calls from user-space for the HGSL memory node. This can potentially lead to exploitation. Recommendations: At the moment,...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption when processing IOCTL calls in the JPEG Encoder driver...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when processing the input parameters of any IOCTL call in the JPEG Encoder driver...

PT-2024-19852 · Qualcomm · Qualcomm Snapdragon Compute

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Compute up to WSA8845H EVA driver affected versions not specified Description: The issue is related to memory corruption that occurs when a user invokes an IOCTL command from user-space and modifies the original packet siz...

PT-2024-27986 · Unknown · Jpeg Encoder Driver

Name of the Vulnerable Software and Affected Versions: JPEG Encoder driver affected versions not specified Description: The issue is related to memory corruption that occurs while processing input parameters for any IOCTL call in the JPEG Encoder driver. This problem can lead to memory corruption...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when processing an IOCTL call to unmap a buffer...

The vulnerability of the ext4_ioctl_getlabel() function in the file system of the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext4ioctlgetlabel function in the fs/ext4/ioctl.c file of the Linux operating system’s file system is related to accessing memory beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

kernel: KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgicv2parseattr vgicv2parseattr is responsible for finding the vCPU that matches the user-provided CPUID, which of course may not be valid. If the ID is invalid, kvmgetvcpubyid...

CVE-2023-31341

Insufficient validation of the Input Output Control IOCTL input buffer in AMD μProf may allow an authenticated attacker to cause an out-of-bounds write, potentially causing a Windows® OS crash, resulting in denial of service...

CVE-2023-31341

Summary: CVE-2023-31341 affects AMD μProf. The issue is insufficient validation of the IOCTL input buffer, which can allow an authenticated attacker to cause an out-of-bounds write and potentially crash Windows, causing denial of service. Affected product: AMD μProf (Windows, Linux, FreeBSD varia...

kernel: arp: Prevent overflow in arp_req_get().

A vulnerability was found in the arpreqget function in the Linux kernel when handling the SIOCGARP ioctl input/output control request. This function copies data over into a fixed-length buffer which could result in a buffer overflow and cause memory corruption, undefined behavior, or crashes...

PT-2024-12274 · Amd · Amd Μprof

Name of the Vulnerable Software and Affected Versions: AMD μProf affected versions not specified Description: The issue is due to insufficient validation of the Input Output Control IOCTL input buffer in AMD μProf, which may allow an authenticated attacker to cause an out-of-bounds write. This...

kernel: vfio/pci: Lock external INTx masking ops

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Lock external INTx masking ops Mask operations through config space changes to DisINTx may race INTx configuration changes via ioctl. Create wrappers that add locking for paths outside of the core interrupt code. In...

PT-2024-25066 · Qualcomm · Snapdragon +123

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs while processing an IOCTL call to set metainfo. This suggests a problem with how the system handles...