1812 matches found
kernel: KVM: cmpxchg_gpte can write to pfns outside the userspace region
A flaw was found in KVM. When updating a guest's page table entry, vmpgoff was improperly used as the offset to get the page's pfn. As vaddr and vmpgoff are controllable by user-mode processes, this flaw allows unprivileged local users on the host to write outside the userspace region and...
Samsung Mobile Devices Improper Access Control Vulnerability
Samsung mobile devices using Mali GPU contains an improper access control vulnerability in seclog file. Exploitation of the vulnerability exposes sensitive kernel information to the userspace. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25370...
GSD-2022-1006322 KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0
KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.326 by commit...
GSD-2022-1006280 KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0
KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...
GSD-2022-1006069 KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0
KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...
PT-2022-34538 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.291 Description: The issue concerns a scenario where userspace injects an interrupt with GIF=0, potentially leading to a bug. The actual impact and attack plausibility have not yet been proven...
GSD-2022-1005379 KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0
KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...
The vulnerability of the FUSE file system in Linux kernel allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the FUSE file system in Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...
PT-2022-14610 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions affected versions not specified Description: The issue is related to a function called nla parse, which fails to check the length of a parameter, allowing userspace to control nla type. This can lead to out-of-bounds OOB acce...
PT-2022-7439 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the nf osf find function in the netfilter component of the Linux kernel, which incorrectly returns true on mismatch. This leads to copying an uninitialized memo...
[SECURITY] Fedora 37 Update: kernel-headers-5.19.4-300.fc37
Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...
Design/Logic Flaw
Found Linux Kernel flaw in the i740 driver. The Userspace program could pass any values to the driver through ioctl interface. The driver doesn't check the value of 'pixclock', so it may cause a divide by zero error...
UBUNTU-CVE-2022-3061
Found Linux Kernel flaw in the i740 driver. The Userspace program could pass any values to the driver through ioctl interface. The driver doesn't check the value of 'pixclock', so it may cause a divide by zero error...
CVE-2022-3061
Found Linux Kernel flaw in the i740 driver. The Userspace program could pass any values to the driver through ioctl interface. The driver doesn't check the value of 'pixclock', so it may cause a divide by zero error...
CVE-2022-3061
Found Linux Kernel flaw in the i740 driver. The Userspace program could pass any values to the driver through ioctl interface. The driver doesn't check the value of 'pixclock', so it may cause a divide by zero error...
CVE-2022-3061
Found Linux Kernel flaw in the i740 driver. The Userspace program could pass any values to the driver through ioctl interface. The driver doesn't check the value of 'pixclock', so it may cause a divide by zero error...
CVE-2022-0850
A vulnerability was found in linux kernel, where an information leak occurs via ext4extentheader to userspace...
AZL-28062 CVE-2022-0850 affecting package kernel for versions less than 5.15.126.1-1
A vulnerability was found in linux kernel, where an information leak occurs via ext4extentheader to userspace...