amd64 kernel driver vulnerabilities and exploits

(subscribe to this query)

4.9

CVSSv2

HWiNFO AMD64 Kernel driver version 8.98 and lower allows an unprivileged user to send an IOCTL to the device driver. If input and/or output buffer pointers are NULL or if these buffers' data are invalid, a NULL/invalid pointer access occurs, resulting in a Windows kernel pan...

Hwinfo Amd64 Kernel Driver

1 Github repository

3.6

CVSSv2

HWiNFO AMD64 Kernel driver version 8.98 and lower allows an unprivileged user to send IOCTL 0x85FE2608 to the device driver with the HWiNFO32 symbolic device name, resulting in direct physical memory read or write.

Hwinfo Amd64 Kernel Driver

1 Github repository

7.9

CVSSv2

The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on Wireless LAN functionality is configured, a malicious event frame can be constructed to trigger an heap buffer overflow in the brc...

Broadcom Brcmfmac Driver -Linux Linux Kernel

4.3

CVSSv2

The ath9k_htc_set_bssid_mask function in drivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel up to and including 3.12 uses a BSSID masking approach to determine the set of MAC addresses on which a Wi-Fi device is listening, which allows remote malicious users to dis...

1 EDB exploit

7.9

CVSSv2

The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame validation bypass. If the brcmfmac driver receives a firmware event frame from a remote source, the is_wlc_event_frame function will cause this frame to be discarde...

Broadcom Brcmfmac Driver -Redhat Enterprise Linux 6.0 Redhat Enterprise Linux 7.0

2.1

CVSSv2

The vhost_dev_ioctl function in drivers/vhost/vhost.c in the Linux kernel prior to 4.1.5 allows local users to cause a denial of service (memory consumption) via a VHOST_SET_LOG_FD ioctl call that triggers permanent file-descriptor allocation.

Linux Linux Kernel

4

CVSSv2

The disconnect method in the Philips USB Webcam (pwc) driver in Linux kernel 2.6.x prior to 2.6.22.6 "relies on user space to close the device," which allows user-assisted local malicious users to cause a denial of service (USB subsystem hang and CPU consumption in khub...

4.9

CVSSv2

drivers/usb/serial/whiteheat.c in the Linux kernel prior to 4.2.4 allows physically proximate malicious users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted USB device. NOTE: this ID was incorrectly used fo...

Linux Linux Kernel

7.2

CVSSv2

The Linux kernel prior to 2.6.31-rc7 does not properly prevent mmap operations that target page zero and other low memory addresses, which allows local users to gain privileges by exploiting NULL pointer dereference vulnerabilities, related to (1) the default configuration of the...

7.8

CVSSv2

The eisa_eeprom_read function in the parisc isa-eeprom component (drivers/parisc/eisa_eeprom.c) in the Linux kernel prior to 2.6.31-rc6 allows local users to access restricted memory via a negative ppos argument, which bypasses a check that assumes that ppos is positive and cause...

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook