https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 09:53:55 +0000 https://cve.radiocsirt.org/vuln/cve-2015-7515 <p>The aiptek_probe function in drivers/input/tablet/aiptek.c in the Linux kernel before 4.4 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted USB device that lacks endpoints.</p> <p>The aiptek_probe function in drivers/input/tablet/aiptek.c in the Linux kernel before 4.4 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted USB device that lacks endpoints.</p> https://cve.radiocsirt.org/vuln/cve-2015-7515 https://cve.radiocsirt.org/vuln/usn-2968-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux</p> <p>Ralf Spenneberg discovered that the Aiptek Tablet USB device driver in the Linux kernel did not properly validate the endpoints reported by the device. An attacker with physical access could cause a denial of service (system crash). (CVE-2015-7515)</p> <p>Ben Hawkes discovered that the Linux kernel&#39;s AIO interface allowed single writes greater than 2GB, which could cause an integer overflow when writing to certain filesystems, socket or device types. A local attacker could this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2015-8830)</p> <p>It was discovered that the Linux kernel did not keep accurate track of pipe buffer details when error conditions occurred, due to an incomplete fix for CVE-2015-1805. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code with administrative privileges. (CVE-2016-0774)</p> <p>Zach Riggle discovered that the Linux kernel&#39;s list poison feature did not take into account the mmap_min_addr value. A local attacker could use this to bypass the kernel&#39;s poison-pointer protection mechanism while attempting to exploit an existing kernel vulnerability. (CVE-2016-0821)</p> <p>Ralf Spenneberg discovered that the USB sound subsystem in the Linux kernel did not properly validate USB device descriptors. An attacker with physical access could use this to cause a denial of service (system crash). (CVE-2016-2184)</p> <p>Ralf Spenneberg discovered that the ATI Wonder Remote II USB driver in the…</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux</p> <p>Ralf Spenneberg discovered that the Aiptek Tablet USB device driver in the Linux kernel did not properly validate the endpoints reported by the device. An attacker with physical access could cause a denial of service (system crash). (CVE-2015-7515)</p> <p>Ben Hawkes discovered that the Linux kernel&#39;s AIO interface allowed single writes greater than 2GB, which could cause an integer overflow when writing to certain filesystems, socket or device types. A local attacker could this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2015-8830)</p> <p>It was discovered that the Linux kernel did not keep accurate track of pipe buffer details when error conditions occurred, due to an incomplete fix for CVE-2015-1805. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code with administrative privileges. (CVE-2016-0774)</p> <p>Zach Riggle discovered that the Linux kernel&#39;s list poison feature did not take into account the mmap_min_addr value. A local attacker could use this to bypass the kernel&#39;s poison-pointer protection mechanism while attempting to exploit an existing kernel vulnerability. (CVE-2016-0821)</p> <p>Ralf Spenneberg discovered that the USB sound subsystem in the Linux kernel did not properly validate USB device descriptors. An attacker with physical access could use this to cause a denial of service (system crash). (CVE-2016-2184)</p> <p>Ralf Spenneberg discovered that the ATI Wonder Remote II USB driver in the…</p> https://cve.radiocsirt.org/vuln/usn-2968-1