Memory corruption while parsing the memory map info in IOCTL calls.
Memory corruption while invoking IOCTL map buffer request from userspace.
Memory corruption while processing memory map or unmap IOCTL operations simultaneously.
Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently.
Memory corruption while processing IOCTL calls to unmap the buffers.
Memory corruption while processing concurrent IOCTL calls.
Memory corruption while processing IOCTL calls to add route entry in the HW.
Memory corruption while invoking IOCTL calls to unmap the DMA buffers.
Memory corruption while processing IOCTL call to set metainfo.
Memory corruption while processing IOCTL call to get the mapping.
Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver.
Memory corruption while processing IOCTL calls.
Memory corruption while IOCTL call is invoked from user-space to read board data.
Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.
Memory corruption while handling different IOCTL calls from the user-space simultaneously.
Memory corruption while processing an IOCTL command with an arbitrary address.
Memory corruption while processing IOCTL call for getting group info.
Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.
Memory corruption when IOCTL call is invoked from user-space to read board data.
Memory corruption when another driver calls an IOCTL with invalid input/output buffer.
Page 1+ Next →