Valentina Palmiotti

The NVIDIA Display Driver for Linux contains a race condition that may allow a local attacker to escalate privileges. Exploitation of this issue could lead to code execution, privilege escalation, data tampering, denial of service, and information disclosure. A race condition occurs when multiple processes or threads access shared resources simultaneously, resulting in unpredictable behavior and potential security breaches.

The issue is related to a use-after-free vulnerability in the Microsoft Streaming Service of Windows operating systems, which can allow an attacker to elevate their privileges. This vulnerability can be exploited locally.

An elevation-of-privilege issue exists in the Microsoft Streaming Service Proxy for Windows operating systems. The flaw is caused by a memory buffer overflow, which occurs when an operation exceeds the allocated memory boundaries. A successful exploit could allow an attacker to increase their privilege level on the affected system.

The issue is related to the SPNEGO Extended Negotiation (NEGOEX) security mechanism in Microsoft Windows, which can lead to information disclosure. It allows remote attackers to execute arbitrary code and affect the system. The vulnerability can be exploited through various Windows application protocols that authenticate, such as RDP and SMB.

The issue is related to a buffer overflow in the loop rw iter function in the Linux kernel's io uring subsystem, allowing local users to gain privileges. This is due to an error in the implementation of the io uring interface, leading to access to already freed memory blocks. The vulnerability can be exploited to create a working exploit, allowing for privilege escalation.