Arnd Bergmann

2 exploits Active since Apr 2017
CVE-2017-8064 WRITEUP HIGH WRITEUP
Linux Kernel 4.9.x-4.10.x < 4.10.12 - Denial of Service via DMA Scatterlist Handling
drivers/media/usb/dvb-usb-v2/dvb_usb_core.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist.
CVSS 7.8
CVE-2023-2007 WRITEUP HIGH WRITEUP
Linux Kernel < 6.0 - Time-of-check Time-of-use Race Condition in DPT I2O Controller Driver
The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel.
CVSS 7.8