CyberRota Analysis
AI-GeneratedIBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable due to improper validation of user-supplied pointers in the WfpMonitor kernel driver, which can lead to system crashes or unauthorized kernel-memory access by a privileged local attacker. Organizations using these versions should prioritize addressing this vulnerability to mitigate risks associated with potential system instability and data exposure. This is particularly critical for environments where sensitive data protection is paramount.
Original NVD Description
IBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by an improper validation of user-supplied pointers in the WfpMonitor kernel driver. Certain METHOD_NEITHER IOCTL handlers dereference user-controlled pointers without adequate probing and exception handling, potentially allowing a privileged local attacker to cause a system crash or perform limited kernel-memory reads.
Related CVEs
Other vulnerabilities affecting the same vendor(s)