kernel
288 published vulnerabilities name this product. The 200 most recent are listed.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-39180 | | Kernel: ksmbd: read request memory leak denial-of-service vulnerability | HIGH 7.5 | 1.4 % | ||
| CVE-2023-39179 | | Kernel: ksmbd: read request out-of-bounds read information disclosure vulnerability | HIGH 7.5 | 1.1 % | ||
| CVE-2023-39176 | fixed in 5aa4fda5aa9c2a5a7bac67b4a12b089ab81fee3c | Kernel: ksmbd: transform header out-of-bounds read information disclosure vulnerability | HIGH 7.5 | 0.7 % | ||
| CVE-2023-4458 | fixed in 17d5b135bb720832364e8f55f6a887a3c7ec8fdb | Kernel: ksmbd: smb2_open out-of-bounds read information disclosure vulnerability | HIGH 7.5 | 0.8 % | ||
| CVE-2023-4134 | | Kernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work() | MEDIUM 5.5 | 0.2 % | ||
| CVE-2024-1312 | fixed in 6.5-rc4 | Kernel: race condition leads to use after free during vma lock in lock_vma_under_rcu | MEDIUM 5.1 | 0.2 % | ||
| CVE-2024-0564 | | Kernel: max page sharing of kernel samepage merging (ksm) may cause memory deduplication | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-6200 | fixed in 6.7-rc7 | Kernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerability | HIGH 7.5 | 2.0 % | ||
| CVE-2024-0607 | < 6.7-rc2 | Kernel: nf_tables: pointer math issue in nft_byteorder_eval() | MEDIUM 6.6 | 0.3 % | ||
| CVE-2024-0646 | < 6.7-rc5 | Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination | HIGH 7.8 | 0.3 % | ||
| CVE-2024-0641 | < 6.6-rc5 | Kernel: deadlock leading to denial of service in tipc_crypto_key_revoke | MEDIUM 5.5 | 0.2 % | ||
| CVE-2024-0639 | < 6.5-rc1 | Kernel: potential deadlock on &net->sctp.addr_wq_lock leading to dos | MEDIUM 5.5 | 0.2 % | ||
| CVE-2024-0582 | | Kernel: io_uring: page use-after-free vulnerability via buffer ring mmap | HIGH 7.8 | 13 % | ||
| CVE-2024-0562 | < 6.0-rc3 | Kernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c | HIGH 7.8 | 0.3 % | ||
| CVE-2024-0443 | < 6.4-rc7 | Kernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline. | MEDIUM 5.5 | 0.2 % | ||
| CVE-2024-0340 | < 6.4-rc6 | Kernel: information disclosure in vhost/vhost.c:vhost_new_msg() | MEDIUM 5.5 | 0.2 % | ||
| CVE-2024-0193 | | Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation | HIGH 7.8 | 0.8 % | ||
| CVE-2023-6560 | fixed in 6.7-rc5 | Kernel: io_uring out of boundary memory access in __io_uaddr_map() | MEDIUM 5.5 | 0.3 % | ||
| CVE-2023-5972 | | Kernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.c | HIGH 7.8 | 0.3 % | ||
| CVE-2023-6238 | | Kernel: nvme: memory corruption via unprivileged user passthrough | MEDIUM 6.7 | 0.3 % | ||
| CVE-2023-6039 | fixed in 6.5-rc5 | Kernel: use-after-free in drivers/net/usb/lan78xx.c in lan78xx_disconnect | MEDIUM 5.5 | 0.3 % | ||
| CVE-2023-1194 | | Use-after-free in parse_lease_state() | HIGH 8.1 | 1.1 % | ||
| CVE-2023-1193 | fixed in 6.3-rc6 | Use-after-free in setup_async_work() | MEDIUM 6.5 | 1.0 % | ||
| CVE-2023-1192 | | Use-after-free in smb2_is_status_io_timeout() | MEDIUM 6.5 | 1.1 % | ||
| CVE-2023-42752 | fixed in 6.6-rc1 | Kernel: integer overflow in igmpv3_newpack leading to exploitable memory access | MEDIUM 5.5 | 0.3 % | ||
| CVE-2023-5158 | fixed in 5.13-rc1 | Possible dos from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.c | MEDIUM 6.5 | 0.2 % | ||
| CVE-2023-4155 | | Sev-es / sev-snp vmgexit double fetch vulnerability | MEDIUM 5.6 | 0.2 % | ||
| CVE-2023-4611 | fixed in 6.5-rc4 | Use after free race between mbind() and vma-locked page fault | HIGH 7.0 | 0.3 % | ||
| CVE-2023-4569 | fixed in 6.5-rc7 | Kernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c | MEDIUM 5.5 | 0.3 % | ||
| CVE-2023-4394 | fixed in 6.0-rc3 | Memory leak in btrfs_get_dev_args_from_path() | MEDIUM 6.7 | 0.2 % | ||
| CVE-2023-4389 | fixed in 5.18-rc3 | Kernel: btrfs: double free in btrfs_get_root_ref() | HIGH 7.1 | 0.3 % | ||
| CVE-2023-32248 | fixed in 6.4-rc1 | Tree connection null pointer dereference denial-of-service vulnerability | HIGH 7.5 | 4.1 % | ||
| CVE-2023-32258 | fixed in 6.4-rc1 | Session race condition remote code execution vulnerability | HIGH 8.1 | 2.5 % | ||
| CVE-2023-32257 | fixed in 6.4-rc1 | Session race condition remote code execution vulnerability | HIGH 8.1 | 2.4 % | ||
| CVE-2023-32252 | fixed in 6.4-rc1 | Session null pointer dereference denial-of-service vulnerability | HIGH 7.5 | 4.1 % | ||
| CVE-2023-32247 | fixed in 6.4-rc1 | Session setup memory exhaustion denial-of-service vulnerability | HIGH 7.5 | 3.9 % | ||
| CVE-2023-2860 | fixed in 6.0-rc5 | Out-of-bounds read when setting hmac data | MEDIUM 4.4 | 0.3 % | ||
| CVE-2023-3863 | fixed in 6.5-rc1 | Use-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.c | MEDIUM 6.4 | 0.2 % | ||
| CVE-2023-2430 | Kernel Linux prior to Kernel 6.2 RC5 | A vulnerability was found due to missing lock for IOPOLL flaw in io_cqring_event_overflow() in io_uring.c in Linux Kernel. This flaw allows | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-0160 | fixed in 6.4-rc1 | Possibility of deadlock in libbpf function sock_hash_delete_elem | MEDIUM 5.5 | 0.3 % | ||
| CVE-2023-3269 | | Distros-[dirtyvma] privilege escalation via non-rcu-protected vma traversal | HIGH 7.8 | 1.3 % | ||
| CVE-2023-32254 | fixed in 6.4-rc1 | Tree connection race condition remote code execution vulnerability | CRITICAL 9.8 | 2.9 % | ||
| CVE-2023-32250 | fixed in 6.4-rc1 | Session race condition remote code execution vulnerability | CRITICAL 9.0 | 2.6 % | ||
| CVE-2023-3338 | fixed in 6.5-rc1 | Crash due to a null pointer dereference in the dn_nsp_send function | MEDIUM 6.5 | 8.5 % | ||
| CVE-2023-1206 | kernel 6.5-rc1 | A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of | MEDIUM 5.7 | 0.6 % | ||
| CVE-2023-3359 | kernel 6.1-rc8 | An issue was discovered in the Linux kernel brcm_nvram_parse in drivers/nvmem/brcm_nvram.c. Lacks for the check of the return value of kzall | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-3358 | kernel 6.1-rc8 | A null pointer dereference was found in the Linux kernel's Integrated Sensor Hub (ISH) driver. This issue could allow a local user to crash | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-3357 | kernel 6.1-rc8 | A NULL pointer dereference flaw was found in the Linux kernel AMD Sensor Fusion Hub driver. This flaw allows a local user to crash the syste | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-3355 | fixed in 6.1-rc8 | Null pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.c | MEDIUM 5.5 | 0.3 % | ||
| CVE-2023-3317 | KErnel version prior to 6.3-rc6 | A use-after-free flaw was found in mt7921_check_offload_capability in drivers/net/wireless/mediatek/mt76/mt7921/init.c in wifi mt76/mt7921 s | HIGH 7.1 | 0.2 % | ||
| CVE-2023-3312 | Kernel version prior to 6.4-rc1 | A vulnerability was found in drivers/cpufreq/qcom-cpufreq-hw.c in cpufreq subsystem in the Linux Kernel. This flaw, during device unbind wil | HIGH 7.5 | 0.9 % | ||
| CVE-2023-3159 | Kernel version prior to Kernel 5.18-rc6 | A use after free issue was discovered in driver/firewire in outbound_phy_packet_callback in the Linux Kernel. In this flaw a local attacker | MEDIUM 6.7 | 0.2 % | ||
| CVE-2023-3141 | Kenrel version prior to Kernel 6.4-rc1 | A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This flaw allows a local | HIGH 7.1 | 0.4 % | ||
| CVE-2023-3111 | Kernel version prior to Kernel 6.0-rc2 | A use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs in the Linux Kernel. This possible flaw ca | HIGH 7.8 | 0.4 % | ||
| CVE-2023-2985 | Kernel version prior to l 6.3-rc1 | A use after free flaw was found in hfsplus_put_super in fs/hfsplus/super.c in the Linux Kernel. This flaw could allow a local user to cause | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-2598 | Kernel prior to 6.4-rc1 | A flaw was found in the fixed buffer registration code for io_uring (io_sqe_buffer_register in io_uring/rsrc.c) in the Linux kernel that all | HIGH 7.8 | 1.4 % | ||
| CVE-2023-3006 | Linux Kernel 6.1-rc1 | A known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, becomes actual again for the new hw AmpereO | MEDIUM 5.5 | 0.3 % | ||
| CVE-2023-2898 | NA | There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileg | MEDIUM 4.7 | 0.2 % | ||
| CVE-2023-2002 | Kernel prior to Kernel 6.4-rc1 | A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock.c in the Linux Kerne | MEDIUM 6.8 | 1.5 % | ||
| CVE-2023-1195 | prior to kernel 6.1 rc3 | A use-after-free flaw was found in reconn_set_ipaddr_from_hostname in fs/cifs/connect.c in the Linux kernel. The issue occurs when it forget | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-1859 | Kernel version prior to 6.3-rc7 | A use-after-free flaw was found in xen_9pfs_front_removet in net/9p/trans_xen.c in Xen transport for 9pfs in the Linux Kernel. This flaw cou | MEDIUM 4.7 | 0.2 % | ||
| CVE-2023-2124 | Linux kernel 6.4-rc1 | An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image after failure (with | HIGH 7.8 | 0.5 % | ||
| CVE-2023-2269 | Linux kernel version 6.2.0 | A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm | MEDIUM 4.4 | 0.2 % | ||
| CVE-2023-2176 | Linux 6.1 | A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel. The improper cleanup result | HIGH 7.8 | 0.2 % | ||
| CVE-2023-2162 | Linux Kernel version prior to Kernel 6.2 RC6 | A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-component in the Linux Kerne | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-1382 | Linux Kernel prior to Kernel 6.1 RC7 | A data race flaw was found in the Linux kernel, between where con is allocated and con->sock is set. This issue leads to a NULL pointer dere | MEDIUM 4.7 | 0.2 % | ||
| CVE-2023-1855 | Linux kernel prior to Kernel 6.3 RC3 | A use-after-free flaw was found in xgene_hwmon_remove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver (xgene-h | MEDIUM 6.3 | 0.2 % | ||
| CVE-2023-1838 | Linux Kernel prior to kernel 5.18 25 | A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a | HIGH 7.1 | 0.3 % | ||
| CVE-2023-1611 | unknown | A use-after-free flaw was found in btrfs_search_slot in fs/btrfs/ctree.c in btrfs in the Linux Kernel.This flaw allows an attacker to crash | MEDIUM 6.3 | 0.2 % | ||
| CVE-2023-1670 | Linux kernel 6.3-rc4 | A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA (PC-card) Ethernet driver was found.A local user could use this flaw to crash | HIGH 7.8 | 0.3 % | ||
| CVE-2022-4744 | Linux kernel 5.16-rc7 | A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register_ | HIGH 7.8 | 0.5 % | ||
| CVE-2023-1637 | Linux kernel 5.18-rc2 | A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-1380 | unknown | A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linu | HIGH 7.1 | 16 % | ||
| CVE-2023-1074 | unknown | A memory leak flaw was found in the Linux kernel's Stream Control Transmission Protocol. This issue may occur when a user starts a malicious | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-1073 | unknown | A memory corruption flaw was found in the Linux kernel’s human interface device (HID) subsystem in how a user inserts a malicious USB device | MEDIUM 6.6 | 0.4 % | ||
| CVE-2023-0179 | unknown | A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack a | HIGH 7.8 | 1.9 % | ||
| CVE-2021-3923 | unknown | A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel s | LOW 2.3 | 0.2 % | ||
| CVE-2023-1252 | Linux kernel 5.16-rc1 | A use-after-free flaw was found in the Linux kernel’s Ext4 File System in how a user triggers several file operations simultaneously with th | HIGH 7.8 | 0.2 % | ||
| CVE-2023-1249 | Linux kernel 5.18-rc1 | A use-after-free flaw was found in the Linux kernel’s core dump subsystem. This flaw allows a local user to crash the system. Only if patch | MEDIUM 5.5 | 0.3 % | ||
| CVE-2023-0590 | Linux kernel 6.1-rc2 | A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem. This flaw leads to a denial | MEDIUM 4.7 | 0.2 % | ||
| CVE-2023-0386 | Linux kernel 6.2-rc6 | A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux | HIGH 7.8 | 7.9 % | KEV | |
| CVE-2022-4095 | Linux Kernel prior to kernel 6.0 rc4 | A use-after-free flaw was found in Linux kernel before 5.19.2. This issue occurs in cmd_hdl_filter in drivers/staging/rtl8712/rtl8712_cmd.c, | HIGH 7.8 | 0.3 % | ||
| CVE-2023-0030 | Linux kernel 5.0-rc1 | A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a memory overflow that causes the nvkm_vma_tail | HIGH 7.8 | 0.2 % | ||
| CVE-2021-33639 | <=4.19.90-2211.4.0.0177, <=5.10.0-60.67.0.92 | REMAP cmd of SVM driver can be used to remap read only memory as read-write, then cause read only memory/file modified. | HIGH 7.5 | 0.5 % | ||
| CVE-2022-3707 | Linux kernel 6.1-rc3 | A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resource overload, causing | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-3424 | unknown | A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first gru_file_unlocked_ioctl function is called by the | HIGH 7.8 | 0.2 % | ||
| CVE-2023-1118 | Linux kernel 6.3-rc1 | A flaw use after free in the Linux kernel integrated infrared receiver/transceiver driver was found in the way user detaching rc device. A l | HIGH 7.8 | 0.3 % | ||
| CVE-2023-0597 | Linux kernel 6.2-rc1 | A flaw possibility of memory leak in the Linux kernel cpu_entry_area mapping of X86 CPU data to memory was found in the way user can guess l | MEDIUM 5.5 | 0.3 % | ||
| CVE-2023-0615 | Linux kernel 6.2-rc6 | A memory leak flaw and potential divide by zero and Integer overflow was found in the Linux kernel V4L2 and vivid test code functionality. T | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-4139 | kernel 6.1-rc7 | An incorrect TLB flush issue was found in the Linux kernel’s GPU i915 kernel driver, potentially leading to random memory corruption or data | HIGH 7.8 | 0.3 % | ||
| CVE-2023-0469 | Linux Kernel prior t oKernel 6.1 RC7 | A use-after-free flaw was found in io_uring/filetable.c in io_install_fixed_file in the io_uring subcomponent in the Linux Kernel during cal | MEDIUM 5.5 | 0.3 % | ||
| CVE-2023-0468 | Linux Kernel prior to Kernel 6.1 RC7 | A use-after-free flaw was found in io_uring/poll.c in io_poll_check_events in the io_uring subcomponent in the Linux Kernel due to a race co | MEDIUM 4.7 | 0.3 % | ||
| CVE-2023-0394 | Linux kernel prior to Kernel 6.2 RC4 | A NULL pointer dereference flaw was found in rawv6_push_pending_frames in net/ipv6/raw.c in the network subcomponent in the Linux kernel. Th | MEDIUM 5.5 | 1.0 % | ||
| CVE-2023-0122 | Linux kernel 6.0-rc4 | A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmet_setup_auth(), allows an attacker to perform a Pre- | HIGH 7.5 | 1.3 % | ||
| CVE-2022-4842 | Linux kernel 6.2-rc1 | A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attr_punch_hole() was found. A local user could use this flaw to c | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-3977 | Linux kernel 6.1-rc1 | A use-after-free flaw was found in the Linux kernel MCTP (Management Component Transport Protocol) functionality. This issue occurs when a u | HIGH 7.8 | 0.3 % | ||
| CVE-2022-3628 | Linux kernel 6.1-rc5 | A buffer overflow flaw was found in the Linux kernel Broadcom Full MAC Wi-Fi driver. This issue occurs when a user connects to a malicious U | MEDIUM 6.6 | 0.6 % | ||
| CVE-2022-4378 | kernel 6.0.12 | A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This f | HIGH 7.8 | 0.4 % | ||
| CVE-2022-4662 | Linux kernel 6.0-rc4 | A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A local user could use | MEDIUM 5.5 | 0.4 % | ||
| CVE-2022-3115 | Linux 5.16-rc6 | An issue was discovered in the Linux kernel through 5.16-rc6. malidp_crtc_reset in drivers/gpu/drm/arm/malidp_crtc.c lacks check of the retu | MEDIUM 5.5 | 0.3 % | ||
| CVE-2022-3114 | Linux 5.16-rc6 | An issue was discovered in the Linux kernel through 5.16-rc6. imx_register_uart_clocks in drivers/clk/imx/clk.c lacks check of the return va | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-3113 | Linux 5.16-rc6 | An issue was discovered in the Linux kernel through 5.16-rc6. mtk_vcodec_fw_vpu_init in drivers/media/platform/mtk-vcodec/mtk_vcodec_fw_vpu. | MEDIUM 5.5 | 0.7 % | ||
| CVE-2022-3112 | Linux 5.16-rc6 | An issue was discovered in the Linux kernel through 5.16-rc6. amvdec_set_canvases in drivers/staging/media/meson/vdec/vdec_helpers.c lacks c | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-3111 | Linux 5.16-rc6 | An issue was discovered in the Linux kernel through 5.16-rc6. free_charger_irq() in drivers/power/supply/wm8350_power.c lacks free of WM8350 | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-3110 | Linux 5.16-rc6 | An issue was discovered in the Linux kernel through 5.16-rc6. _rtw_init_xmit_priv in drivers/staging/r8188eu/core/rtw_xmit.c lacks check of | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-3108 | Linux 5.17-rc6 | An issue was discovered in the Linux kernel through 5.16-rc6. kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kfd_crat.c lacks check | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-3107 | Linux 5.16-rc6 | An issue was discovered in the Linux kernel through 5.16-rc6. netvsc_get_ethtool_stats in drivers/net/hyperv/netvsc_drv.c lacks check of the | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-3106 | Linux 5.16-rc6 | An issue was discovered in the Linux kernel through 5.16-rc6. ef100_update_stats in drivers/net/ethernet/sfc/ef100_nic.c lacks check of the | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-3105 | Linux 5.16-rc6 | An issue was discovered in the Linux kernel through 5.16-rc6. uapi_finalize in drivers/infiniband/core/uverbs_uapi.c lacks check of kmalloc_ | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-3104 | Linux 5.16-rc6 | An issue was discovered in the Linux kernel through 5.16-rc6. lkdtm_ARRAY_BOUNDS in drivers/misc/lkdtm/bugs.c lacks check of the return valu | MEDIUM 5.5 | 0.3 % | ||
| CVE-2022-3903 | Linux kernel 6.1-rc5 | An incorrect read request flaw was found in the Infrared Transceiver USB driver in the Linux kernel. This issue occurs when a user attaches | MEDIUM 4.6 | 0.5 % | ||
| CVE-2022-3238 | Linux kernel 6.1-rc2 | A double-free flaw was found in the Linux kernel’s NTFS3 subsystem in how a user triggers remount and umount simultaneously. This flaw allow | HIGH 7.8 | 0.2 % | ||
| CVE-2022-3577 | Linux kernel 5.19-rc1 | An out-of-bounds memory write flaw was found in the Linux kernel’s Kid-friendly Wired Controller driver. This flaw allows a local user to cr | HIGH 7.8 | 0.3 % | ||
| CVE-2022-3239 | Linux kernel 5.18-rc1 | A flaw use after free in the Linux kernel video4linux driver was found in the way user triggers em28xx_usb_probe() for the Empia 28xx based | HIGH 7.8 | 0.3 % | ||
| CVE-2022-3202 | Linux Kernel version prior to kernel 5.18 rc1 | A NULL pointer dereference flaw in diFree in fs/jfs/inode.c in Journaled File System (JFS)in the Linux kernel. This could allow a local atta | HIGH 7.1 | 0.3 % | ||
| CVE-2022-3170 | fixed in kernel 6.0-rc4 | An out-of-bounds access issue was found in the Linux kernel sound subsystem. It could occur when the 'id->name' provided by the user did not | HIGH 7.8 | 0.2 % | ||
| CVE-2022-3077 | fixed in kernel 5.19 | A buffer overflow vulnerability was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way it handled the I2C_SMBUS_ | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-3169 | 4.19 | A flaw was found in the Linux kernel. A denial of service flaw may occur if there is a consecutive request of the NVME_IOCTL_RESET and the N | MEDIUM 5.5 | 0.3 % | ||
| CVE-2022-2964 | kernel 5.17 | A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contai | HIGH 7.8 | 0.3 % | ||
| CVE-2022-2905 | Linux kernel 6.0-rc4 | An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call function with a key la | MEDIUM 5.5 | 0.4 % | ||
| CVE-2022-3078 | Linux kernel 5.16-rc6 | An issue was discovered in the Linux kernel through 5.16-rc6. There is a lack of check after calling vzalloc() and lack of free after alloca | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-2639 | kernel 5.18 | An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserv | HIGH 7.8 | 0.9 % | ||
| CVE-2020-27784 | unknown | A vulnerability was found in the Linux kernel, where accessing a deallocated instance in printer_ioctl() printer_ioctl() tries to access of | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-3061 | Linux kernel 5.18-rc5 | Found Linux Kernel flaw in the i740 driver. The Userspace program could pass any values to the driver through ioctl() interface. The driver | MEDIUM 5.5 | 0.3 % | ||
| CVE-2022-1508 | Not-Known. | An out-of-bounds read flaw was found in the Linux kernel’s io_uring module in the way a user triggers the io_read() function with some speci | MEDIUM 6.1 | 0.2 % | ||
| CVE-2022-1247 | Not-Known | An issue found in linux-kernel that leads to a race condition in rose_connect(). The rose driver uses rose_neigh->use to represent how many | HIGH 7.0 | 0.3 % | ||
| CVE-2022-1205 | Fixed in kernel v5.18-rc1 | A NULL pointer dereference flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with t | MEDIUM 4.7 | 0.4 % | ||
| CVE-2022-2153 | kernel 5.18 | A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write t | MEDIUM 5.5 | 0.5 % | ||
| CVE-2022-1976 | kernel 5.19-rc1 | A flaw was found in the Linux kernel’s implementation of IO-URING. This flaw allows an attacker with local executable permission to create a | HIGH 7.8 | 0.2 % | ||
| CVE-2022-1204 | Not-Known. | A use-after-free flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protoco | MEDIUM 5.5 | 0.4 % | ||
| CVE-2022-1198 | Fixed in kernel v5.17-rc6 | A use-after-free vulnerabilitity was discovered in drivers/net/hamradio/6pack.c of linux that allows an attacker to crash linux kernel by si | MEDIUM 5.5 | 0.4 % | ||
| CVE-2022-1016 | Affects v3.13-rc1 and later, Fixed in v5.18-rc1 | A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a use-after-free. This issue needs to h | MEDIUM 5.5 | 0.4 % | ||
| CVE-2022-0850 | Fixed in kernel v5.14 rc1 | A vulnerability was found in linux kernel, where an information leak occurs via ext4_extent_header to userspace. | HIGH 7.1 | 0.4 % | ||
| CVE-2022-0812 | Fixed in v5.8-rc6 | An information leak flaw was found in NFS over RDMA in the net/sunrpc/xprtrdma/rpc_rdma.c in the Linux Kernel. This flaw allows an attacker | MEDIUM 4.3 | 1.5 % | ||
| CVE-2022-0480 | Not Known | A flaw was found in the filelock_init in fs/locks.c function in the Linux kernel. This issue can lead to host memory exhaustion due to memcg | MEDIUM 5.5 | 0.3 % | ||
| CVE-2022-0400 | Not Known | An out-of-bounds read vulnerability was discovered in linux kernel in the smc protocol stack, causing remote dos. | HIGH 7.5 | 1.9 % | ||
| CVE-2022-2961 | Linux kernel 6.0-rc2 | A use-after-free flaw was found in the Linux kernel’s PLP Rose functionality in the way a user triggers a race condition by calling bind whi | HIGH 7.0 | 0.3 % | ||
| CVE-2022-1199 | Fixed in kernel v5.18-rc4 | A flaw was found in the Linux kernel. This flaw allows an attacker to crash the Linux kernel by simulating amateur radio from the user space | HIGH 7.5 | 2.2 % | ||
| CVE-2022-1184 | Not-known | A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. This flaw allows a loca | MEDIUM 5.5 | 0.3 % | ||
| CVE-2022-1043 | Fixed in kernel v5.14 rc7 | A flaw was found in the Linux kernel’s io_uring implementation. This flaw allows an attacker with a local account to corrupt system memory, | HIGH 8.8 | 3.9 % | ||
| CVE-2022-0168 | Affects v5.4–5.12, v5.13-rc+HEAD | A denial of service (DOS) issue was found in the Linux kernel’s smb2_ioctl_query_info function in the fs/cifs/smb2ops.c Common Internet File | MEDIUM 4.4 | 0.3 % | ||
| CVE-2021-3669 | Not Known | A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which coul | MEDIUM 5.5 | 0.3 % | ||
| CVE-2021-3864 | Not Known | A flaw was found in the way the dumpable flag setting was handled when certain SUID binaries executed its descendants. The prerequisite is a | HIGH 7.0 | 0.8 % | ||
| CVE-2022-0171 | Fixed in kernel 5.18-rc4 | A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root (host) user-level application to c | MEDIUM 5.5 | 0.3 % | ||
| CVE-2022-2991 | Fixed in kernel 5.15-rc1 | A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of proper validation of the | MEDIUM 6.7 | 0.5 % | ||
| CVE-2022-2959 | Fixed in kernel 5.19 | A race condition was found in the Linux kernel's watch queue due to a missing lock in pipe_resize_ring(). The specific flaw exists within th | HIGH 7.0 | 0.4 % | ||
| CVE-2021-4159 | Fixed in v5.7-rc1 | A vulnerability was found in the Linux kernel's EBPF verifier when handling internal data structures. Internal memory locations could be ret | MEDIUM 4.4 | 0.2 % | ||
| CVE-2021-4155 | Fixed in Kernel v5.16 | A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A | MEDIUM 5.5 | 0.3 % | ||
| CVE-2021-4218 | NA | A flaw was found in the Linux kernel’s implementation of reading the SVC RDMA counters. Reading the counter sysctl panics the system. This f | MEDIUM 5.5 | 0.3 % | ||
| CVE-2022-2978 | Linux kernel 6.0-rc3 | A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_alloc to fail with fo | HIGH 7.8 | 0.2 % | ||
| CVE-2021-4204 | Affects Linux kernel v5.8 or later | An out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This flaw allows a local | HIGH 7.1 | 1.2 % | ||
| CVE-2021-4028 | Fixed in kernel 5.15-rc1 | A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a so | HIGH 7.8 | 0.3 % | ||
| CVE-2021-3736 | Fixed in v5.15-rc1 | A flaw was found in the Linux kernel. A memory leak problem was found in mbochs_ioctl in samples/vfio-mdev/mbochs.c in Virtual Function I/O | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-3714 | Not known | A flaw was found in the Linux kernels memory deduplication mechanism. Previous work has shown that memory deduplication can be attacked via | MEDIUM 5.9 | 1.6 % | ||
| CVE-2022-2938 | kernel 5.17 | A flaw was found in the Linux kernel's implementation of Pressure Stall Information. While the feature is disabled by default, it could allo | HIGH 7.8 | 0.3 % | ||
| CVE-2021-3759 | Fixed in Linux kernel 5.15-rc1 | A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget | MEDIUM 5.5 | 0.4 % | ||
| CVE-2021-3659 | Fixed in Kernel 5.12 | A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the L | MEDIUM 5.5 | 0.3 % | ||
| CVE-2022-2873 | Linux kernel 5.19-rc8 | An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way a user triggers the I | MEDIUM 5.5 | 0.3 % | ||
| CVE-2022-1973 | kernel 5.19 rc1 | A use-after-free flaw was found in the Linux kernel in log_replay in fs/ntfs3/fslog.c in the NTFS journal. This flaw allows a local attacker | HIGH 7.1 | 0.3 % | ||
| CVE-2022-1158 | kernel 5.18 | A flaw was found in KVM. When updating a guest's page table entry, vm_pgoff was improperly used as the offset to get the page's pfn. As vadd | HIGH 7.8 | 0.4 % | ||
| CVE-2022-1012 | Linux kernel version prior to 5.18-rc6 | A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size. This flaw | HIGH 8.2 | 4.4 % | ||
| CVE-2022-1651 | Linux kernel version prior to kernel 5.18 rc1 | A memory leak flaw was found in the Linux kernel in acrn_dev_ioctl in the drivers/virt/acrn/hsm.c function in how the ACRN Device Model emul | HIGH 7.1 | 0.3 % | ||
| CVE-2022-1671 | Linux kernel version prior to kernel 5.18 rc1 | A NULL pointer dereference flaw was found in rxrpc_preparse_s in net/rxrpc/server_key.c in the Linux kernel. This flaw allows a local attack | HIGH 7.1 | 0.3 % | ||
| CVE-2021-33655 | 5.18 5.19.0-rc1 | When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds. | MEDIUM 6.7 | 0.3 % | ||
| CVE-2021-4135 | Linux kernel versions prior to 5.16-rc6 | A memory leak vulnerability was found in the Linux kernel's eBPF for the Simulated networking device driver in the way user uses BPF for the | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-2380 | Linux kernel 5.18-rc1 | The Linux kernel was found vulnerable out of bounds memory access in the drivers/video/fbdev/sm712fb.c:smtcfb_read() function. The vulnerabi | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-2318 | Linux Kernel version prior to kernel 5.19 rc5 | There are use-after-free vulnerabilities caused by timer handler in net/rose/rose_timer.c of linux that allow attackers to crash linux kerne | MEDIUM 5.5 | 0.4 % | ||
| CVE-2022-1852 | kernel 5.19 rc1 | A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the x86_emulate_insn in | MEDIUM 5.5 | 0.3 % | ||
| CVE-2022-2078 | kernel 5.19 rc1 | A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overf | MEDIUM 5.5 | 1.0 % | ||
| CVE-2022-1998 | Linux kernel 5.17-rc3 | A use after free in the Linux kernel File System notify functionality was found in the way user triggers copy_info_records_to_user() call to | HIGH 7.8 | 0.3 % | ||
| CVE-2022-1943 | Linux kernel 5.18-rc7 | A flaw out of bounds memory write in the Linux kernel UDF file system functionality was found in the way user triggers some file operation w | HIGH 7.8 | 0.3 % | ||
| CVE-2022-1789 | no patch information available yet | With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If INVPCID is executed with CR0.PG=0, the invl | MEDIUM 6.8 | 0.3 % | ||
| CVE-2022-1786 | kernel v5.10 and v5.11 | A use-after-free flaw was found in the Linux kernel’s io_uring subsystem in the way a user sets up a ring with IORING_SETUP_IOPOLL with more | HIGH 7.8 | 1.0 % | ||
| CVE-2022-1652 | Linux Kernel through 5.17.5 | Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-free flaw in the bad_fl | HIGH 7.8 | 0.5 % | ||
| CVE-2022-1419 | kernel 5.x | The root cause of this vulnerability is that the ioctl$DRM_IOCTL_MODE_DESTROY_DUMB can decrease refcount of *drm_vgem_gem_object *(created i | HIGH 7.8 | 0.3 % | ||
| CVE-2022-1462 | no information yet | An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition usin | MEDIUM 6.3 | 0.3 % | ||
| CVE-2022-1882 | Linux kernel 5.18-rc8 | A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe post_one_notifi | HIGH 7.8 | 0.4 % | ||
| CVE-2022-1678 | 4.18 – < unspecified ; unspecified – 4.19 | An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP pacing can lead to memory/netns l | HIGH 7.5 | 2.9 % | ||
| CVE-2022-1734 | Linux kernel versions prior to 5.18-rc6 | A flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write whe | HIGH 7.0 | 0.5 % | ||
| CVE-2022-1679 | Linux kernel 5.18-rc7 | A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target | HIGH 7.8 | 0.8 % | ||
| CVE-2022-1516 | Linux kernel 5.18-rc1 | A NULL pointer dereference flaw was found in the Linux kernel’s X.25 set of standardized network protocols functionality in the way a user t | MEDIUM 5.5 | 0.3 % | ||
| CVE-2022-1195 | kernel 5.16 rc1 | A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a local attacker with a user privileg | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-1048 | Linux kernel 5.17-rc9 | A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_f | HIGH 7.0 | 0.2 % | ||
| CVE-2022-1015 | Kernel 5.16.18 | A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. This flaw allows a local user to cau | MEDIUM 6.6 | 1.5 % | ||
| CVE-2022-1280 | kernel 5.17.x | A use-after-free vulnerability was found in drm_lease_held in drivers/gpu/drm/drm_lease.c in the Linux kernel due to a race problem. This fl | MEDIUM 6.3 | 0.3 % | ||
| CVE-2021-3847 | all versions up to, including, kernel 5.17 | An unauthorized access to the execution of the setuid file with capabilities flaw in the Linux kernel OverlayFS subsystem was found in the w | HIGH 7.8 | 0.5 % | ||
| CVE-2022-0998 | Linux kernel 5.17-rc1 | An integer overflow flaw was found in the Linux kernel’s virtio device driver code in the way a user triggers the vhost_vdpa_config_validate | HIGH 7.8 | 0.4 % | ||
| CVE-2020-35501 | affecting all versions up to kernel 5.17 | A flaw was found in the Linux kernels implementation of audit rules, where a syscall can unexpectedly not be correctly not be logged by the | LOW 3.4 | 0.2 % | ||
| CVE-2022-0995 | kernel 5.17 rc8 | An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite p | HIGH 7.8 | 8.9 % | KEV | |
| CVE-2022-0494 | kernel 5.17 rc5 | A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kernel. This flaw allows | MEDIUM 4.4 | 0.4 % | ||
| CVE-2022-0500 | Linux kernel 5.17-rc1 | A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF | HIGH 7.8 | 0.4 % | ||
| CVE-2022-0322 | kernel 5.15 rc6 | A flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP network protocol in the Linux kernel with a | MEDIUM 5.5 | 0.3 % | ||
| CVE-2021-4202 | kernel 5.16 rc2 | A use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface (NCI) in the Linux kernel. This flaw could | HIGH 7.0 | 0.4 % | ||
| CVE-2021-4157 | kernel 5.13-rc1 | An out of memory bounds write flaw (1 or 2 bytes of memory) in the Linux kernel NFS subsystem was found in the way users use mirroring (repl | HIGH 8.0 | 1.6 % | ||
| CVE-2022-0435 | kernel 5.17-rc4 | A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content wh | HIGH 8.8 | 68 % | ||
| CVE-2022-0330 | kernel 5.17-rc2 | A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on | HIGH 7.8 | 0.4 % | ||
| CVE-2021-4203 | kernel 5.15 rc4 | A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and co | MEDIUM 6.8 | 1.7 % | ||
| CVE-2021-4150 | kernel 5.15 rc7 | A use-after-free flaw was found in the add_partition in block/partitions/core.c in the Linux kernel. A local attacker with user privileges c | MEDIUM 5.5 | 0.3 % | ||
| CVE-2021-4149 | kernel 5.15 rc6 | A vulnerability was found in btrfs_alloc_tree_b in fs/btrfs/extent-tree.c in the Linux kernel due to an improper lock operation in btrfs. In | MEDIUM 5.5 | 0.4 % | ||
| CVE-2021-4148 | kernel 5.14.16 | A vulnerability was found in the Linux kernel's block_invalidatepage in fs/buffer.c in the filesystem. A missing sanity check may allow a lo | MEDIUM 5.5 | 0.3 % |