Linux kernel
48 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-3220 | 6.2.0-rc2 | An issue was discovered in the Linux kernel through 6.1-rc8. dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c lacks check o | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-1652 | Kernel 6.2 RC5 | A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel. This issue could all | HIGH 7.1 | 0.2 % | ||
| CVE-2023-1079 | unknown | A flaw was found in the Linux kernel. A use-after-free may be triggered in asus_kbd_backlight_set when plugging/disconnecting in a malicious | MEDIUM 6.8 | 0.5 % | ||
| CVE-2023-1078 | unknown | A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol. The rds_rm_zerocopy_callback() uses list_entry() on the he | HIGH 7.8 | 0.2 % | ||
| CVE-2023-1077 | unknown | In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry wil | HIGH 7.0 | 0.3 % | ||
| CVE-2023-1076 | unknown | A flaw was found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0 due to a type confusion in their initializati | MEDIUM 5.5 | 0.3 % | ||
| CVE-2023-0210 | Kernel 6.2 RC4 | A bug affects the Linux kernel’s ksmbd NTLMv2 authentication and is known to crash the OS immediately in Linux-based systems. | HIGH 7.5 | 72 % | ||
| CVE-2023-1583 | affected kernel 5.19, 6.0, 6.1, 6.2, 6.3 | A NULL pointer dereference was found in io_file_bitmap_get in io_uring/filetable.c in the io_uring sub-component in the Linux Kernel. When f | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-41858 | unknown | A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sl_tx_timeout in | HIGH 7.1 | 0.3 % | ||
| CVE-2022-4543 | all versions | A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local attacker to leak KASLR b | MEDIUM 5.5 | 1.0 % | ||
| CVE-2022-4382 | unknown | A use-after-free flaw caused by a race among the superblock operations in the gadgetfs Linux driver was found. It could be triggered by yank | MEDIUM 6.4 | 0.5 % | ||
| CVE-2022-4379 | Linux kernel through v6.1-rc8 | A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel. This flaw allows an attacker to con | HIGH 7.5 | 6.6 % | ||
| CVE-2022-3344 | Affected versions <= 6.0.3 | A flaw was found in the KVM's AMD nested virtualization (SVM). A malicious L1 guest could purposely fail to intercept the shutdown of a coop | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-3586 | Fixed in kernel v6.0 | A flaw was found in the Linux kernel’s networking code. A use-after-free was found in the way the sch_sfb enqueue function used the socket b | MEDIUM 5.5 | 0.5 % | ||
| CVE-2022-3303 | Fixed in kernel 6.0-rc5 | A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference whi | MEDIUM 4.7 | 0.3 % | ||
| CVE-2022-2977 | Linux kernel versions prior to 5.18 | A flaw was found in the Linux kernel implementation of proxied virtualized TPM devices. On a system where virtualized TPM devices are config | HIGH 7.8 | 0.2 % | ||
| CVE-2022-2308 | uknown | A flaw was found in vDPA with VDUSE backend. There are currently no checks in VDUSE kernel driver to ensure the size of the device config sp | MEDIUM 6.5 | 0.2 % | ||
| CVE-2022-2663 | unknown | An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A | MEDIUM 5.3 | 4.1 % | ||
| CVE-2022-1729 | linux kernel 5.18 rc9 | A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The | HIGH 7.0 | 0.3 % | ||
| CVE-2022-1975 | Linux kernel 5.18 rc6 | There is a sleep-in-atomic bug in /net/nfc/netlink.c that allows an attacker to crash the Linux kernel by simulating a nfc device from user- | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-1974 | Linux kernel 5.18 rc6 | A use-after-free flaw was found in the Linux kernel's NFC core functionality due to a race condition between kobject creation and delete. Th | MEDIUM 4.1 | 0.1 % | ||
| CVE-2022-2590 | Linux kernel 5.16 onwards | A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write (COW) breakage of private read-only shar | HIGH 7.0 | 0.9 % | ||
| CVE-2022-3028 | Fixed in kernel 6.0-rc3 | A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_al | HIGH 7.0 | 0.2 % | ||
| CVE-2021-3764 | Fixed in v5.15-rc4 | A memory leak flaw was found in the Linux kernel's ccp_run_aes_gcm_cmd() function that allows an attacker to cause a denial of service. The | MEDIUM 5.5 | 0.3 % | ||
| CVE-2011-4916 | Linux Kernel <= 3.1 | Linux kernel through 3.1 allows local users to obtain sensitive keystroke information via access to /dev/pts/ and /dev/tty*. | MEDIUM 5.5 | 0.4 % | ||
| CVE-2011-4917 | Linux kernel through 3.1 | In the Linux kernel through 3.1 there is an information disclosure issue via /proc/stat. | MEDIUM 5.5 | 0.5 % | ||
| CVE-2021-21781 | Linux Kernel v5.4.54, Linux Kernel v5.4.66 | An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54. The latest version (5.1 | MEDIUM 4.0 | 0.5 % | ||
| CVE-2021-22555 | 2.6.19-rc1 – < unspecified | Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE | HIGH 8.3 | 79 % | KEV | |
| CVE-2020-27815 | 5.9.6 | A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to | HIGH 7.8 | 0.8 % | ||
| CVE-2020-25669 | 5.9.4 | A vulnerability was found in the Linux Kernel where the function sunkbd_reinit having been scheduled by sunkbd_interrupt before sunkbd being | HIGH 7.8 | 0.6 % | ||
| CVE-2020-25668 | 5.9.2 | A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading to a use after free i | HIGH 7.0 | 1.0 % | ||
| CVE-2020-25673 | All | A vulnerability was found in Linux kernel where non-blocking socket in llcp_sock_connect() leads to leak and eventually hanging-up the syste | MEDIUM 5.5 | 0.5 % | ||
| CVE-2020-25671 | All | A vulnerability was found in Linux Kernel, where a refcount leak in llcp_sock_connect() causing use-after-free which might lead to privilege | HIGH 7.8 | 0.5 % | ||
| CVE-2020-25670 | All | A vulnerability was found in Linux Kernel where refcount leak in llcp_sock_bind() causing use-after-free which might lead to privilege escal | HIGH 7.8 | 0.6 % | ||
| CVE-2020-25672 | All | A memory leak vulnerability was found in Linux kernel in llcp_sock_connect | HIGH 7.5 | 3.3 % | ||
| CVE-2020-28588 | Linux Kernel v5.10-rc4,Linux Kernel v5.4.66,Linux Kernel v5.9.8 | An information disclosure vulnerability exists in the /proc/pid/syscall functionality of Linux Kernel 5.1 Stable and 5.4.66. More specifical | MEDIUM 5.5 | 1.1 % | ||
| CVE-2021-3411 | Linux kernel 5.10 | A flaw was found in the Linux kernel in versions prior to 5.10. A violation of memory access was found while detecting a padding of int3 in | MEDIUM 6.7 | 0.4 % | ||
| CVE-2020-15437 | 5.7 (verified), possibly others 4.18 | The Linux kernel before version 5.8 is vulnerable to a NULL pointer dereference in drivers/tty/serial/8250/8250_core.c:serial8250_isa_init_p | MEDIUM 4.4 | 0.4 % | ||
| CVE-2020-15436 | 5.7 (verified), possibly others 4.18 | Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of ser | MEDIUM 6.7 | 0.9 % | ||
| CVE-2020-14331 | All versions of the Linux kernel | A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the | MEDIUM 6.6 | 0.6 % | ||
| CVE-2011-0699 | 2.6.37 | Integer signedness error in the btrfs_ioctl_space_info function in the Linux kernel 2.6.37 allows local users to cause a denial of service ( | HIGH 7.0 | 0.3 % | ||
| CVE-2011-4915 | through 3.1 | fs/proc/base.c in the Linux kernel through 3.1 allows local users to obtain sensitive keystroke information via access to /proc/interrupts. | MEDIUM 5.5 | 0.5 % | ||
| CVE-2011-2498 | v2.3.36 before v2.6.39 | The Linux kernel from v2.3.36 before v2.6.39 allows local unprivileged users to cause a denial of service (memory consumption) by triggering | MEDIUM 5.5 | 0.4 % | ||
| CVE-2019-5108 | Linux 4.14.98-v7+ | An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerabilit | HIGH 7.4 | 10 % | ||
| CVE-2019-8956 | 4.20.x prior to 4.20.8 ; 4.19.x prior to 4.19.21 | In the Linux Kernel before versions 4.20.8 and 4.19.21 a use-after-free error in the "sctp_sendmsg()" function (net/sctp/socket.c) when hand | HIGH 7.8 | 1.1 % | ||
| CVE-2017-15116 | Linux kernel | The rngapi_reset function in crypto/rng.c in the Linux kernel before 4.2 allows attackers to cause a denial of service (NULL pointer derefer | MEDIUM 5.5 | 0.4 % | ||
| CVE-2017-12188 | Linux kernel | arch/x86/kvm/mmu.c in the Linux kernel through 4.13.5, when nested virtualisation is used, does not properly traverse guest pagetable entrie | HIGH 7.8 | 0.4 % | ||
| CVE-2017-7477 | Linux kernel | Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a deni | HIGH 7.0 | 0.4 % |