Linux

13 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2023-32253< 5.15.112 ; 6.0.0 – < 6.0.* ; 6.1.0 – < 6.1.28 ; …Kernel: deadlock in ksmbd_find_crypto_ctx()MEDIUM 5.90.3 %
CVE-2023-32255< 5.15.111 ; 6.0.0 – < 6.0.* ; 6.1.0 – < 6.1.28 ; …Kernel: memory leak via ksmbd session setup request with unknown ntlmssp message typeMEDIUM 5.30.5 %
CVE-2023-32256< 5.15.145 ; 6.0.0 – < 6.0.* ; 6.1.0 – < 6.1.29 ; …Kernel: ksmbd race issue from smb2 close and logoff with multichannelHIGH 7.50.6 %
CVE-2023-32251< 5.15.145 ; 6.0.0 – < 6.0.* ; 6.1.0 – < 6.1.29 ; …Kernel: ksmbd brute force delay bypass via asynchronous requestsLOW 3.70.5 %
CVE-2023-2593< 6.2-rc3Kernel: ksmbd memory exhaustion denial-of-service vulnerabilityMEDIUM 5.90.8 %
CVE-2023-2177Linux Kernel prior to Kernel 5.19 RC17A null pointer dereference issue was found in the sctp network protocol in net/sctp/stream_sched.c in Linux Kernel. If stream_in allocation MEDIUM 5.50.2 %
CVE-2023-28328Linux Kernel prior to kernel 6.2 RC1 – < 6.2A NULL pointer dereference flaw was found in the az6027 driver in drivers/media/usb/dev-usb/az6027.c in the Linux Kernel. The message from uMEDIUM 5.50.2 %
CVE-2023-28327LinuxA NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unix_diag_get_exact in the Linux Kernel. The newly alloMEDIUM 5.50.2 %
CVE-2023-2166Linux Kernel version prior to Kernel 6.1 RC9A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in MEDIUM 5.50.2 %
CVE-2023-1990Linux Kernel prior to Kernel 6.3 RC3A use-after-free flaw was found in ndlc_remove in drivers/nfc/st-nci/ndlc.c in the Linux Kernel. This flaw could allow an attacker to crash MEDIUM 4.70.2 %
CVE-2023-19892.6.24 – < 4.14.326 ; 4.15 – < 4.19.295 ; 4.20 – < 5.4.257 ; …Kernel: use after free bug in btsdio_remove due to race conditionHIGH 7.00.4 %
CVE-2023-1582Linux Kernel prior to Kernel 5.7 RC14A race problem was found in fs/proc/task_mmu.c in the memory management sub-component in the Linux kernel. This issue may allow a local attaMEDIUM 4.70.1 %
CVE-2022-31036.0-rc3off-by-one in io_uring module.HIGH 7.80.3 %