Linux Kernel
93 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2021-34981 | 4.15.0-118-generic | Linux Kernel Bluetooth CMTP Module Double Free Privilege Escalation Vulnerability | HIGH 7.5 | 0.2 % | ||
| CVE-2024-1086 | 3.15 – < 6.8 | Use-after-free in Linux kernel's netfilter: nf_tables component | HIGH 7.8 | 28 % | KEV | |
| CVE-2024-1085 | 5.13 – < 6.8 | Use-after-free in Linux kernel's netfilter: nf_tables component | HIGH 7.8 | 0.3 % | ||
| CVE-2024-0775 | < 4.14.315 ; 4.15 – < 4.19.283 ; 4.20 – < 5.4.243 ; … | Kernel: use-after-free while changing the mount option in __ext4_remount leading | HIGH 7.1 | 0.2 % | ||
| CVE-2024-0565 | 4.19 – < 5.10.211 ; 5.11 – < 5.15.150 ; 5.16 – < 6.1.69 ; … | Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard o… | HIGH 7.4 | 2.0 % | ||
| CVE-2023-6932 | 2.6.12 – < 6.7 | Use-after-free in Linux kernel's ipv4: igmp component | HIGH 7.8 | 0.4 % | ||
| CVE-2023-6817 | 5.6 – < 6.7 | Use-after-free in Linux kernel's netfilter: nf_tables component | HIGH 7.8 | 0.3 % | ||
| CVE-2023-6610 | < 6.1.74 ; 6.2 – < 6.6.13 | Kernel: oob access in smb2_dump_detail | HIGH 7.1 | 0.4 % | ||
| CVE-2023-6111 | 6.6 – < 6.7 | Use-after-free in Linux kernel's netfilter: nf_tables component | HIGH 7.8 | 0.3 % | ||
| CVE-2023-5717 | 4.4 – < 6.6 | Out-of-bounds write in Linux kernel's Linux Kernel Performance Events (perf) component | HIGH 7.8 | 0.9 % | ||
| CVE-2023-5345 | 0.0 – < 6.6 | Use-after-free in Linux kernel's fs/smb/client component | HIGH 7.8 | 0.5 % | ||
| CVE-2023-5197 | 5.9 – < 6.6 | Use-after-free in Linux kernel's netfilter: nf_tables component | HIGH 7.8 | 0.4 % | ||
| CVE-2023-4921 | 3.8 – < 6.6 | Use-after-free in Linux kernel's net/sched: sch_qfq component | HIGH 7.8 | 0.4 % | ||
| CVE-2023-4623 | 2.6.12 – < 6.6 | Use-after-free in Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component | HIGH 7.8 | 0.3 % | ||
| CVE-2023-4622 | 4.2 – < 4.14.324 ; 4.15 – < 4.19.293 ; 4.20 – < 5.4.255 ; … | Use-after-free in Linux kernel's af_unix component | HIGH 7.8 | 0.6 % | ||
| CVE-2023-4244 | 0.0 – < 4.19.316 ; 4.20 – < 5.4.262 ; 5.5 – < 5.10.198 ; … | Use-after-free in Linux kernel's netfilter: nf_tables component | HIGH 7.8 | 0.2 % | ||
| CVE-2023-4208 | 3.18 – < 6.5 | Use-after-free in Linux kernel's net/sched: cls_u32 component | HIGH 7.8 | 0.3 % | ||
| CVE-2023-4207 | 3.18 – < 6.5 | Use-after-free in Linux kernel's net/sched: cls_fw component | HIGH 7.8 | 0.3 % | ||
| CVE-2023-4206 | 3.18 – < 6.5 | Use-after-free in Linux kernel's net/sched: cls_route component | HIGH 7.8 | 0.6 % | ||
| CVE-2023-4015 | 6.4 – < 6.5 | Use-after-free in Linux kernel's netfilter: nf_tables component | HIGH 7.8 | 0.3 % | ||
| CVE-2023-3777 | 5.9 – < 6.5 | Use-after-free in Linux kernel's netfilter: nf_tables component | HIGH 7.8 | 0.4 % | ||
| CVE-2023-3776 | 2.6 – < 6.5 | Use-after-free in Linux kernel's net/sched: cls_fw component | HIGH 7.8 | 0.5 % | ||
| CVE-2023-3611 | 3.8 – < 6.5 | Out-of-bounds write in Linux kernel's net/sched: sch_qfq component | HIGH 7.8 | 0.3 % | ||
| CVE-2023-3610 | 5.9 – < 6.4 | Use-after-free in Linux kernel's netfilter: nf_tables component | HIGH 7.8 | 0.2 % | ||
| CVE-2023-3609 | 4.14.0 – < 4.14.322 ; 4.15.0 – < 4.19.291 ; 4.20.0 – < 5.4.248 ; … | Use-after-free in Linux kernel's net/sched: cls_u32 component | HIGH 7.8 | 0.5 % | ||
| CVE-2023-3389 | 5.13 – < 6.4 ; 5.10.162 – < 5.10.185 | Use after free in io_uring in the Linux Kernel | HIGH 7.8 | 0.7 % | ||
| CVE-2023-3090 | 3.19 – < 6.4 | Out-of-bounds write in Linux kernel's ipvlan network driver | HIGH 7.8 | 0.5 % | ||
| CVE-2023-3268 | 2.6.22 – < 4.19.283 ; 4.20 – < 5.4.243 ; 5.5 – < 5.10.180 ; … | An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs. This | HIGH 7.1 | 0.5 % | ||
| CVE-2023-2008 | 4.20 – < 5.4.202 ; 5.5 – < 5.10.127 ; 5.11 – < 5.15.51 ; … | Kernel: udmabuf: improper validation of array index leading to local privilege escalation | HIGH 8.2 | 1.0 % | ||
| CVE-2022-42432 | 6.0-rc2 | This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel 6.0-rc2. An attack | MEDIUM 5.1 | 0.7 % | ||
| CVE-2022-3649 | n/a | Linux Kernel BPF inode.c nilfs_new_inode use after free | HIGH 7.0 | 1.1 % | ||
| CVE-2022-3646 | n/a | Linux Kernel BPF segment.c nilfs_attach_log_writer memory leak | MEDIUM 4.3 | 1.1 % | ||
| CVE-2022-3640 | n/a | Linux Kernel Bluetooth l2cap_core.c l2cap_conn_del use after free | HIGH 8.8 | 1.2 % | ||
| CVE-2022-3637 | n/a | Linux Kernel BlueZ jlink.c jlink_init denial of service | MEDIUM 5.5 | 0.3 % | ||
| CVE-2022-3636 | 33fc42de33278b2b3ec6f3390512987bc29a62b7 | Linux Kernel Ethernet mtk_ppe.c __mtk_ppe_check_skb use after free | MEDIUM 5.1 | 0.4 % | ||
| CVE-2022-3635 | n/a | Linux Kernel IPsec idt77252.c tst_timer use after free | HIGH 7.0 | 0.4 % | ||
| CVE-2022-3633 | n/a | Linux Kernel transport.c j1939_session_destroy memory leak | LOW 3.5 | 0.3 % | ||
| CVE-2022-3630 | n/a | Linux Kernel IPsec cookie.c memory leak | MEDIUM 5.5 | 0.3 % | ||
| CVE-2022-3629 | n/a | Linux Kernel af_vsock.c vsock_connect memory leak | LOW 3.3 | 0.4 % | ||
| CVE-2022-3625 | n/a | Linux Kernel IPsec devlink.c devlink_param_get use after free | HIGH 7.8 | 0.3 % | ||
| CVE-2022-3624 | n/a | Linux Kernel IPsec bond_alb.c rlb_arp_xmit memory leak | LOW 3.5 | 0.3 % | ||
| CVE-2022-3623 | n/a | Linux Kernel BPF gup.c follow_page_pte race condition | HIGH 7.5 | 1.1 % | ||
| CVE-2022-3621 | n/a | Linux Kernel nilfs2 inode.c nilfs_bmap_lookup_at_level null pointer dereference | MEDIUM 6.5 | 1.7 % | ||
| CVE-2022-3619 | n/a | Linux Kernel Bluetooth l2cap_core.c l2cap_recv_acldata memory leak | MEDIUM 4.3 | 0.6 % | ||
| CVE-2022-3606 | n/a | Linux Kernel BPF libbpf.c find_prog_by_sec_insn null pointer dereference | MEDIUM 5.5 | 0.4 % | ||
| CVE-2022-3595 | n/a | Linux Kernel CIFS sess.c sess_free_buffer double free | MEDIUM 5.5 | 0.3 % | ||
| CVE-2022-3594 | n/a | Linux Kernel BPF r8152.c intr_callback logging of excessive data | MEDIUM 5.3 | 3.1 % | ||
| CVE-2022-3567 | n/a | Linux Kernel IPv6 inet6_dgram_ops race condition | MEDIUM 6.4 | 0.3 % | ||
| CVE-2022-3566 | 4.19.316 ; 5.4.278 ; 5.10.220 ; … | Linux Kernel TCP tcp_setsockopt race condition | LOW 2.1 | 0.7 % | ||
| CVE-2022-3565 | n/a | Linux Kernel Bluetooth l1oip_core.c del_timer use after free | HIGH 7.8 | 0.4 % | ||
| CVE-2022-3564 | n/a | Linux Kernel Bluetooth l2cap_core.c l2cap_reassemble_sdu use after free | HIGH 7.1 | 1.5 % | ||
| CVE-2022-3563 | n/a | Linux Kernel BlueZ mgmt-tester.c read_50_controller_cap_complete null pointer dereference | MEDIUM 5.7 | 0.4 % | ||
| CVE-2022-3545 | n/a | Linux Kernel IPsec nfp_cppcore.c area_cache_get use after free | HIGH 7.8 | 0.4 % | ||
| CVE-2022-3544 | n/a | Linux Kernel Netfilter sysfs.c damon_sysfs_add_target memory leak | MEDIUM 5.5 | 0.3 % | ||
| CVE-2022-3543 | n/a | Linux Kernel BPF af_unix.c unix_release_sock memory leak | MEDIUM 5.5 | 0.3 % | ||
| CVE-2022-3541 | n/a | Linux Kernel BPF spl2sw_driver.c spl2sw_nvmem_get_mac_address use after free | HIGH 7.8 | 0.4 % | ||
| CVE-2022-3534 | 5.10.162 ; 5.15.0 ; 5.15.1 ; … | Linux Kernel libbpf btf_dump.c btf_dump_name_dups use after free | MEDIUM 5.1 | 1.0 % | ||
| CVE-2022-3533 | n/a | Linux Kernel BPF usdt.c parse_usdt_arg memory leak | MEDIUM 5.7 | 0.4 % | ||
| CVE-2022-3526 | n/a | Linux Kernel skb macvlan.c macvlan_handle_frame memory leak | HIGH 7.5 | 1.2 % | ||
| CVE-2022-3524 | n/a | Linux Kernel IPv6 ipv6_renew_options memory leak | MEDIUM 5.5 | 1.1 % | ||
| CVE-2022-3523 | n/a | Linux Kernel Driver memory.c use after free | MEDIUM 5.3 | 1.1 % | ||
| CVE-2022-3521 | n/a | Linux Kernel kcm kcmsock.c kcm_tx_work race condition | LOW 2.6 | 0.2 % | ||
| CVE-2022-3435 | n/a | Linux Kernel IPv4 fib_semantics.c fib_nh_match out-of-bounds | MEDIUM 4.3 | 5.2 % | ||
| CVE-2022-36402 | v4.3-rc1 – < 5.13.0-52* | There is an int overflow vulnerability in vmwgfx driver | MEDIUM 6.3 | 0.6 % | ||
| CVE-2022-3176 | unspecified – < fc78b2fc21f10c4c9c4d5d659a685710ffa63659 | Use-after-free in io_uring in Linux Kernel | HIGH 7.8 | 0.3 % | ||
| CVE-2022-40133 | v4.20-rc1 – < 5.13.0-52* | There is an UAF vulnerability in vmwgfx driver | MEDIUM 6.3 | 0.6 % | ||
| CVE-2022-38457 | v4.20-rc1 – < 5.13.0-52* | There is an UAF vulnerability in vmwgfx driver | MEDIUM 6.3 | 0.6 % | ||
| CVE-2022-38096 | v4.20-rc1 – < 5.13.0-52* | There is a NULL pointer vulnerability in vmwgfx driver | MEDIUM 6.3 | 0.8 % | ||
| CVE-2022-36280 | v3.2-rc1 – < 5.13.0-52* | There is an out-of-bounds write vulnerability in vmwgfx driver | MEDIUM 6.3 | 0.8 % | ||
| CVE-2021-4037 | * – < 5.4.241 ; 5.5 – < 5.10.146 | Kernel: security regression for cve-2018-13405 | HIGH 7.8 | 0.3 % | ||
| CVE-2022-29581 | unspecified – < 5.18 ; 4.14 – < unspecified | Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root. T | HIGH 7.8 | 0.9 % | ||
| CVE-2022-1116 | unspecified – < 5.4.189 ; 5.4.24 – < unspecified | Integer Overflow or Wraparound vulnerability in io_uring of Linux Kernel allows local attacker to cause memory corruption and escalate privi | HIGH 7.8 | 0.5 % | ||
| CVE-2022-1353 | < 4.9.311 ; 4.10 – < 4.14.276 ; 4.15 – < 4.19.238 ; … | A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a local, unprivileged use | HIGH 7.1 | 0.4 % | ||
| CVE-2022-1055 | 5.1.0 – < 5.4.177 ; 5.5.0 – < 5.10.97 ; 5.11.0 – < 5.15.20 ; … | Use after Free in tc_new_tfilter allowing for privilege escalation in Linux Kernel | HIGH 8.6 | 0.5 % | ||
| CVE-2022-0742 | unspecified – 5.13 | Memory leak in ICMP6 in Linux Kernel | CRITICAL 9.1 | 5.0 % | ||
| CVE-2021-4090 | 5.11 – < 5.15.5 | An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel. Missing sanity may lead to a write beyond bmval[bmlen-1] | HIGH 7.1 | 0.3 % | ||
| CVE-2021-34866 | 5.14-rc3 | This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.14-rc3. An attacker must first | HIGH 8.8 | 1.0 % | ||
| CVE-2021-31440 | 5.11.15 | This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An attacker must first o | HIGH 8.8 | 1.8 % | ||
| CVE-2021-3483 | < 4.4.265 ; 4.5 – < 4.9.265 ; 4.10 – < 4.14.229 ; … | A flaw was found in the Nosy driver in the Linux kernel. This issue allows a device to be inserted twice into a doubly-linked list, leading | HIGH 7.8 | 0.4 % | ||
| CVE-2021-3501 | 5.9 – < 5.10.32 ; 5.11 – < 5.11.16 | A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, whic | HIGH 7.1 | 0.4 % | ||
| CVE-2021-3444 | trunk – < 5.12-rc1 ; 5.11 – < 5.11.2 ; 5.10 – < 5.10.19 ; … | Linux kernel bpf verifier incorrect mod32 truncation | HIGH 7.8 | 0.6 % | ||
| CVE-2019-19332 | 3.13 through 5.4 | An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel's KVM hypervisor ha | MEDIUM 6.1 | 0.7 % | ||
| CVE-2019-14815 | n/a | A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marvell Wifi Driver. | HIGH 7.8 | 0.5 % | ||
| CVE-2014-3180 | before 3.17 | In kernel/compat.c in the Linux kernel before 3.17, as used in Google Chrome OS and other products, there is a possible out-of-bounds read. | CRITICAL 9.1 | 1.0 % | ||
| CVE-2019-14814 | all versions up to, excluding 5.3 | There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, tha | HIGH 7.8 | 0.9 % | ||
| CVE-2019-14816 | all versions up to, excluding 5.3 | There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allo | HIGH 7.8 | 0.9 % | ||
| CVE-2019-14821 | all through 5.3 | An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements t | HIGH 8.8 | 0.8 % | ||
| CVE-2018-10853 | 4.18 | A flaw was found in the way Linux kernel KVM hypervisor before 4.18 emulated instructions such as sgdt/sidt/fxsave/fxrstor. It did not check | HIGH 7.8 | 0.5 % | ||
| CVE-2018-5391 | 3.9 – < 3.9* | The Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified pac… | HIGH 7.5 | 32 % | ||
| CVE-2017-2634 | 2.6.22.17 | It was found that the Linux kernel's Datagram Congestion Control Protocol (DCCP) implementation before 2.6.22.17 used the IPv4-only inet_sk_ | HIGH 7.5 | 5.2 % | ||
| CVE-2017-2618 | 4.9.10 | A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty (null) write | MEDIUM 5.5 | 0.5 % | ||
| CVE-2017-7558 | 4.7-rc1 through 4.13 | A kernel data leak due to an out-of-bound read was found in the Linux kernel in inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() f | HIGH 7.5 | 3.6 % | ||
| CVE-2018-10872 | n/a | A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. | MEDIUM 6.5 | 0.5 % |