Linux Linux Kernel
43 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-24864 | v2.6.12-rc2 – < v6.8-rc2 | Race condition vulnerability in Linux kernel media/dvb-core in dvbdmx_write() | MEDIUM 5.3 | 0.2 % | ||
| CVE-2024-24857 | v4.0-rc1 – < v6.8-rc2 | Race condition vulnerability in Linux kernel bluetooth in conn_info_{min,max}_age_set() | MEDIUM 6.8 | 0.3 % | ||
| CVE-2024-24858 | v4.0-rc1 – < v6.8-rc2 | Race condition vulnerability in Linux kernel net/bluetooth in {conn,adv}_{min,max}_interval_set() | MEDIUM 5.3 | 0.3 % | ||
| CVE-2024-24859 | v4.0-rc1 – < v6.8-rc2 | Race condition vulnerability in Linux kernel bluetooth sniff_{min,max}_interval_set() | MEDIUM 4.8 | 0.7 % | ||
| CVE-2024-24860 | v5.6-rc1 – < v6.8-rc1 | Race condition vulnerability in Linux kernel bluetooth driver in {min,max}_key_size_set() | MEDIUM 5.3 | 0.8 % | ||
| CVE-2024-24861 | v3.1-rc1 – < v6.8-rc1 | Race condition vulnerability in Linux kernel media/xc4000 xc4000_get_frequency() | MEDIUM 6.3 | 0.2 % | ||
| CVE-2024-24855 | v2.6.34-rc2 – < v6.5-rc2 | Race condition vulnerability in Linux kernel scsi device driver lpfc_unregister_fcf_rescan() | MEDIUM 5.0 | 0.2 % | ||
| CVE-2024-23196 | v5.6-rc1 – < v6.5-rc1 | Race condition vulnerability in Linux kernel sound/hda snd_hdac_regmap_sync | MEDIUM 5.3 | 0.2 % | ||
| CVE-2024-22386 | v4.11-rc1 – < v6.6-rc1 | Race condition vulnerability in Linux kernel drm/exynos exynos_drm_crtc_atomic_disable | MEDIUM 5.3 | 0.2 % | ||
| CVE-2024-21803 | v2.6.12-rc2 – < v6.8-rc1 | Possible UAF in bt_accept_poll in Linux kernel | HIGH 7.8 | 0.5 % | ||
| CVE-2024-22099 | v2.6.12-rc2 – < v6.8-rc1 | NULL pointer deference in rfcomm_check_security in Linux kernel | MEDIUM 6.3 | 0.6 % | ||
| CVE-2024-23307 | v4.1-rc1 – < v6.8-rc1 | Integer overflow in raid5_cache_count in Linux kernel | HIGH 7.8 | 0.6 % | ||
| CVE-2023-6931 | 4.3.0 – < 4.19.302 ; 4.20.0 – < 5.4.264 ; 5.5.0 – < 5.10.204 ; … | Out-of-bounds write in Linux kernel's Performance Events system component | HIGH 7.8 | 0.7 % | ||
| CVE-2023-2163 | < 71b547f561247897a0a14f3082730156c0533fed | Incorrect Verifier Branch Pruning Logic Leads To Arbitrary Read/Write In Linux Kernel and Lateral Privilege Escalation | CRITICAL 10.0 | 3.6 % | ||
| CVE-2023-35001 | v3.13-rc1 | Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability | HIGH 7.8 | 1.5 % | ||
| CVE-2023-31248 | v5.9-rc1 | Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability | HIGH 7.8 | 1.9 % | ||
| CVE-2023-3390 | 3.16 – < 4.14.322 ; 4.15 – < 4.19.291 ; 4.20 – < 5.4.251 ; … | Use-after-free in Linux kernel's netfilter subsystem | HIGH 7.8 | 0.9 % | ||
| CVE-2023-1295 | 5.6 – 5.11 | Privilege escalation with IO_RING_OP_CLOSE in the Linux Kernel | HIGH 7.8 | 0.2 % | ||
| CVE-2023-0459 | 4b842e4e25b12951fa10dedb4bc16bc47e3b850c – 74e19ef0ff8061ef55957c3abd71614ef0f42f47 | Copy_from_user Spectre-V1 Gadget in Linux Kernel | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-2235 | 5.13 – < 6.3 | Use-after-free in Linux kernel's Performance Events subsystem | HIGH 7.8 | 0.3 % | ||
| CVE-2023-2236 | 5.19 – < 6.1 | Use-after-free in Linux kernel's Performance Events subsystem | HIGH 7.8 | 0.4 % | ||
| CVE-2023-0458 | ≤ 6.1.8 | Spectre V1 Gadget in do_prlimit in the Linux Kernel | MEDIUM 5.3 | 0.7 % | ||
| CVE-2023-0045 | 9137bb27e60e – < a664ec9158eeddd75121d39c9a0758016097fa96 | Incorrect indirect branch prediction barrier in the Linux Kernel | HIGH 7.5 | 2.4 % | ||
| CVE-2023-1998 | < 6.3 | Spectre v2 SMT mitigations problem in Linux kernel | MEDIUM 5.6 | 1.4 % | ||
| CVE-2023-1872 | 5.7 – 5.17 | Use-after-free in Linux kernel's io_uring subsystem | HIGH 7.8 | 0.3 % | ||
| CVE-2023-1829 | 3.8.0 – < 4.14.308 ; 4.15.0 – < 4.19.276 ; 4.20.0 – < 5.4.235 ; … | Use-after-free in tcindex (traffic control index filter) in the Linux Kernel | HIGH 7.8 | 1.1 % | ||
| CVE-2023-1281 | 4.14.0 – < 5.10.169 ; 5.11.0 – < 5.15.95 ; 5.16.0 – < 6.1.13 | UAF in Linux kernel's tcindex (traffic control index filter) implementation | HIGH 7.8 | 0.3 % | ||
| CVE-2023-0461 | < 2c02d41d71f90a5168391b6a5f2954112ba2307c | Use-after-free vulnerability in the Linux Kernel | HIGH 7.8 | 0.7 % | ||
| CVE-2023-23586 | 5.6 – 5.10.161 | Use after free in io_uring in the Linux Kernel | MEDIUM 5.5 | 0.3 % | ||
| CVE-2023-0240 | 5.10 – 5.10.161 | Use after free in io_uring in the Linux Kernel | HIGH 7.8 | 0.3 % | ||
| CVE-2023-0266 | 4.14 – < 56b88b50565cd8b946a2d00b0c83927b7ebb055e | Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel | HIGH 7.9 | 3.7 % | KEV | |
| CVE-2022-4696 | 5.7-rc1 – 5.10.159 | There exists a use-after-free vulnerability in the Linux kernel through io_uring and the IORING_OP_SPLICE operation. If IORING_OP_SPLICE is | HIGH 7.8 | 0.4 % | ||
| CVE-2022-2196 | 64b8f33b2e1e687d465b5cb382e7bec495f1e026 – < f93a1a5bdcdd122aae0a3eab7a52c15b71fb725b ; e089a83fbc55b8057f332c00f125acaa02b08ef7 – < 2e7eab81425ad6c875f2ed47c0ce01e78afc38a5 ; 02a3868d18fe639363f1cea6e6d7914513198e43 – < 2e7eab81425ad6c875f2ed47c0ce01e78afc38a5 ; … | Speculative execution attacks in KVM VMX | HIGH 8.8 | 0.4 % | ||
| CVE-2022-42896 | 3.0.0 – 711f8c3fb3db61897080468586b970c87c61d9e4 | Info Leak in l2cap_core in the Linux Kernel | HIGH 8.8 | 2.5 % | ||
| CVE-2022-42895 | 3.0.0 – b1a2cd50c0357f243b7435a732b4e62ba3157a2e | Info Leak in l2cap_core in the Linux Kernel | MEDIUM 6.5 | 0.5 % | ||
| CVE-2022-3910 | 5.18.0 – 5.19.10 | Use after free in IO_uring in the Linux Kernel | HIGH 7.8 | 1.1 % | ||
| CVE-2021-3491 | trunk – < v5.13-rc4 ; linux-5.12.y – < v5.12.4 ; linux-5.11.y – < v5.11.21 ; … | Linux kernel io_uring PROVIDE_BUFFERS MAX_RW_COUNT bypass | HIGH 8.8 | 0.6 % | ||
| CVE-2021-3490 | trunk – < v5.13-rc4 ; linux-5.12.y – < v5.12.4 ; linux-5.11.y – < v5.11.21 ; … | Linux kernel eBPF bitwise ops ALU32 bounds tracking | HIGH 7.8 | 27 % | ||
| CVE-2021-3489 | trunk – < v5.13-rc4 ; linux-5.12.y – < v5.12.4 ; linux-5.11.y – < v5.11.21 ; … | Linux kernel eBPF RINGBUF map oversized allocation | HIGH 7.8 | 0.5 % | ||
| CVE-2019-11479 | 4.4 – < 4.4.182 ; 4.9 – < 4.9.182 ; 4.14 – < 4.14.127 ; … | Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend que | HIGH 7.5 | 92 % | ||
| CVE-2019-11478 | 4.4 – < 4.4.182 ; 4.9 – < 4.9.182 ; 4.14 – < 4.14.127 ; … | SACK can cause extensive memory use via fragmented resend queue | HIGH 7.5 | 95 % | ||
| CVE-2019-11477 | 4.4 – < 4.4.182 ; 4.9 – < 4.9.182 ; 4.14 – < 4.14.127 ; … | Integer overflow in TCP_SKB_CB(skb)->tcp_gso_segs | HIGH 7.5 | 99 % | ||
| CVE-2018-5390 | 4.9 – < 4.9* | Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every inc… | HIGH 7.5 | 72 % |