The Linux Foundation kernel
14 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-10751 | before 5.7 | A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would onl | MEDIUM 6.1 | 0.3 % | ||
| CVE-2019-3896 | 2.6.32 | A double-free can happen in idr_remove_all() in lib/idr.c in the Linux kernel 2.6 branch. An unprivileged local attacker can use this flaw f | HIGH 7.8 | 0.4 % | ||
| CVE-2019-3882 | 3.10, 4.14, 4.18 | A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device i | MEDIUM 5.5 | 0.5 % | ||
| CVE-2019-3901 | older then 4.8 | A race condition in perf_event_open() allows local attackers to leak sensitive data from setuid programs. As no relevant locks (in particula | MEDIUM 5.6 | 0.3 % | ||
| CVE-2019-3837 | 2.6.32 as shipped in rhel-6 | It was found that the net_dma code in tcp_recvmsg() in the 2.6.32 kernel as shipped in RHEL6 is thread-unsafe. So an unprivileged multi-thre | MEDIUM 6.1 | 0.2 % | ||
| CVE-2019-3887 | from 4.16 | A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access with nested(=1) virtualization enabled. In | MEDIUM 6.7 | 0.4 % | ||
| CVE-2019-3874 | 3.10.x and 4.18.x | The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a d | MEDIUM 6.5 | 1.8 % | ||
| CVE-2018-16880 | from v4.16 and newer | A flaw was found in the Linux kernel's handle_rx() function in the [vhost_net] driver. A malicious virtual guest, under specific conditions, | HIGH 7.0 | 0.6 % | ||
| CVE-2019-3819 | from v4.18 and newer | A flaw was found in the Linux kernel in the function hid_debug_events_read() in drivers/hid/hid-debug.c file which may enter an infinite loo | MEDIUM 4.4 | 0.5 % | ||
| CVE-2018-16885 | 3.10.x as shipped with Red Hat Enterprise Linux 7 | A flaw was found in the Linux kernel that allows the userspace to call memcpy_fromiovecend() and similar functions with a zero offset and bu | MEDIUM 5.5 | 0.4 % | ||
| CVE-2018-16882 | before 4.14.91 ; before 4.19.13 | A use-after-free issue was found in the way the Linux kernel's KVM hypervisor processed posted interrupts when nested(=1) virtualization is | HIGH 8.8 | 0.4 % | ||
| CVE-2018-14634 | 2.6.x, 3.10.x, 4.14.x | An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or ot | HIGH 7.8 | 15 % | KEV | |
| CVE-2018-14633 | 4.18.x, 4.14.x, 3.10.x | A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in the Linux kernel in a way an authentication | HIGH 7.0 | 8.7 % | ||
| CVE-2018-14641 | from 4.19-rc1 to 4.19-rc3 inclusive | A security flaw was found in the ip_frag_reasm() function in net/ipv4/ip_fragment.c in the Linux kernel from 4.19-rc1 to 4.19-rc3 inclusive, | MEDIUM 6.5 | 2.9 % |