The Linux Kernel Organization linux
7 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-6040 | < 5.18-rc1 | An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of… | HIGH 7.8 | 0.3 % | ||
| CVE-2021-3600 | < 5.11 | It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when perfo | HIGH 7.8 | 0.3 % | ||
| CVE-2023-1032 | < 6.3~rc2 | The Linux kernel io_uring IORING_OP_SOCKET operation contained a double free in function __sys_socket_file() in file net/socket.c. This issu | MEDIUM 5.5 | 0.3 % | ||
| CVE-2022-2602 | < 6.1~rc1 | io_uring UAF, Unix SCM garbage collection | HIGH 7.0 | 1.4 % | ||
| CVE-2022-2588 | < 6.0~rc1 | It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before free | HIGH 7.8 | 5.9 % | ||
| CVE-2022-2586 | 3.16 – < 4.14.316 ; 4.15 – < 4.19.256 ; 4.20 – < 5.4.211 ; … | It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that | HIGH 7.8 | 10 % | KEV | |
| CVE-2022-2585 | < 6.0~rc1 | It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-af | HIGH 7.8 | 1.3 % |