Kernel (Linux) - vulnerabilities (CVEs)

89 CVEs, 0 in the last 30 days, 276 known versions, newest CVE from 2024-05-22. Vendor: Linux.

CVEs of Kernel

CVE-2021-47482 - CVSS 5.3 (medium), 2024-05-22: In the Linux kernel, the following vulnerability has been resolved: net: batman-adv: fix error handling Syzbot reported ODEBUG warning in…
CVE-2024-25743 - CVSS 7.1 (high), 2024-05-15: In the Linux kernel through 6.9, an untrusted hypervisor can inject virtual interrupts 0 and 14 at any point in time and can trigger the SIGFPE signal handler…
CVE-2021-34981 - CVSS 7.5 (high), 2024-05-07: Linux Kernel Bluetooth CMTP Module Double Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on…
CVE-2023-52584 - CVSS 3.8 (low), 2024-03-06: In the Linux kernel, the following vulnerability has been resolved: spmi: mediatek: Fix UAF on device remove The pmif driver data that contains the clocks is…
CVE-2023-51779 - CVSS 7 (high), 2024-02-29: bt_sock_recvmsg in net/bluetooth/af_bluetooth.c in the Linux kernel through 6.6.8 has a use-after-free because of a bt_sock_ioctl race condition.
CVE-2024-1086 - CVSS 7.8 (high), 2024-01-31: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The…
CVE-2024-1085 - CVSS 7.8 (high), 2024-01-31: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The…
CVE-2024-0775 - CVSS 7.1 (high), 2024-01-22: A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 in the Linux kernel. This flaw allows a local user to cause an information…
CVE-2024-0565 - CVSS 7.4 (high), 2024-01-15: An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This…
CVE-2023-6932 - CVSS 7.8 (high), 2023-12-19: A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition can be…
CVE-2023-6817 - CVSS 7.8 (high), 2023-12-18: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The function…
CVE-2023-6610 - CVSS 7.1 (high), 2023-12-08: An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel. This issue could allow a local attacker to…
CVE-2023-6111 - CVSS 7.8 (high), 2023-11-14: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The function…
CVE-2023-5717 - CVSS 7.8 (high), 2023-10-25: A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local privilege…
CVE-2023-5345 - CVSS 7.8 (high), 2023-10-03: A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation. In case of an error in…
CVE-2023-5197 - CVSS 7.8 (high), 2023-09-27: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Addition and…
CVE-2023-4921 - CVSS 7.8 (high), 2023-09-12: A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. When the plug qdisc…
CVE-2023-4622 - CVSS 7.8 (high), 2023-09-06: A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation. The unix_stream_sendpage()…
CVE-2023-4623 - CVSS 7.8 (high), 2023-09-06: A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege…
CVE-2023-4207 - CVSS 7.8 (high), 2023-09-06: A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. When fw_change() is…
CVE-2023-4206 - CVSS 7.8 (high), 2023-09-06: A use-after-free vulnerability in the Linux kernel's net/sched: cls_route component can be exploited to achieve local privilege escalation. When…
CVE-2023-4244 - CVSS 7.8 (high), 2023-09-06: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Due to a race…
CVE-2023-4015 - CVSS 7.8 (high), 2023-09-06: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. On an error when…
CVE-2023-4208 - CVSS 7.8 (high), 2023-09-06: A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. When u32_change() is…
CVE-2023-3777 - CVSS 7.8 (high), 2023-09-06: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. When…
CVE-2023-3610 - CVSS 7.8 (high), 2023-07-21: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Flaw in the error…
CVE-2023-3776 - CVSS 7.8 (high), 2023-07-21: A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. If tcf_change_indev()…
CVE-2023-3611 - CVSS 7.8 (high), 2023-07-21: An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. The…
CVE-2023-3389 - CVSS 7.8 (high), 2023-06-28: A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation. Racing a io_uring cancel poll…
CVE-2023-3090 - CVSS 7.8 (high), 2023-06-28: A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The out-of-bounds…
CVE-2023-3268 - CVSS 7.1 (high), 2023-06-16: An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs. This flaw could allow a…
CVE-2023-2008 - CVSS 8.2 (high), 2023-04-14: A flaw was found in the Linux kernel's udmabuf device driver, within a fault handler. This issue occurs due to the lack of proper validation of user-supplied…
CVE-2022-42432 - CVSS 5.1 (medium), 2023-03-29: This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel 6.0-rc2. An attacker must first…
CVE-2022-3649 - CVSS 7 (high), 2022-10-21: A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_new_inode of the file fs/nilfs2/inode.c of…
CVE-2022-3646 - CVSS 4.3 (medium), 2022-10-21: A vulnerability, which was classified as problematic, has been found in Linux Kernel. This issue affects the function nilfs_attach_log_writer of the file…
CVE-2022-3640 - CVSS 8.8 (high), 2022-10-21: A vulnerability, which was classified as critical, was found in Linux Kernel. Affected is the function l2cap_conn_del of the file net/bluetooth/l2cap_core.c…
CVE-2022-3635 - CVSS 7 (high), 2022-10-21: A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function tst_timer of the file…
CVE-2022-3633 - CVSS 3.5 (low), 2022-10-21: A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function j1939_session_destroy of the file…
CVE-2022-3636 - CVSS 7.8 (high), 2022-10-21: A vulnerability was identified in Linux Kernel 33fc42de33278b2b3ec6f3390512987bc29a62b7. This affects the function __mtk_ppe_check_skb of the file…
CVE-2022-3637 - CVSS 5.5 (medium), 2022-10-21: A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function jlink_init of the file monitor/jlink.c…
CVE-2022-3629 - CVSS 3.3 (low), 2022-10-21: A vulnerability was found in Linux Kernel. It has been declared as problematic. This vulnerability affects the function vsock_connect of the file…
CVE-2022-3625 - CVSS 7.8 (high), 2022-10-21: A vulnerability was found in Linux Kernel. It has been classified as critical. This affects the function devlink_param_set/devlink_param_get of the file…
CVE-2022-3624 - CVSS 3.5 (low), 2022-10-21: A vulnerability was found in Linux Kernel and classified as problematic. Affected by this issue is the function rlb_arp_xmit of the file…
CVE-2022-3630 - CVSS 5.5 (medium), 2022-10-21: A vulnerability was found in Linux Kernel. It has been rated as problematic. This issue affects some unknown processing of the file fs/fscache/cookie.c of the…
CVE-2022-3623 - CVSS 7.5 (high), 2022-10-20: A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function follow_page_pte of the file…
CVE-2022-3621 - CVSS 6.5 (medium), 2022-10-20: A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_bmap_lookup_at_level of the file…
CVE-2022-3619 - CVSS 4.3 (medium), 2022-10-20: A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function l2cap_recv_acldata of the file…
CVE-2022-3606 - CVSS 5.5 (medium), 2022-10-19: A vulnerability was found in Linux Kernel. It has been classified as problematic. This affects the function find_prog_by_sec_insn of the file…
CVE-2022-3595 - CVSS 5.5 (medium), 2022-10-18: A vulnerability was found in Linux Kernel. It has been rated as problematic. Affected by this issue is the function sess_free_buffer of the file…
CVE-2022-3594 - CVSS 5.3 (medium), 2022-10-18: A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function intr_callback of the file…
CVE-2022-3566 - CVSS 7.1 (high), 2022-10-17: A vulnerability was identified in Linux Kernel up to 4.19.316/5.4.278/5.10.220/5.15.161. This impacts the function tcp_getsockopt/tcp_setsockopt of the…
CVE-2022-3565 - CVSS 7.8 (high), 2022-10-17: A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function del_timer of the file…
CVE-2022-3564 - CVSS 7.1 (high), 2022-10-17: A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_reassemble_sdu of the file…
CVE-2022-3563 - CVSS 5.7 (medium), 2022-10-17: A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file…
CVE-2022-3567 - CVSS 6.4 (medium), 2022-10-17: A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function inet6_stream_ops/inet6_dgram_ops of the…
CVE-2022-3545 - CVSS 7.8 (high), 2022-10-17: A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the function area_cache_get of the file…
CVE-2022-3544 - CVSS 5.5 (medium), 2022-10-17: A vulnerability, which was classified as problematic, was found in Linux Kernel. Affected is the function damon_sysfs_add_target of the file mm/damon/sysfs.c…
CVE-2022-3541 - CVSS 7.8 (high), 2022-10-17: A vulnerability classified as critical has been found in Linux Kernel. This affects the function spl2sw_nvmem_get_mac_address of the file…
CVE-2022-3543 - CVSS 5.5 (medium), 2022-10-17: A vulnerability, which was classified as problematic, has been found in Linux Kernel. This issue affects the function unix_sock_destructor/unix_release_sock…
CVE-2022-3534 - CVSS 8 (high), 2022-10-17: A vulnerability has been found in Linux Kernel up to 5.10.162/5.15.85/6.0.15/6.1.1. The impacted element is the function btf_dump_name_dups of the file…
CVE-2022-3533 - CVSS 5.7 (medium), 2022-10-17: A vulnerability was found in Linux Kernel. It has been rated as problematic. This issue affects the function parse_usdt_arg of the file tools/lib/bpf/usdt.c…
CVE-2022-3526 - CVSS 7.5 (high), 2022-10-16: A vulnerability classified as problematic was found in Linux Kernel. This vulnerability affects the function macvlan_handle_frame of the file…
CVE-2022-3524 - CVSS 5.5 (medium), 2022-10-16: A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6_renew_options of the…
CVE-2022-3523 - CVSS 5.3 (medium), 2022-10-16: A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is an unknown function of the file mm/memory.c of the component…
CVE-2022-3521 - CVSS 2.6 (low), 2022-10-16: A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function kcm_tx_work of the file…
CVE-2022-3435 - CVSS 4.3 (medium), 2022-10-08: A vulnerability classified as problematic has been found in Linux Kernel. This affects the function fib_nh_match of the file net/ipv4/fib_semantics.c of the…
CVE-2022-36402 - CVSS 6.3 (medium), 2022-09-16: An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file…
CVE-2022-3176 - CVSS 7.8 (high), 2022-09-16: There exists a use-after-free in io_uring in the Linux kernel. Signalfd_poll() and binder_poll() use a waitqueue whose lifetime is the current task. It will…
CVE-2022-40133 - CVSS 6.3 (medium), 2022-09-09: A use-after-free(UAF) vulnerability was found in function 'vmw_execbuf_tie_context' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver…
CVE-2022-38457 - CVSS 6.3 (medium), 2022-09-09: A use-after-free(UAF) vulnerability was found in function 'vmw_cmd_res_check' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver with…
CVE-2022-38096 - CVSS 6.3 (medium), 2022-09-09: A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file…
CVE-2022-36280 - CVSS 6.3 (medium), 2022-09-09: An out-of-bounds(OOB) memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_kms.c in GPU component in the Linux kernel with…
CVE-2021-4037 - CVSS 7.8 (high), 2022-08-24: A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS…
CVE-2022-29581 - CVSS 7.8 (high), 2022-05-17: Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root. This issue affects:…
CVE-2022-1116 - CVSS 7.8 (high), 2022-05-17: Integer Overflow or Wraparound vulnerability in io_uring of Linux Kernel allows local attacker to cause memory corruption and escalate privileges to root.…
CVE-2022-1353 - CVSS 7.1 (high), 2022-04-29: A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access…
CVE-2022-1055 - CVSS 8.6 (high), 2022-03-29: A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation. The exploit requires…
CVE-2022-0742 - CVSS 9.1 (critical), 2022-03-18: Memory leak in icmp6 implementation in Linux Kernel 5.13+ allows a remote attacker to DoS a host by making it go out-of-memory via icmp6 packets of type 130…
CVE-2021-4090 - CVSS 7.1 (high), 2022-02-18: An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel. Missing sanity may lead to a write beyond bmval[bmlen-1] in…
CVE-2021-34866 - CVSS 8.8 (high), 2022-01-25: This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.14-rc3. An attacker must first obtain the ability…
CVE-2021-31440 - CVSS 8.8 (high), 2021-05-21: This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An attacker must first obtain the ability…
CVE-2021-3483 - CVSS 7.8 (high), 2021-05-17: A flaw was found in the Nosy driver in the Linux kernel. This issue allows a device to be inserted twice into a doubly-linked list, leading to a…
CVE-2021-3501 - CVSS 7.1 (high), 2021-05-06: A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be updated…
CVE-2021-3444 - CVSS 7.8 (high), 2021-03-23: The bpf verifier in the Linux kernel did not properly handle mod32 destination register truncation when the source register was known to be 0. A local…
CVE-2019-19332 - CVSS 6.1 (medium), 2020-01-09: An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel's KVM hypervisor handled the…
CVE-2019-14815 - CVSS 7.8 (high), 2019-11-25: A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marvell Wifi Driver.
CVE-2014-3180 - CVSS 9.1 (critical), 2019-11-06: In kernel/compat.c in the Linux kernel before 3.17, as used in Google Chrome OS and other products, there is a possible out-of-bounds read. restart_syscall…
CVE-2019-14814 - CVSS 7.8 (high), 2019-09-20: There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local…
CVE-2019-14816 - CVSS 7.8 (high), 2019-09-20: There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to…
CVE-2019-14821 - CVSS 8.8 (high), 2019-09-19: An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO…
CVE-2018-10853 - CVSS 7.8 (high), 2018-09-11: A flaw was found in the way Linux kernel KVM hypervisor before 4.18 emulated instructions such as sgdt/sidt/fxsave/fxrstor. It did not check current…
CVE-2018-5391 - CVSS 7.5 (high), 2018-09-06: The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly.…
CVE-2017-2634 - CVSS 7.5 (high), 2018-07-27: It was found that the Linux kernel's Datagram Congestion Control Protocol (DCCP) implementation before 2.6.22.17 used the IPv4-only inet_sk_rebuild_header()…
CVE-2017-2618 - CVSS 5.5 (medium), 2018-07-27: A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty (null) write to this file can…
CVE-2017-7558 - CVSS 7.5 (high), 2018-07-26: A kernel data leak due to an out-of-bound read was found in the Linux kernel in inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() functions present…
CVE-2018-10872 - CVSS 6.5 (medium), 2018-07-10: A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack…
CVE-2014-2649 - CVSS 7.5 (high), 2014-10-10: Unspecified vulnerability in HP Operations Manager 9.20 on UNIX allows remote attackers to execute arbitrary code via unknown vectors.
CVE-2010-0309 - CVSS 6.8 (medium), 2010-02-12: The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit_state data structure, which…
CVE-2009-3624 - CVSS 4.6 (medium), 2009-11-02: The get_instantiation_keyring function in security/keys/keyctl.c in the KEYS subsystem in the Linux kernel before 2.6.32-rc5 does not properly maintain the…
CVE-2009-2847 - CVSS 4.9 (medium), 2009-08-18: The do_sigaltstack function in kernel/signal.c in Linux kernel 2.4 through 2.4.37 and 2.6 before 2.6.31-rc5, when running on 64-bit systems, does not clear…