Linux (The Linux Kernel Organization) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-01-12. Vendor: The Linux Kernel Organization.

CVEs of Linux

• CVE-2023-6040 - CVSS 7.8 (high), 2024-01-12: An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family);…
• CVE-2023-1032 - CVSS 5.5 (medium), 2024-01-08: The Linux kernel io_uring IORING_OP_SOCKET operation contained a double free in function __sys_socket_file() in file net/socket.c. This issue was introduced…
• CVE-2021-3600 - CVSS 7.8 (high), 2024-01-08: It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod…
• CVE-2022-2602 - CVSS 7 (high), 2024-01-08: io_uring UAF, Unix SCM garbage collection
• CVE-2022-2588 - CVSS 7.8 (high), 2024-01-08: It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its…
• CVE-2022-2585 - CVSS 7.8 (high), 2024-01-08: It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free.
• CVE-2022-2586 - CVSS 7.8 (high), 2024-01-08: It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.