Kernel - vulnerabilities (CVEs)

28 CVEs in 17 products, 0 in the last 30 days, newest from 2026-09-03.

Products

Util-linux - 19 CVEs
Linux Kernel - 2 CVEs
Drivers - 1 CVEs
Heap-based Buffer Overflow In Fsext4xattr.c - 1 CVEs
Kvm - 1 CVEs
Linux-pam - 1 CVEs
Security - 1 CVEs
Selinux - 1 CVEs
Vhost - 1 CVEs
Bpftool - 0 CVEs
Bridge-utils - 0 CVEs
Dracut - 0 CVEs
Ethtool - 0 CVEs
Iw - 0 CVEs
Kexec-tools - 0 CVEs
Kmod - 0 CVEs
Rt-tests - 0 CVEs

Newest CVEs of Kernel

CVE-2026-76642 - CVSS 8.5 (high), 2026-09-03: util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute…
CVE-2026-13595 - CVSS 6.8 (medium), 2026-06-29: A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a…
CVE-2026-27456 - CVSS 4.7 (medium), 2026-04-03: util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU (Time-of-Check-Time-of-Use) vulnerability has been identified in the…
CVE-2026-3184 - CVSS 5.3 (medium), 2026-04-03: A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied…
CVE-2024-28085 - CVSS 3.3 (low), 2024-03-27: wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv.…
CVE-2020-21583 - CVSS 6.7 (medium), 2023-08-22: An issue was discovered in hwclock.13-v2.27 allows attackers to gain escalated privlidges or execute arbitrary commands via the path parameter when setting…
CVE-2021-3996 - CVSS 5.5 (medium), 2022-08-23: A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows…
CVE-2021-3995 - CVSS 5.5 (medium), 2022-08-23: A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows…
CVE-2022-0563 - CVSS 5.5 (medium), 2022-02-21: A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to…
CVE-2021-37600 - CVSS 5.5 (medium), 2021-07-30: An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads…
CVE-2020-10751 - CVSS 6.1 (medium), 2020-05-26: A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single…
CVE-2018-17953 - CVSS 8.1 (high), 2018-11-27: A incorrect variable in a SUSE specific patch for pam_access rule matching in PAM 1.3.0 in openSUSE Leap 15.0 and SUSE Linux Enterprise 15 could lead to…
CVE-2018-10840 - CVSS 6.6 (medium), 2018-07-16: Linux kernel is vulnerable to a heap-based buffer overflow in the fs/ext4/xattr.c:ext4_xattr_set_entry() function. An attacker could exploit this by operating…
CVE-2016-9604 - CVSS 4.4 (medium), 2018-07-11: It was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an internal keyring, such as '.dns_resolver' in RHEL-7 or…
CVE-2018-1108 - CVSS 5.9 (medium), 2018-05-21: kernel drivers before version 4.17-rc1 are vulnerable to a weakness in the Linux kernel's implementation of random seed data. Programs, early in the boot…
CVE-2018-1087 - CVSS 8 (high), 2018-05-15: kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux…
CVE-2018-1118 - CVSS 5.5 (medium), 2018-05-10: Linux kernel vhost since version 4.8 does not properly initialize memory in messages passed between virtual guests and the host operating system in the…
CVE-2018-7738 - CVSS 7.8 (high), 2018-03-07: In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is…
CVE-2015-5224 - CVSS 9.8 (critical), 2017-08-23: The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks.
CVE-2016-5011 - CVSS 4.6 (medium), 2017-04-11: The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service…
CVE-2014-9114 - CVSS 7.8 (high), 2017-03-31: Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code.
CVE-2016-2779 - CVSS 7.8 (high), 2017-02-07: runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input…
CVE-2015-5218 - CVSS 2.1 (low), 2015-11-09: Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a crafted file, related…
CVE-2013-0157 - CVSS 2.1 (low), 2014-01-21: (a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by…
CVE-2009-3288 - CVSS 4.9 (medium), 2009-09-22: The sg_build_indirect function in drivers/scsi/sg.c in Linux kernel 2.6.28-rc1 through 2.6.31-rc8 uses an incorrect variable when accessing an array, which…
CVE-2007-6712 - CVSS 4.9 (medium), 2008-04-12: Integer overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel 2.6.21-rc4, when running on 64-bit systems, allows local users to cause a denial…
CVE-2007-5191 - CVSS 7.2 (high), 2007-10-04: mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might…
CVE-2001-1494 - CVSS 5.5 (medium), 2001-12-31: script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to…