Linux Kernel - vulnerabilities (CVEs)

25 CVEs in 3 products, 0 in the last 30 days, newest from 2022-09-23.

Products

Kernel - 13 CVEs
Linux Kernel - 11 CVEs
Overlayfs - 1 CVEs

Newest CVEs of Linux Kernel

CVE-2022-2785 - CVSS 6.7 (medium), 2022-09-23: There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpf_sys_bpf are not verified…
CVE-2022-2503 - CVSS 6.9 (medium), 2022-08-12: Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trusted root…
CVE-2022-2327 - CVSS 7.8 (high), 2022-07-22: io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when…
CVE-2021-22600 - CVSS 7 (high), 2022-01-26: A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny…
CVE-2021-22543 - CVSS 8.7 (high), 2021-05-26: An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while…
CVE-2021-23134 - CVSS 7.8 (high), 2021-05-12: Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations,…
CVE-2021-23133 - CVSS 7 (high), 2021-04-22: A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network…
CVE-2020-16120 - CVSS 5.1 (medium), 2021-02-10: Overlayfs did not properly perform permission checking when copying up files in an overlayfs and could be exploited from within a user namespace, if, for…
CVE-2020-14386 - CVSS 7.8 (high), 2020-09-16: A flaw was found in the Linux kernel before 5.9-rc4. Memory corruption can be exploited to gain root privileges from unprivileged processes. The highest…
CVE-2020-10781 - CVSS 5.5 (medium), 2020-09-16: A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the…
CVE-2020-10768 - CVSS 5.5 (medium), 2020-09-16: A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used to enable indirect branch speculation after it has been…
CVE-2020-10766 - CVSS 5.5 (medium), 2020-09-15: A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account…
CVE-2020-10767 - CVSS 5.5 (medium), 2020-09-15: A flaw was found in the Linux kernel before 5.8-rc1 in the implementation of the Enhanced IBPB (Indirect Branch Prediction Barrier). The IBPB mitigation will…
CVE-2020-14385 - CVSS 5.5 (medium), 2020-09-15: A flaw was found in the Linux kernel before 5.9-rc4. A failure of the file system metadata validator in XFS can cause an inode with a valid, user-creatable…
CVE-2020-14304 - CVSS 4.4 (medium), 2020-09-15: A memory disclosure flaw was found in the Linux kernel's ethernet drivers, in the way it read data from the EEPROM of the device. This flaw allows a local…
CVE-2020-14314 - CVSS 5.5 (medium), 2020-09-15: A memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4 file system, in the way it accesses a directory with broken…
CVE-2020-1749 - CVSS 7.5 (high), 2020-09-09: A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted…
CVE-2020-10732 - CVSS 4.4 (medium), 2020-06-12: A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a trivial program…
CVE-2019-14898 - CVSS 7 (high), 2020-05-08: The fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10 was not complete. A local user could use this flaw to obtain sensitive information, cause…
CVE-2020-8834 - CVSS 6.5 (medium), 2020-04-09: KVM in the Linux kernel on Power8 processors has a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm,…
CVE-2020-8835 - CVSS 7.8 (high), 2020-04-02: In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, leading to…
CVE-2012-0055 - CVSS 7.8 (high), 2020-02-19: OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow attackers to…
CVE-2019-14835 - CVSS 7.8 (high), 2019-09-17: A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs,…
CVE-2018-6554 - CVSS 5.5 (medium), 2018-09-04: Memory leak in the irda_bind function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linux kernel before 4.17 allows local users…
CVE-2018-6555 - CVSS 7.8 (high), 2018-09-04: The irda_setsockopt function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linux kernel before 4.17 allows local users to cause…