Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 8 | linux-4.9 | 4.9.144-3.1~deb8u1 |
Vulnerabilities 27
-
Medium 5.5
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addre…
-
Medium 5.3
A security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an inode after the final fi…
-
Unscored —
The add_free_nid function in fs/f2fs/node.c in the Linux kernel before 4.12 does not properly track an allocated nid, w…
-
Unscored —
It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay atta…
-
Unscored —
A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having acce…
-
Unscored —
An issue was discovered in the Linux kernel through 4.17.3. An Integer Overflow in kernel/time/posix-timers.c in the PO…
-
Unscored —
The alarm_timer_nsleep function in kernel/time/alarmtimer.c in the Linux kernel through 4.17.3 has an integer overflow …
-
Unscored —
An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.14. A denial of service (out-of-bounds memory …
-
Unscored —
An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3. There is an out-of-bounds read or a divi…
-
Unscored —
An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3, which does not properly validate secs_pe…
-
Unscored —
An integer overflow in the uvesafb_setcmap function in drivers/video/fbdev/uvesafb.c in the Linux kernel before 4.17.4 …
-
Unscored —
An issue was discovered in the Linux kernel through 4.17.10. There is out-of-bounds access in write_extent_buffer() whe…
-
Unscored —
An issue was discovered in the Linux kernel through 4.17.10. There is a use-after-free in try_merge_free_space() when m…
-
Unscored —
An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in btrfs_root_node…
-
Unscored —
An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in io_ctl_map_page…
-
Unscored —
An issue was discovered in the Linux kernel through 4.17.10. There is an out-of-bounds access in __remove_dirty_segment…
-
Unscored —
An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference in fscrypt_do_page_cry…
-
Unscored —
An issue was discovered in xenvif_set_hash_mapping in drivers/net/xen-netback/hash.c in the Linux kernel through 4.18.1…
-
Unscored —
An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does n…
-
Unscored —
arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVM_SET_ON_REG io…
-
Unscored —
Since Linux kernel version 3.2, the mremap() syscall performs TLB flushes after dropping pagetable locks. If a syscall …
-
Unscored —
In the Linux kernel before 4.17, a local attacker able to set attributes on an xfs filesystem could make this filesyste…
-
Unscored —
An issue was discovered in the Linux kernel through 4.19. An information leak in cdrom_ioctl_select_disc in drivers/cdr…
-
Unscored —
The vcpu_scan_ioapic function in arch/x86/kvm/x86.c in the Linux kernel through 4.19.2 allows local users to cause a de…
-
Unscored —
The Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packets
The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various…
-
Unscored —
In the function wmi_set_ie(), the length validation code does not handle unsigned integer overflow properly. As a resul…
-
Unscored —
Memory leak in the irda_bind function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linu…