7,125 results · Feed
-
Unscored —
In the tun subsystem in the Linux kernel before 4.13.14, dev_get_valid_name is not called before register_netdevice. Th…
-
Unscored —
fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the extent tree block…
-
Unscored —
The do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c in the Linux kernel before 5.0.15 allows a local user to o…
-
Unscored —
An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race conditi…
-
Unscored —
An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_…
-
Unscored —
An issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur when megasas_create_fram…
-
Unscored —CVE-2019-11599 Public exploit
The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma l…
-
Medium 6.3
An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while han…
-
Medium 4.7
A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory…
-
Unscored —
The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, …
-
Unscored —
The Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel before 5.0.8 has multiple race co…
-
Unscored —
The Linux kernel through 5.0.7, when CONFIG_IA32_AOUT is enabled and ia32_aout is loaded, allows local users to bypass …
-
Unscored —
A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before 5.1-rc1.
-
Unscored —
A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1.
-
Medium 5.3
The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use t…
-
Unscored —
An issue where a provided address with access_ok() is not checked was discovered in i915_gem_execbuffer2_ioctl in drive…
-
Unscored —
The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads if_num from the USB …
-
Unscored —
The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.
-
Unscored —
The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.
-
Unscored —CVE-2019-9213 Public exploit
In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which mak…
-
Unscored —
In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows attackers to cause a deni…
-
Unscored —
A memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11 allows attackers to cau…
-
Unscored —
In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain str…
-
Unscored —
In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because…
-
Unscored —
kernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds speculation on pointer arith…
-
Medium 4.2
A flaw was found in the Linux kernel in the function hid_debug_events_read() in drivers/hid/hid-debug.c file which may …
-
Unscored —
In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, an…
-
Unscored —CVE-2019-5489 Public exploit
The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe pag…
-
Medium 6.1
A use-after-free issue was found in the way the Linux kernel's KVM hypervisor processed posted interrupts when nested(=…
-
Unscored —
An issue was discovered in can_can_gw_rcv in net/can/gw.c in the Linux kernel through 4.19.13. The CAN frame modificati…
-
Unscored —
An issue was discovered in the Linux kernel before 4.18.11. The ipddp_ioctl function in drivers/net/appletalk/ipddp.c a…
-
Medium 6.5
A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the s…
-
Unscored —
An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading …
-
Unscored —
The userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for certain UFFDIO_ ioctl ca…
-
Unscored —
An issue was discovered in the Linux kernel before 4.19.3. crypto_report_one() and related functions in crypto/crypto_u…
-
Unscored —
In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by supplying a malic…
-
Medium 5.3
A security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an inode after the final fi…
-
Unscored —
The vcpu_scan_ioapic function in arch/x86/kvm/x86.c in the Linux kernel through 4.19.2 allows local users to cause a de…
-
Unscored —
In hid_debug_events_read of drivers/hid/hid-debug.c, there is a possible out of bounds write due to a missing bounds ch…
-
Unscored —
Since Linux kernel version 3.2, the mremap() syscall performs TLB flushes after dropping pagetable locks. If a syscall …