978 results · Clear filters · Feed
-
Medium 5.5
The Linux kernel was found vulnerable out of bounds memory access in the drivers/video/fbdev/sm712fb.c:smtcfb_read() fu…
-
Medium 5.6
Arbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed)
Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary…
-
Medium 6.7
KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker w…
-
Medium 5.5
usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a double free.
-
Medium 5.5
In the Linux kernel before 5.17.1, a refcount leak bug was found in net/llc/af_llc.c.
-
Medium 6.5
Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user t…
-
Medium 6.5CVE-2022-0001 Public exploit
Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authori…
-
Medium 5.5
Improper isolation of shared resources in network on chip for the Intel(R) 82599 Ethernet Controllers and Adapters may …
-
Medium 5.5
Insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an authenticate…
-
Medium 6.6
Double Free in net/packet/af_packet.c leading to priviledge escalation
A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1…
KEV Apr 11, 2022 -
Medium 6.5
Guest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information record relates to mult…
-
Medium 6.4CVE-2021-0920 Exploited
In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to loc…
KEV May 23, 2022 -
Medium 5.3
An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fr…
-
Medium 6.7
Linux Kernel sctp_destroy_sock race condition
A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctp_destroy_sock is called without sock_net(sk)->sctp.addr_wq_lock …
-
Medium 6.5
The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database (aka dbx) protec…
-
Medium 4.4
A memory disclosure flaw was found in the Linux kernel's ethernet drivers, in the way it read data from the EEPROM of t…
-
Medium 4.6
An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in…
-
Medium 5.3
An elevation of privilege vulnerability in the kernel file system. Product: Android. Versions: Android kernel. Android …