547 results · Feed
-
Unscored —
drivers/net/wireless/marvell/libertas/if_sdio.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return va…
-
Unscored —
drivers/scsi/qla2xxx/qla_os.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a …
-
Unscored —
drivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return va…
-
Unscored —
An issue was discovered in the Linux kernel through 5.2.13. nbd_genl_status in drivers/block/nbd.c does not check the n…
-
Unscored —
In the Android kernel in the video driver there is a kernel pointer leak due to a WARN_ON statement. This could lead to…
-
Unscored —
In the Android kernel in F2FS touch driver there is a possible out of bounds read due to improper input validation. Thi…
-
Unscored —
In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could l…
-
Unscored —
In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This c…
-
Unscored —
In the Android kernel in the f2fs driver there is a possible out of bounds read due to a missing bounds check. This cou…
-
Unscored —
In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local e…
-
Unscored —
In the Android kernel in Pixel C USB monitor driver there is a possible OOB write due to a missing bounds check. This c…
-
Unscored —
In the Android kernel in i2c driver there is a possible out of bounds write due to memory corruption. This could lead t…
-
Unscored —
In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pag…
-
Unscored —
An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious US…
-
Medium 4.6
An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in…
-
Unscored —
An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB…
-
Unscored —
drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplet…
-
Unscored —
drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplet…
-
High 7.5
A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacke…
-
Medium 5.3CVE-2019-11479 EPSS 91%
Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fr…
-
Medium 5.3
SACK can cause extensive memory use via fragmented resend queue
Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of serv…
-
High 7.5
Integer overflow in TCP_SKB_CB(skb)->tcp_gso_segs
Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fi…
-
Unscored —
i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allo…
-
Unscored —
**DISPUTED** An issue was discovered in the efi subsystem in the Linux kernel through 5.1.5. phys_efi_set_virtual_addre…
-
Unscored —
An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_…
-
Medium 4.7
A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory…
-
Unscored —
A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before 5.1-rc1.
-
Unscored —
A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1.
-
Medium 6.7
A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access with nested(=1) virtu…
-
Unscored —CVE-2019-8956 Public exploit
In the Linux Kernel before versions 4.20.8 and 4.19.21 a use-after-free error in the "sctp_sendmsg()" function (net/sct…
-
Medium 5.3
The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use t…
-
Unscored —
The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.
-
Unscored —
The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.
-
Unscored —CVE-2019-9213 Public exploit
In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which mak…
-
Unscored —CVE-2019-9162 Public exploit
In the Linux kernel before 4.20.12, net/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT module has insufficient…
-
Unscored —
In the Linux kernel before 4.20.5, attackers can trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS …
-
Unscored —
A memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11 allows attackers to cau…
-
Unscored —
In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain str…
-
Unscored —
In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because…
-
Medium 5.9
A flaw was found in the Linux kernel's handle_rx() function in the [vhost_net] driver. A malicious virtual guest, under…