1,055 results · Feed
-
Unscored —
A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers ud…
-
Unscored —CVE-2022-25258 Public exploit
An issue was discovered in drivers/usb/gadget/composite.c in the Linux kernel before 5.16.10. The USB Gadget subsystem …
-
Unscored —
A race problem was seen in the vt_k_ioctl in drivers/tty/vt/vt_ioctl.c in the Linux kernel, which may cause an out of b…
-
Unscored —
drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release.
-
Unscored —
An issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in yam_siocdevprivate in drivers/net/…
-
Unscored —
A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove in drivers/memstick/host/rtsx_usb_ms.c in memstick i…
-
Unscored —
An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the O_DIRECTORY flag,…
-
Medium 6.6
Double Free in net/packet/af_packet.c leading to priviledge escalation
A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1…
KEV Apr 11, 2022 -
Unscored —
A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers i…
-
Unscored —
In fs/eventpoll.c, there is a possible use after free. This could lead to local escalation of privilege with no additio…
-
Unscored —
In gre_handle_offloads of ip_gre.c, there is a possible page fault due to an invalid memory access. This could lead to …
-
Medium 6.5
Guest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information record relates to mult…
-
Unscored —
Guest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information record relates to mult…
-
Unscored —
Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs;…
-
Unscored —
Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs;…
-
Unscored —
Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs;…
-
Unscored —CVE-2021-45485 Public exploit
In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of…
-
Unscored —
In the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information leak because the hash…
-
Unscored —
In __f2fs_setxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of-bounds memory access when…
-
Unscored —CVE-2021-44733 Public exploit
A use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs …
-
Unscored —
pep_sock_accept in net/phonet/pep.c in the Linux kernel through 5.15.8 has a refcount leak.
-
Unscored —
In ufshcd_eh_device_reset_handler of ufshcd.c, there is a possible out of bounds read due to a missing bounds check. Th…
-
Unscored —
In __configfs_open_file of file.c, there is a possible use-after-free due to improper locking. This could lead to local…
-
Unscored —
In gadget_dev_desc_UDC_show of configfs.c, there is a possible disclosure of kernel heap memory due to a race condition…
-
Unscored —
In do_ipt_get_ctl and do_ipt_set_ctl of ip_tables.c, there is a possible way to leak kernel information due to uninitia…
-
High 7.8CVE-2021-1048 Exploited
In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lea…
KEV May 23, 2022 -
Medium 6.4CVE-2021-0920 Exploited
In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to loc…
KEV May 23, 2022 -
Unscored —
The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence w…
-
Unscored —
Improper input validation in the Intel(R) Ethernet ixgbe driver for Linux before version 3.17.3 may allow an authentica…
-
Unscored —
In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_ut…
-
Unscored —
In the Linux kernel through 5.15.2, mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb.c allows an attacker (…
-
Unscored —
An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detach_ca…
-
Unscored —
In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local …
-
Unscored —
In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to …
-
Unscored —
The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/fire…
-
Unscored —CVE-2021-42008 Public exploit
The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds wr…
-
Unscored —
prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to tr…
-
Unscored —
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VM…
-
Unscored —
A flaw was found in the Linux kernel. A corrupted timer tree caused the task wakeup to be missing in the timerqueue_add…
-
Unscored —
A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux ke…