Skip to content
OpenAdvisories

Platform

Linux

20,680 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

164 results · Clear filters · Feed

  • High 7.1
    CVE-2019-15792 Public exploit

    Type confusion in shiftfs

    In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() calls fdget(oldfd), then without further checks passes the resulting file* into shiftfs_real_fdget(), which casts file->pri…

    Ubuntu Shiftfs in the Linux kernel linux-raspi2 linux-riscv Linux Ubuntu
  • High 7.1
    CVE-2019-15791 Public exploit

    Reference count underflow in shiftfs

    In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() installs an fd referencing a file from the lower filesystem without taking an additional reference to that file. After the …

    Ubuntu Shiftfs in the Linux kernel linux-raspi2 linux-riscv Linux Ubuntu
  • High 7.8
    CVE-2020-8835 Public exploit

    Linux kernel bpf verifier vulnerability

    In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. The vulnerability also affects the Linux 5.4 stable …

    Linux kernel Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.5
    CVE-2019-11477 Public exploit EPSS 99%

    Integer overflow in TCP_SKB_CB(skb)->tcp_gso_segs

    Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fi…

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu