8,409 results · Feed
-
Critical max 9.8USN-6173-1 7 CVEs
linux-oem-6.1 vulnerabilities
Gwangun Jung discovered that the Quick Fair Queueing scheduler implementation in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (…
first Jun 16, 2023 -
High max 7.8USN-6151-1 4 CVEs
linux-xilinx-zynqmp vulnerabilities
It was discovered that the System V IPC implementation in the Linux kernel did not properly handle large shared memory counts. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2021-3669) It was discovered that the KVM VMX…
first Jun 8, 2023 -
High max 8.1USN-6090-1 10 CVEs
linux-gcp, linux-gcp-5.15, linux-gke, linux-gke-5.15, linux-gkeop, linux-oracle-5.15 vulnerabilities
It was discovered that some AMD x86-64 processors with SMT enabled could speculatively execute instructions using a return address from a sibling thread. A local attacker could possibly use this to expose sensitive information. (CVE-2022-27672) Zheng Wang dis…
first May 18, 2023 -
High max 7.8USN-6440-2 12 CVEs
linux-azure vulnerabilities
Seth Jenkins discovered that the Linux kernel did not properly perform address randomization for a per-cpu memory management structure. A local attacker could use this to expose sensitive information (kernel memory) or in conjunction with another kernel vulne…
first Oct 20, 2023 -
High max 7.8USN-6439-2 11 CVEs
linux-aws vulnerabilities
It was discovered that the IPv6 implementation in the Linux kernel contained a high rate of hash collisions in connection lookup table. A remote attacker could use this to cause a denial of service (excessive CPU consumption). (CVE-2023-1206) Yu Hao and Weite…
first Oct 23, 2023 -
High max 7.8USN-6343-1 7 CVEs
linux-oem-6.1 vulnerabilities
It was discovered that the IPv6 implementation in the Linux kernel contained a high rate of hash collisions in connection lookup table. A remote attacker could use this to cause a denial of service (excessive CPU consumption). (CVE-2023-1206) Ross Lagerwall d…
first Sep 6, 2023 -
High max 8.1
linux-intel-iotg-5.15 vulnerabilities
It was discovered that the Traffic-Control Index (TCINDEX) implementation in the Linux kernel did not properly perform filter deactivation in some situations. A local attacker could possibly use this to gain elevated privileges. Please note that with the fix …
first Jun 1, 2023 -
High max 7.8USN-6081-1 5 CVEs
linux, linux-aws, linux-aws-hwe, linux-kvm vulnerabilities
Jordy Zomer and Alexandra Sandulescu discovered that the Linux kernel did not properly implement speculative execution barriers in usercopy functions in certain situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-…
first May 16, 2023 -
High max 7.9
linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-azure-fde, linux-gcp, linux-gcp-5.15, linux-gkeop, linux-hwe-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle, linux-oracle-5.15, linux-raspi vulnerabilities
It was discovered that the KVM VMX implementation in the Linux kernel did not properly handle indirect branch prediction isolation between L1 and L2 VMs. An attacker in a guest VM could use this to expose sensitive information from the host OS or other guest …
first Mar 28, 2023 -
Medium max 5.5USN-6462-2 4 CVEs
linux-iot vulnerabilities
Seth Jenkins discovered that the Linux kernel did not properly perform address randomization for a per-cpu memory management structure. A local attacker could use this to expose sensitive information (kernel memory) or in conjunction with another kernel vulne…
first Nov 10, 2023 -
Critical max 9.1USN-6338-2 11 CVEs
linux-gcp, linux-gcp-6.2, linux-ibm, linux-oracle, linux-starfive vulnerabilities
Zi Fan Tan discovered that the binder IPC implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-21255) It was disc…
first Sep 8, 2023 -
High max 7.8USN-6174-1 3 CVEs
linux-oem-5.17 vulnerabilities
Jordy Zomer and Alexandra Sandulescu discovered that the Linux kernel did not properly implement speculative execution barriers in usercopy functions in certain situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-…
first Jun 16, 2023 -
High max 7.8USN-6093-1 9 CVEs
linux-bluefield vulnerabilities
It was discovered that the Traffic-Control Index (TCINDEX) implementation in the Linux kernel did not properly perform filter deactivation in some situations. A local attacker could possibly use this to gain elevated privileges. Please note that with the fix …
first May 22, 2023 -
High max 7.8USN-6032-1 7 CVEs
linux-oem-6.0 vulnerabilities
Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-36280) Gerald Lee discovered that the USB…
first Apr 19, 2023 -
High max 7.8USN-6020-1 4 CVEs
linux-bluefield vulnerabilities
It was discovered that the System V IPC implementation in the Linux kernel did not properly handle large shared memory counts. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2021-3669) It was discovered that the KVM VMX…
first Apr 14, 2023 -
High max 7.8USN-6014-1 51 CVEs
linux, linux-kvm, linux-lts-xenial vulnerabilities
Xuewei Feng, Chuanpu Fu, Qi Li, Kun Sun, and Ke Xu discovered that the TCP implementation in the Linux kernel did not properly handle IPID assignment. A remote attacker could use this to cause a denial of service (connection termination) or inject forged data…
first Apr 12, 2023 -
High max 7.8USN-6461-1 7 CVEs
linux-oem-6.1 vulnerabilities
Yu Hao discovered that the UBI driver in the Linux kernel did not properly check for MTD with zero erasesize during device attachment. A local privileged attacker could use this to cause a denial of service (system crash). (CVE-2023-31085) Marek Marczykowski-…
first Oct 31, 2023 -
High max 7.8USN-6440-3 12 CVEs
linux-aws-hwe vulnerabilities
Seth Jenkins discovered that the Linux kernel did not properly perform address randomization for a per-cpu memory management structure. A local attacker could use this to expose sensitive information (kernel memory) or in conjunction with another kernel vulne…
first Oct 25, 2023 -
High max 7.8USN-6132-1 13 CVEs
linux-aws-5.4, linux-bluefield vulnerabilities
Patryk Sondej and Piotr Krysiuk discovered that a race condition existed in the netfilter subsystem of the Linux kernel when processing batch requests, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (sy…
first Jun 1, 2023 -
High max 7.8USN-6118-1 8 CVEs
linux-oracle, linux-oracle-5.4 vulnerabilities
Zheng Wang discovered that the Intel i915 graphics driver in the Linux kernel did not properly handle certain error conditions, leading to a double-free. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3707) Jor…
first May 30, 2023 -
High max 7.8USN-6109-1 8 CVEs
linux-raspi, linux-raspi-5.4 vulnerabilities
Zheng Wang discovered that the Intel i915 graphics driver in the Linux kernel did not properly handle certain error conditions, leading to a double-free. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3707) Jor…
first May 25, 2023 -
High max 7.8USN-6096-1 25 CVEs
linux-gcp, linux-hwe-5.19 vulnerabilities
It was discovered that some AMD x86-64 processors with SMT enabled could speculatively execute instructions using a return address from a sibling thread. A local attacker could possibly use this to expose sensitive information. (CVE-2022-27672) Ziming Zhang d…
first May 22, 2023 -
High max 7.8USN-6095-1 5 CVEs
linux-gcp, linux-hwe, linux-raspi2, linux-snapdragon vulnerabilities
Jordy Zomer and Alexandra Sandulescu discovered that the Linux kernel did not properly implement speculative execution barriers in usercopy functions in certain situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-…
first May 22, 2023 -
High max 7.8USN-6092-1 5 CVEs
linux-azure, linux-azure-4.15 vulnerabilities
Jordy Zomer and Alexandra Sandulescu discovered that the Linux kernel did not properly implement speculative execution barriers in usercopy functions in certain situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-…
first May 18, 2023 -
High max 7.8USN-6084-1 5 CVEs
linux-gcp-4.15, linux-oracle vulnerabilities
Jordy Zomer and Alexandra Sandulescu discovered that the Linux kernel did not properly implement speculative execution barriers in usercopy functions in certain situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-…
first May 17, 2023 -
High max 7.8USN-6079-1 25 CVEs
linux, linux-aws, linux-azure, linux-azure-5.19, linux-kvm, linux-lowlatency, linux-raspi vulnerabilities
It was discovered that some AMD x86-64 processors with SMT enabled could speculatively execute instructions using a return address from a sibling thread. A local attacker could possibly use this to expose sensitive information. (CVE-2022-27672) Ziming Zhang d…
first May 16, 2023 -
High max 7.8USN-6235-1 8 CVEs
linux-oem-6.0 vulnerabilities
It was discovered that the NTFS file system implementation in the Linux kernel contained a null pointer dereference in some situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-4842) Jordy Zomer and Alexandra Sand…
first Jul 18, 2023 -
High max 8.1USN-6133-1 12 CVEs
linux-intel-iotg vulnerabilities
It was discovered that the Traffic-Control Index (TCINDEX) implementation in the Linux kernel did not properly perform filter deactivation in some situations. A local attacker could possibly use this to gain elevated privileges. Please note that with the fix …
first Jun 1, 2023 -
High max 7.9
linux-snapdragon vulnerabilities
It was discovered that the Traffic-Control Index (TCINDEX) implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-1…
first Apr 19, 2023 -
High max 7.8USN-6013-1 50 CVEs
linux-aws vulnerabilities
Xuewei Feng, Chuanpu Fu, Qi Li, Kun Sun, and Ke Xu discovered that the TCP implementation in the Linux kernel did not properly handle IPID assignment. A remote attacker could use this to cause a denial of service (connection termination) or inject forged data…
first Apr 12, 2023 -
High max 7.9
linux-gcp vulnerabilities
It was discovered that the System V IPC implementation in the Linux kernel did not properly handle large shared memory counts. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2021-3669) It was discovered that a use-after…
first Apr 11, 2023 -
High max 7.9
linux-gcp-4.15 vulnerabilities
It was discovered that the System V IPC implementation in the Linux kernel did not properly handle large shared memory counts. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2021-3669) It was discovered that a use-after…
first Mar 31, 2023 -
High max 7.8USN-5980-1 4 CVEs
linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-kvm, linux-oracle, linux-raspi vulnerabilities
It was discovered that the System V IPC implementation in the Linux kernel did not properly handle large shared memory counts. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2021-3669) It was discovered that the KVM VMX…
first Mar 28, 2023 -
High max 7.8USN-5935-1 18 CVEs
linux-ibm, linux-raspi vulnerabilities
It was discovered that the Upper Level Protocol (ULP) subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state in certain protocols, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of…
first Mar 7, 2023 -
High max 7.9
linux-gke, linux-gke-5.15, linux-ibm, linux-kvm vulnerabilities
It was discovered that the KVM VMX implementation in the Linux kernel did not properly handle indirect branch prediction isolation between L1 and L2 VMs. An attacker in a guest VM could use this to expose sensitive information from the host OS or other guest …
first Mar 29, 2023 -
High max 8.1
linux-gcp-5.4 vulnerabilities
It was discovered that the Upper Level Protocol (ULP) subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state in certain protocols, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of…
first Mar 8, 2023 -
High max 7.8USN-5977-1 3 CVEs
linux-oem-6.0 vulnerabilities
It was discovered that the Traffic-Control Index (TCINDEX) implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-1…
first Mar 27, 2023 -
High max 7.8USN-5938-1 18 CVEs
linux-gkeop vulnerabilities
It was discovered that the Upper Level Protocol (ULP) subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state in certain protocols, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of…
first Mar 8, 2023 -
High max 7.8USN-6001-1 50 CVEs
linux-aws vulnerabilities
Xuewei Feng, Chuanpu Fu, Qi Li, Kun Sun, and Ke Xu discovered that the TCP implementation in the Linux kernel did not properly handle IPID assignment. A remote attacker could use this to cause a denial of service (connection termination) or inject forged data…
first Apr 6, 2023 -
High max 7.8USN-5985-1 4 CVEs
linux-aws-5.4, linux-azure-5.4, linux-gcp-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-oracle-5.4, linux-raspi-5.4 vulnerabilities
It was discovered that the System V IPC implementation in the Linux kernel did not properly handle large shared memory counts. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2021-3669) It was discovered that the KVM VMX…
first Mar 29, 2023