Browse CVEs

CRITICAL 9.8 CVE-2023-52755EPSS 28% In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab out of bounds write in smb_inherit_dacl() slab out-of-bounds wr… Linux Kernel 5.15.140 / 6.1.64+ Fix from $2,3002024-05-21 CRITICAL 9.1 CVE-2023-52735 In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself sock_map pr… Linux Kernel 5.15.95 / 6.1.13+ Fix from $2,3002024-05-21 CRITICAL 9.8 CVE-2021-47378 In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: destroy cm id before destroy qp to avoid use after free We should al… Linux Kernel 5.10.70 / 5.14.9+ Fix from $2,3002024-05-21 CRITICAL 9.1 CVE-2021-47348 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid HDCP over-read and corruption Instead of reading the des… Linux Kernel 5.10.51 / 5.12.18+ Fix from $2,3002024-05-21 CRITICAL 9.8 CVE-2021-47232 In the Linux kernel, the following vulnerability has been resolved: can: j1939: fix Use-after-Free, hold skb ref while in use This patch fixes a Us… Linux Kernel 5.4.128 / 5.10.46+ Fix from $2,3002024-05-21 CRITICAL 9.1 CVE-2024-35960 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Properly link new fs rules into the tree Previously, add_rule_fg woul… Linux Kernel 4.19.313 / 5.4.275+ Fix from $2,3002024-05-20 CRITICAL 9.8 CVE-2024-35865 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_valid_oplock_break() Skip sessions th… Linux Kernel 6.1.85 / 6.6.26+ Fix from $2,3002024-05-19 CRITICAL 9.8 CVE-2024-35869 In the Linux kernel, the following vulnerability has been resolved: smb: client: guarantee refcounted children from parent session Avoid potential … Linux Kernel 6.3 / 6.6.29+ Fix from $2,3002024-05-19 CRITICAL 9.8 CVE-2024-35870 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in smb2_reconnect_server() The UAF bug is due to smb2_reco… Linux Kernel 6.1.121 / 6.6.29+ Fix from $2,3002024-05-19 CRITICAL 9.1 CVE-2024-35845 In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dbg-tlv: ensure NUL termination The iwl_fw_ini_debug_info_tlv is… Linux Kernel 5.10.214 / 5.15.153+ Fix from $2,3002024-05-17 CRITICAL 9.8 CVE-2022-48697 In the Linux kernel, the following vulnerability has been resolved: nvmet: fix a use-after-free Fix the following use-after-free complaint triggere… Linux Kernel 4.19.260 / 5.4.213+ Fix from $2,3002024-05-03 CRITICAL 9.8 CVE-2022-48666 In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix a use-after-free There are two .exit_cmd_priv implementations. … Linux Kernel 5.19.12+ Fix from $2,3002024-04-28 CRITICAL 9.4 CVE-2024-26828 In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parse_server_interfaces() In this loop, we step through … Linux Kernel 6.1.79 / 6.6.18+ Fix from $2,3002024-04-17 CRITICAL 9.8 CVE-2021-47137 In the Linux kernel, the following vulnerability has been resolved: net: lantiq: fix memory corruption in RX ring In a situation where memory alloc… Linux Kernel 5.4.124 / 5.10.42+ Fix from $2,3002024-03-25 CRITICAL 9.8 CVE-2023-38427 An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassem… Linux Kernel 5.15.145 / 6.1.34+ Fix from $2,3002023-07-18 CRITICAL 9.8 CVE-2023-38429 An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/connection.c in ksmbd has an off-by-one error in memory allocation (because of ksm… Linux Kernel 5.15.113 / 6.1.30+ Fix from $2,3002023-07-18 CRITICAL 9.1 CVE-2023-38426 An issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bounds read in smb2_find_context_vals when create_context's name_len is… Linux Kernel 5.15.113 / 6.1.30+ Fix from $2,3002023-07-18 CRITICAL 9.1 CVE-2023-38428 An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not properly check the UserName value because it does not … Linux Kernel 5.15.113 / 6.1.30+ Fix from $2,3002023-07-18 CRITICAL 9.1 CVE-2023-38430 An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read. Linux Kernel 5.15.145 / 6.1.35+ Fix from $2,3002023-07-18 CRITICAL 9.1 CVE-2023-38431 An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/connection.c in ksmbd does not validate the relationship between the NetBIOS … Linux Kernel 5.15.145 / 6.1.34+ Fix from $2,3002023-07-18 CRITICAL 9.1 CVE-2023-38432 An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does not validate the relationship between the command p… Linux Kernel 5.15.121 / 6.1.36+ Fix from $2,3002023-07-18 CRITICAL 9.8 CVE-2022-47939EPSS 46% An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c has a use-after-free and OOPS for SMB2_TREE_… Linux Kernel 5.15.61 / 5.18.18+ Fix from $2,3002022-12-23 CRITICAL 9.8 CVE-2021-3773EPSS 5% A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for further use in traditional network … Linux Kernel 5.14 / 5.15.15+ Fix from $2,3002022-02-16 CRITICAL 9.8 CVE-2021-43267EPSS 58% An issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16. The Transparent Inter-Process Communication (TIPC) functionality all… Linux Kernel 5.10.77 / 5.14.16+ Fix from $2,3002021-11-02 CRITICAL 9.8 CVE-2021-25434 Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary code execution using param par… Tizen 5.5+ Fix from $2,3002021-07-08 CRITICAL 9.8 CVE-2021-25435 Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary code execution using recovery … Tizen 5.5+ Fix from $2,3002021-07-08 CRITICAL 9.8 CVE-2021-25436 Improper input validation vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows arbitrary code execution via Samsung A… Tizen 5.5+ Fix from $2,3002021-07-08 CRITICAL 9.8 CVE-2021-25437 Improper access control vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows attackers to arbitrary code execution by… Tizen 5.5+ Fix from $2,3002021-07-08 CRITICAL 9.8 CVE-2019-14901EPSS 17% A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerability allows… Linux Kernel 3.16.83 / 4.4.217+ Fix from $2,3002019-11-29 CRITICAL 9.8 CVE-2019-14897 A stack-based buffer overflow was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. An attacker is able to cause a denia… Linux Kernel 3.16.83 / 4.4.212+ Fix from $2,3002019-11-29