Vulnerability index

Browse CVEs

664 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Out-of-bounds ReadCWE-125 × clear
Linux Kernel HIGH 7.1
CVE-2023-52565

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix OOB read If the index provided by the user is bigger than …

Fix: 6.1.56 / 6.5.6+
Fix from $1,950 2024-03-02
Linux Kernel HIGH 7.1
CVE-2023-52501

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not attempt to read past "commit" When iterating over the ring …

Fix: 5.10.198 / 5.15.134+
Fix from $1,950 2024-03-02
Linux Kernel HIGH 7.1
CVE-2023-52504

In the Linux kernel, the following vulnerability has been resolved: x86/alternatives: Disable KASAN in apply_alternatives() Fei has reported that K…

Fix: 4.19.297 / 5.4.270+
Fix from $1,950 2024-03-02
Linux Kernel HIGH 7.1
CVE-2023-52507

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: assert requested protocol is valid The protocol is used in a bit mask…

Fix: 4.14.328 / 4.19.297+
Fix from $1,950 2024-03-02
Linux Kernel HIGH 7.7
CVE-2021-47044

In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix shift-out-of-bounds in load_balance() Syzbot reported a handful…

Fix: 5.10.37 / 5.11.21+
Fix from $1,950 2024-02-28
Linux Kernel HIGH 7.1
CVE-2021-47039

In the Linux kernel, the following vulnerability has been resolved: ataflop: potential out of bounds in do_format() The function uses "type" as an …

Fix: 5.11.21 / 5.12.4+
Fix from $1,950 2024-02-28
Linux Kernel HIGH 7.1
CVE-2021-46980

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4 commit 4dbc…

Fix: 5.10.38 / 5.11.22+
Fix from $1,950 2024-02-28
Linux Kernel HIGH 7.1
CVE-2021-46992

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: avoid overflows in nft_hash_buckets() Number of buckets be…

Fix: 4.14.233 / 4.19.191+
Fix from $1,950 2024-02-28
Linux Kernel HIGH 7.1
CVE-2021-46993

In the Linux kernel, the following vulnerability has been resolved: sched: Fix out-of-bound access in uclamp Util-clamp places tasks in different b…

Fix: 5.4.120 / 5.10.38+
Fix from $1,950 2024-02-28
Linux Kernel HIGH 7.1
CVE-2021-46965

In the Linux kernel, the following vulnerability has been resolved: mtd: physmap: physmap-bt1-rom: Fix unintentional stack access Cast &data to (ch…

Fix: 5.10.36 / 5.11.20+
Fix from $1,950 2024-02-27
Linux Kernel HIGH 7.1
CVE-2021-46952

In the Linux kernel, the following vulnerability has been resolved: NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds Fix shift …

Fix: 5.10.36 / 5.11.20+
Fix from $1,950 2024-02-27
Linux Kernel HIGH 7.1
CVE-2021-46954

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets when 'ac…

Fix: 5.11.20 / 5.12.3+
Fix from $1,950 2024-02-27
Linux Kernel HIGH 7.1
CVE-2021-46955

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB read while fragmenting IPv4 packets running openvswi…

Fix: 4.4.269 / 4.9.269+
Fix from $1,950 2024-02-27
Linux Kernel HIGH 7.1
CVE-2019-25160

In the Linux kernel, the following vulnerability has been resolved: netlabel: fix out-of-bounds memory accesses There are two array out-of-bounds m…

Fix: 3.16.66 / 3.18.137+
Fix from $1,950 2024-02-26
Linux Kernel HIGH 7.1
CVE-2024-26597

In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: fix global oob in rmnet_policy The variable rmnet_link_op…

Fix: 4.19.306 / 5.4.268+
Fix from $1,950 2024-02-23
Linux Kernel HIGH 7.1
CVE-2024-26594EPSS 51%

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate mech token in session setup If client send invalid mech token i…

Fix: 5.15.149 / 6.1.75+
Fix from $1,950 2024-02-23
Linux Kernel HIGH 7.1
CVE-2024-26593

In the Linux kernel, the following vulnerability has been resolved: i2c: i801: Fix block process call transactions According to the Intel datasheet…

Fix: 5.4.269 / 5.10.210+
Fix from $1,950 2024-02-23
Linux Kernel HIGH 7.8
CVE-2024-26588

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Prevent out-of-bounds memory access The test_tag test triggers …

Fix: 6.1.75 / 6.6.14+
Fix from $1,950 2024-02-22
Linux Kernel HIGH 7.8
CVE-2024-22705

An issue was discovered in ksmbd in the Linux kernel before 6.6.10. smb2_get_data_area_len in fs/smb/server/smb2misc.c can cause an smb_strndup_from_…

Fix: 6.6.10+
Fix from $1,950 2024-01-23
Linux Kernel HIGH 7.5
CVE-2023-39197

An out-of-bounds read vulnerability was found in Netfilter Connection Tracking (conntrack) in the Linux kernel. This flaw allows a remote user to dis…

Fix: 5.4.251 / 5.10.188+
Fix from $1,950 2024-01-23
Linux Kernel HIGH 7.8
CVE-2023-6040

An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported…

Fix: 4.19.305 / 5.4.267+
Fix from $1,950 2024-01-12
Linux Kernel HIGH 7.8
CVE-2021-3600

It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div…

Fix: 4.14.308 / 4.19.206+
Fix from $1,950 2024-01-08
Linux Kernel HIGH 7.1
CVE-2023-6606

An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker …

Fix: 6.7+
Fix from $1,950 2023-12-08
Linux Kernel HIGH 7.1
CVE-2023-6610

An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel. This issue could allow a local atta…

No fix yet
Fix from $1,950 2023-12-08
Linux Kernel HIGH 8.1
CVE-2023-1194

An out-of-bounds (OOB) memory read flaw was found in parse_lease_state in the KSMBD implementation of the in-kernel samba server and CIFS in the Linu…

Fix: 5.15.145 / 6.1.34+
Fix from $1,950 2023-11-03
Linux Kernel MEDIUM 6.0
CVE-2023-39189

A flaw was found in the Netfilter subsystem in the Linux kernel. The nfnl_osf_add_callback function did not validate the user mode controlled opt_num…

Fix: 6.6+
Fix from $1,600 2023-10-09
Linux Kernel MEDIUM 6.0
CVE-2023-39192

A flaw was found in the Netfilter subsystem in the Linux kernel. The xt_u32 module did not validate the fields in the xt_u32 structure. This flaw all…

Fix: 6.6+
Fix from $1,600 2023-10-09
Linux Kernel MEDIUM 6.0
CVE-2023-39193

A flaw was found in the Netfilter subsystem in the Linux kernel. The sctp_mt_check did not validate the flag_count field. This flaw allows a local pr…

Fix: 6.6+
Fix from $1,600 2023-10-09
Linux Kernel MEDIUM 5.5
CVE-2023-42755

A flaw was found in the IPv4 Resource Reservation Protocol (RSVP) classifier in the Linux kernel. The xprt pointer may go beyond the linear part of t…

Fix: 6.3+
Fix from $1,600 2023-10-05
Linux Kernel MEDIUM 6.5
CVE-2023-20848

In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local escalation of privilege with S…

Mitigation only
Fix from $1,600 2023-09-04