Browse CVEs

MEDIUM 6.5 CVE-2023-20840 In imgsys, there is a possible out of bounds read and write due to a missing valid range checking. This could lead to local escalation of privilege w… Linux Kernel Mitigation only Fix from $1,6002023-09-04 CRITICAL 9.8 CVE-2023-38427 An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassem… Linux Kernel 5.15.145 / 6.1.34+ Fix from $2,3002023-07-18 CRITICAL 9.1 CVE-2023-38426 An issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bounds read in smb2_find_context_vals when create_context's name_len is… Linux Kernel 5.15.113 / 6.1.30+ Fix from $2,3002023-07-18 CRITICAL 9.1 CVE-2023-38428 An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not properly check the UserName value because it does not … Linux Kernel 5.15.113 / 6.1.30+ Fix from $2,3002023-07-18 CRITICAL 9.1 CVE-2023-38430 An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read. Linux Kernel 5.15.145 / 6.1.35+ Fix from $2,3002023-07-18 CRITICAL 9.1 CVE-2023-38431 An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/connection.c in ksmbd does not validate the relationship between the NetBIOS … Linux Kernel 5.15.145 / 6.1.34+ Fix from $2,3002023-07-18 CRITICAL 9.1 CVE-2023-38432 An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does not validate the relationship between the command p… Linux Kernel 5.15.121 / 6.1.36+ Fix from $2,3002023-07-18 HIGH 7.1 CVE-2023-3268 An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs. This flaw coul… Linux Kernel 6.4+ Fix from $1,9502023-06-16 HIGH 7.1 CVE-2022-48502 An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an … Linux Kernel 5.15.121 / 6.1.40+ Fix from $1,9502023-05-31 MEDIUM 5.5 CVE-2023-34256 An issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16 in lib/crc16.c when called from fs/ext4/super.c bec… Linux Kernel 6.3.3+ Fix from $1,6002023-05-31 HIGH 7.8 CVE-2023-2176 A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel. The improper cleanup results in out-… Linux Kernel 6.1.81 / 6.3+ Fix from $1,9502023-04-20 MEDIUM 5.3 CVE-2023-28866 In the Linux kernel through 6.2.8, net/bluetooth/hci_sync.c allows out-of-bounds access because amp_init1[] and amp_init2[] are supposed to have an i… Linux Kernel after 6.2.8 Fix from $1,6002023-03-27 HIGH 7.1 CVE-2023-26607 In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c. Linux Kernel 4.9.334 / 4.14.300+ Fix from $1,9502023-02-26 HIGH 8.1 CVE-2022-47943 An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is an out-of-bounds read and OOPS for SMB2_WRITE, when th… Linux Kernel 5.15.62 / 5.18.18+ Fix from $1,9502022-12-23 HIGH 8.1 CVE-2022-47940 An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.18 before 5.18.18. fs/ksmbd/smb2pdu.c lacks length validation in the non-padding … Linux Kernel 5.15.145 / 5.18.18+ Fix from $1,9502022-12-23 MEDIUM 6.5 CVE-2022-47938EPSS 58% An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2misc.c has an out-of-bounds read and OOPS for SMB2… Linux Kernel 5.19.2+ Fix from $1,6002022-12-23 HIGH 7.1 CVE-2022-47520 An issue was discovered in the Linux kernel before 6.0.11. Missing offset validation in drivers/net/wireless/microchip/wilc1000/hif.c in the WILC1000… Linux Kernel 5.10.157 / 5.15.81+ Fix from $1,9502022-12-18 MEDIUM 5.5 CVE-2022-2785 There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpf_sys_bpf are not v… Linux Kernel 5.19.4+ Fix from $1,6002022-09-23 HIGH 7.8 CVE-2022-3170 An out-of-bounds access issue was found in the Linux kernel sound subsystem. It could occur when the 'id->name' provided by the user did not end with… Linux Kernel Patch available Fix from $1,9502022-09-13 MEDIUM 5.5 CVE-2022-2905 An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call function with a key larger than… Linux Kernel 6.0+ Fix from $1,6002022-09-09 MEDIUM 6.1 CVE-2022-1508 An out-of-bounds read flaw was found in the Linux kernel’s io_uring module in the way a user triggers the io_read() function with some special parame… Linux Kernel 5.15+ Fix from $1,6002022-08-31 HIGH 7.5 CVE-2022-0400 An out-of-bounds read vulnerability was discovered in linux kernel in the smc protocol stack, causing remote dos. Linux Kernel Mitigation only Fix from $1,9502022-08-29 MEDIUM 5.5 CVE-2022-2380 The Linux kernel was found vulnerable out of bounds memory access in the drivers/video/fbdev/sm712fb.c:smtcfb_read() function. The vulnerability coul… Linux Kernel 5.18+ Fix from $1,6002022-07-13 HIGH 7.1 CVE-2021-3743 An out-of-bounds (OOB) memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel. A missing sanity check allows a local atta… Linux Kernel 5.17+ Fix from $1,9502022-03-04 HIGH 8.8 CVE-2021-4093 A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State (SEV-ES). A KVM guest using SEV-ES can trig… Linux Kernel 5.14.16+ Fix from $1,9502022-02-18 HIGH 7.8 CVE-2021-45469 In __f2fs_setxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of-bounds memory access when an inode has an invalid last … Linux Kernel after 5.15.11 Fix from $1,9502021-12-23 MEDIUM 5.5 CVE-2021-43389 An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isd… Linux Kernel 5.14.15+ Fix from $1,6002021-11-04 HIGH 7.5 CVE-2021-38202 fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-bounds read in strlen) by sending… Linux Kernel 5.13.4+ Fix from $1,9502021-08-08 MEDIUM 5.9 CVE-2020-28097 The vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback. There is a vgacon_scrolldelta out-of-bounds read, aka CID-973c… Linux Kernel 5.8.10+ Fix from $1,6002021-06-24 HIGH 7.1 CVE-2021-32078 An Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux kernel through 5.12.11 because of the lack of a check fo… Linux Kernel after 5.12.11 Fix from $1,9502021-06-17