Browse CVEs

HIGH 7.1 CVE-2020-36386 An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hci_event.c has a slab out-of-bounds read in hci_extended_inquiry_result_evt,… Linux Kernel 5.8.1+ Fix from $1,9502021-06-07 HIGH 7.8 CVE-2021-3490EPSS 27% The eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) in the Linux kernel did not properly update 32-bit bounds, which could be turned int… Linux Kernel 5.10.37 / 5.11.21+ Fix from $1,9502021-06-04 HIGH 7.8 CVE-2020-35519 An out-of-bounds (OOB) memory access flaw was found in x25_bind in net/x25/af_x25.c in the Linux kernel version v5.12-rc5. A bounds check failure all… Linux Kernel 4.4.248 / 4.9.248+ Fix from $1,9502021-05-06 MEDIUM 5.5 CVE-2021-29155 An issue was discovered in the Linux kernel through 5.11.x. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmeti… Linux Kernel 5.11.16+ Fix from $1,6002021-04-20 HIGH 7.1 CVE-2021-3506 An out-of-bounds (OOB) memory access flaw was found in fs/f2fs/node.c in the f2fs module in the Linux kernel in versions before 5.12.0-rc4. A bounds … Linux Kernel 5.12+ Fix from $1,9502021-04-19 HIGH 7.8 CVE-2021-3444 The bpf verifier in the Linux kernel did not properly handle mod32 destination register truncation when the source register was known to be 0. A loca… Linux Kernel 5.4.101 / 5.10.19+ Fix from $1,9502021-03-23 HIGH 7.1 CVE-2021-27364 An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an unprivileg… Linux Kernel 4.4.260 / 4.9.260+ Fix from $1,9502021-03-07 MEDIUM 5.0 CVE-2020-28974 A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged information or potentially cr… Linux Kernel 5.9.7+ Fix from $1,6002020-11-20 MEDIUM 5.8 CVE-2020-28915 A buffer over-read (at the framebuffer layer) in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel mem… Linux Kernel 5.8.15+ Fix from $1,6002020-11-18 MEDIUM 5.5 CVE-2020-14314 A memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4 file system, in the way it accesses a directory with… Linux Kernel after 5.8.9 Fix from $1,6002020-09-15 MEDIUM 6.5 CVE-2020-13143 gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibil… Linux Kernel after 5.6.13 Fix from $1,6002020-05-18 HIGH 7.8 CVE-2020-8835EPSS 6% In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, le… Linux Kernel 5.4.29 / 5.5.14+ Fix from $1,9502020-04-02 HIGH 7.1 CVE-2020-9383 An issue was discovered in the Linux kernel 3.16 through 5.5.6. set_fdc in drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read becaus… Linux Kernel after 5.5.6 Fix from $1,9502020-02-25 MEDIUM 6.0 CVE-2019-19927 In the Linux kernel 5.0.0-rc7 (as distributed in ubuntu/linux.git on kernel.ubuntu.com), mounting a crafted f2fs filesystem image and performing some… Linux Kernel Patch available Fix from $1,6002019-12-31 HIGH 7.8 CVE-2019-19449 In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f… Linux Kernel No fix yet Fix from $1,9502019-12-08 HIGH 7.8 CVE-2019-19252 vcs_write in drivers/tty/vt/vc_screen.c in the Linux kernel through 5.3.13 does not prevent write access to vcsu devices, aka CID-0c9acb1af77a. Linux Kernel after 5.3.13 Fix from $1,9502019-11-25 CRITICAL 9.1 CVE-2014-3180 In kernel/compat.c in the Linux kernel before 3.17, as used in Google Chrome OS and other products, there is a possible out-of-bounds read. restart_s… Linux Kernel 3.17+ Fix from $2,3002019-11-06 CRITICAL 9.1 CVE-2019-15926EPSS 5% An issue was discovered in the Linux kernel before 5.2.3. Out of bounds access exists in the functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl… Linux Kernel 3.16.74 / 4.4.187+ Fix from $2,3002019-09-04 HIGH 7.8 CVE-2019-15927 An issue was discovered in the Linux kernel before 4.20.2. An out-of-bounds access exists in the function build_audio_procunit in the file sound/usb/… Linux Kernel 3.16.66 / 3.18.132+ Fix from $1,9502019-09-04 HIGH 7.8 CVE-2019-15925 An issue was discovered in the Linux kernel before 5.2.3. An out of bounds access exists in the function hclge_tm_schd_mode_vnet_base_cfg in the file… Linux Kernel 4.14.135 / 4.19.61+ Fix from $1,9502019-09-04 HIGH 7.8 CVE-2019-15918 An issue was discovered in the Linux kernel before 5.0.10. SMB2_negotiate in fs/cifs/smb2pdu.c has an out-of-bounds read because data structures are … Linux Kernel 4.14.166 / 4.19.73+ Fix from $1,9502019-09-04 CRITICAL 9.8 CVE-2019-15505EPSS 8% drivers/media/usb/dvb-usb/technisat-usb2.c in the Linux kernel through 5.2.9 has an out-of-bounds read via crafted USB device traffic (which may be r… Linux Kernel 3.16.77 / 4.4.194+ Fix from $2,3002019-08-23 MEDIUM 6.7 CVE-2019-15090 An issue was discovered in drivers/scsi/qedi/qedi_dbg.c in the Linux kernel before 5.1.12. In the qedi_dbg_* family of functions, there is an out-of-… Linux Kernel 5.1.12+ Fix from $1,6002019-08-16 MEDIUM 5.5 CVE-2015-9289 In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size … Linux Kernel 4.1.4+ Fix from $1,6002019-07-27 MEDIUM 6.8 CVE-2019-14283 In the Linux kernel before 5.2.3, set_geometry in drivers/block/floppy.c does not validate the sect and head fields, as demonstrated by an integer ov… Linux Kernel 5.2.3+ Fix from $1,6002019-07-26 HIGH 7.8 CVE-2018-20854 An issue was discovered in the Linux kernel before 4.20. drivers/phy/mscc/phy-ocelot-serdes.c has an off-by-one error with a resultant ctrl->phys out… Linux Kernel 4.20+ Fix from $1,9502019-07-26 MEDIUM 6.5 CVE-2019-3459 A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1. Linux Kernel after 5.1 Fix from $1,6002019-04-11 MEDIUM 5.5 CVE-2018-16885 A flaw was found in the Linux kernel that allows the userspace to call memcpy_fromiovecend() and similar functions with a zero offset and buffer leng… Linux Kernel after 3.10.90 Fix from $1,6002019-01-03 HIGH 7.8 CVE-2018-18445 In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in the BPF verifier permits out-o… Linux Kernel 4.14.75 / 4.18.13+ Fix from $1,9502018-10-17 HIGH 7.8 CVE-2018-15471 An issue was discovered in xenvif_set_hash_mapping in drivers/net/xen-netback/hash.c in the Linux kernel through 4.18.1, as used in Xen through 4.11.… Linux Kernel 4.9.133 / 4.14.76+ Fix from $1,9502018-08-17