Browse CVEs

HIGH 7.0 CVE-2020-25668 A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading to a use after free in con_fon… Linux Kernel 4.4.242 / 4.9.242+ Fix from $1,9502021-05-26 HIGH 7.0 CVE-2021-32399 net/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for removal of the HCI controller. Linux Kernel after 5.12.2 Fix from $1,9502021-05-10 HIGH 7.0 CVE-2021-23133 A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a netwo… Linux Kernel 4.4.269 / 4.9.269+ Fix from $1,9502021-04-22 MEDIUM 6.4 CVE-2021-20261 A race condition was found in the Linux kernels implementation of the floppy disk drive controller driver software. The impact of this issue is lesse… Linux Kernel 4.5+ Fix from $1,6002021-03-11 HIGH 7.0 CVE-2021-3348 nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could be triggered by local attacke… Linux Kernel after 5.10.12 Fix from $1,9502021-02-01 MEDIUM 5.7 CVE-2020-27825 A use-after-free flaw was found in kernel/trace/ring_buffer.c in Linux kernel (before 5.10-rc1). There was a race problem in trace_open and resize of… Linux Kernel Patch available Fix from $1,6002020-12-11 HIGH 7.0 CVE-2020-29368 An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintend… Linux Kernel 4.9.228 / 4.14.185+ Fix from $1,9502020-11-28 HIGH 7.0 CVE-2020-29369 An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions (expand_downwards … Linux Kernel 5.4.54 / 5.7.11+ Fix from $1,9502020-11-28 HIGH 7.0 CVE-2020-29370 An issue was discovered in kmem_cache_alloc_bulk in mm/slub.c in the Linux kernel before 5.5.11. The slowpath lacks the required TID increment, aka C… Linux Kernel 5.5.11+ Fix from $1,9502020-11-28 MEDIUM 6.4 CVE-2020-25285 A race condition between hugetlb sysctl handlers in mm/hugetlb.c in the Linux kernel before 5.8.8 could be used by local attackers to corrupt memory,… Linux Kernel 5.8.8+ Fix from $1,6002020-09-13 HIGH 7.0 CVE-2019-14898 The fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10 was not complete. A local user could use this flaw to obtain sensitive informati… Linux Kernel Patch available Fix from $1,9502020-05-08 HIGH 7.0 CVE-2020-11884 In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enable_… Linux Kernel 4.19.119 / 5.4.36+ Fix from $1,9502020-04-29 MEDIUM 6.5 CVE-2020-8834 KVM in the Linux kernel on Power8 processors has a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restor… Linux Kernel No fix yet Fix from $1,6002020-04-09 HIGH 7.0 CVE-2011-0699 Integer signedness error in the btrfs_ioctl_space_info function in the Linux kernel 2.6.37 allows local users to cause a denial of service (heap-base… Linux Kernel Patch available Fix from $1,9502020-02-20 MEDIUM 5.9 CVE-2007-4774 The Linux kernel before 2.4.36-rc1 has a race condition. It was possible to bypass systrace policies by flooding the ptraced process with SIGCONT sig… Linux Kernel after 2.4.35 Fix from $1,6002020-01-15 HIGH 7.0 CVE-2019-18683 An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is exploitable for privilege escalation on some Linux d… Linux Kernel 4.4.204 / 4.9.204+ Fix from $1,9502019-11-04 HIGH 7.0 CVE-2016-10906 An issue was discovered in drivers/net/ethernet/arc/emac_main.c in the Linux kernel before 4.5. A use-after-free is caused by a race condition betwee… Linux Kernel 4.5+ Fix from $1,9502019-08-19 HIGH 7.0 CVE-2019-13233 In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry because of a race condition betwee… Linux Kernel 5.1.9+ Fix from $1,9502019-07-04 HIGH 8.1 CVE-2019-11815 An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free… Linux Kernel 4.4.179 / 4.9.169+ Fix from $1,9502019-05-08 HIGH 8.1 CVE-2018-20836EPSS 5% An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/… Linux Kernel 3.16.72 / 3.18.140+ Fix from $1,9502019-05-07 HIGH 7.0 CVE-2019-11486 The Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel before 5.0.8 has multiple race conditions. Linux Kernel 3.16.66 / 3.18.139+ Fix from $1,9502019-04-23 MEDIUM 6.1 CVE-2019-3837 It was found that the net_dma code in tcp_recvmsg() in the 2.6.32 kernel as shipped in RHEL6 is thread-unsafe. So an unprivileged multi-threaded user… Linux Kernel Patch available Fix from $1,6002019-04-11 HIGH 8.1 CVE-2019-6974EPSS 17% In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading … Linux Kernel 3.16.64 / 3.18.136+ Fix from $1,9502019-02-15 HIGH 8.1 CVE-2018-18559 In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanout_add from setsockopt and bind on an AF_PACKET sock… Linux Kernel 3.2.100 / 3.15+ Fix from $1,9502018-10-22 MEDIUM 5.5 CVE-2018-17972 An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may i… Linux Kernel after 4.18.11 Fix from $1,6002018-10-03 HIGH 7.0 CVE-2018-14625 A flaw was found in the Linux Kernel where an attacker may be able to have an uncontrolled read to kernel-memory from within a vm guest. A race condi… Linux Kernel Patch available Fix from $1,9502018-09-10 HIGH 7.0 CVE-2018-5873 An issue was discovered in the __ns_get_path function in fs/nsfs.c in the Linux kernel before 4.11. Due to a race condition when accessing files, a U… Linux Kernel 4.1.50 / 4.4.116+ Fix from $1,9502018-07-06 MEDIUM 6.3 CVE-2018-12633 An issue was discovered in the Linux kernel through 4.17.2. vbg_misc_device_ioctl() in drivers/virt/vboxguest/vboxguest_linux.c reads the same user d… Linux Kernel after 4.17.2 Fix from $1,6002018-06-22 HIGH 7.0 CVE-2018-5814 In the Linux Kernel before version 4.16.11, 4.14.43, 4.9.102, and 4.4.133, multiple race condition errors when handling probe, disconnect, and rebind… Linux Kernel 4.4.133+ Fix from $1,9502018-06-12 MEDIUM 5.9 CVE-2018-12232EPSS 7% In net/socket.c in the Linux kernel through 4.17.1, there is a race condition between fchownat and close in cases where they target the same socket f… Linux Kernel after 4.17.1 Fix from $1,6002018-06-12