Vulnerability index

Browse CVEs

66 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Uncontrolled Resource ConsumptionCWE-400 × clear
Linux Kernel MEDIUM 5.5
CVE-2021-3764

A memory leak flaw was found in the Linux kernel's ccp_run_aes_gcm_cmd() function that allows an attacker to cause a denial of service. The vulnerabi…

Fix: after 5.14.20
Fix from $1,600 2022-08-23
Linux Kernel MEDIUM 5.5
CVE-2021-3679

A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffe…

Fix: 5.14+
Fix from $1,600 2021-08-05
Linux Kernel MEDIUM 5.5
CVE-2020-25673

A vulnerability was found in Linux kernel where non-blocking socket in llcp_sock_connect() leads to leak and eventually hanging-up the system.

Fix: 5.3.18+
Fix from $1,600 2021-05-26
Linux Kernel MEDIUM 5.5
CVE-2021-20265

A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a signal was pending. This flaw …

Fix: after 7.7.1
Fix from $1,600 2021-03-10
Linux Kernel MEDIUM 5.5
CVE-2019-20812

An issue was discovered in the Linux kernel before 5.4.7. The prb_calc_retire_blk_tmo() function in net/packet/af_packet.c can result in a denial of …

Fix: 5.4.7+
Fix from $1,600 2020-06-03
Linux Kernel MEDIUM 5.5
CVE-2020-8992

ext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows attackers to cause a denial of service (soft lockup)…

Fix: after 5.5.3
Fix from $1,600 2020-02-14
Linux Kernel MEDIUM 5.5
CVE-2012-0810

The int3 handler in the Linux kernel before 3.3 relies on a per-CPU debug stack, which allows local users to cause a denial of service (stack corrupt…

Fix: 3.3+
Fix from $1,600 2020-02-12
Linux Kernel MEDIUM 5.5
CVE-2011-1474

A locally locally exploitable DOS vulnerability was found in pax-linux versions 2.6.32.33-test79.patch, 2.6.38-test3.patch, and 2.6.37.4-test14.patch…

Mitigation only
Fix from $1,600 2019-12-26
Linux Kernel MEDIUM 5.5
CVE-2019-19922

kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows attackers to cause a denial of se…

Fix: 5.3.9+
Fix from $1,600 2019-12-22
Linux Kernel CRITICAL 9.8
CVE-2019-14901EPSS 17%

A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerability allows…

Fix: 3.16.83 / 4.4.217+
Fix from $2,300 2019-11-29
Linux Kernel HIGH 7.5
CVE-2019-15538

An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on acc…

Fix: 4.9.191 / 4.14.141+
Fix from $1,950 2019-08-25
Linux Kernel HIGH 7.5
CVE-2019-11478EPSS 95%

Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling cer…

Fix: 4.4.182 / 4.9.182+
Fix from $1,950 2019-06-19
Linux Kernel MEDIUM 5.9
CVE-2013-7470

cipso_v4_validate in include/net/cipso_ipv4.h in the Linux kernel before 3.11.7, when CONFIG_NETLABEL is disabled, allows attackers to cause a denial…

Fix: 3.11.7+
Fix from $1,600 2019-04-23
Linux Kernel MEDIUM 6.5
CVE-2019-3874

The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of …

Fix: after 4.18.20
Fix from $1,600 2019-03-25
Linux Kernel MEDIUM 6.8
CVE-2018-20169

An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, relate…

Fix: 3.16.63 / 3.18.129+
Fix from $1,600 2018-12-17
Linux Kernel HIGH 7.5
CVE-2018-5391EPSS 32%

The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-as…

Fix: after 4.18
Fix from $1,950 2018-09-06
Linux Kernel MEDIUM 5.5
CVE-2018-6554

Memory leak in the irda_bind function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linux kernel before 4.17 allows lo…

Fix: 4.17+
Fix from $1,600 2018-09-04
Linux Kernel MEDIUM 6.5
CVE-2017-12190

The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector h…

Fix: after 4.13.7
Fix from $1,600 2017-11-22
Linux Kernel HIGH 7.5
CVE-2017-5972EPSS 24%

The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which …

Fix: after 3.19.8
Fix from $1,950 2017-02-14
Linux Kernel MEDIUM 5.5
CVE-2016-9685

Multiple memory leaks in error paths in fs/xfs/xfs_attr_list.c in the Linux kernel before 4.5.1 allow local users to cause a denial of service (memor…

Fix: after 4.5.0
Fix from $1,600 2016-12-28
Linux Kernel HIGH 7.5
CVE-2016-8666

The IP stack in the Linux kernel before 4.6 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspe…

Fix: 3.16.35 / 3.18.47+
Fix from $1,950 2016-10-16
Linux Kernel MEDIUM 5.5
CVE-2014-8559

The d_walk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of rename_lock, which allows local use…

Fix: after 3.17.2
Fix from $1,600 2014-11-10
Linux Kernel MEDIUM 5.5
CVE-2014-3690

arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control regis…

Fix: 3.17.2+
Fix from $1,600 2014-11-10
Linux Kernel HIGH 7.5
CVE-2014-3687EPSS 9%

The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attacke…

Fix: 3.2.64 / 3.4.107+
Fix from $1,950 2014-11-10
Linux Kernel MEDIUM 5.5
CVE-2014-7970

The pivot_root implementation in fs/namespace.c in the Linux kernel through 3.17 does not properly interact with certain locations of a chroot direct…

Fix: after 3.17
Fix from $1,600 2014-10-13
Linux Kernel HIGH 7.8
CVE-2012-6638

The tcp_rcv_state_process function in net/ipv4/tcp_input.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of service (ke…

Fix: 3.0.38 / 3.2.24+
Fix from $1,950 2014-02-15
Linux Kernel MEDIUM 5.5
CVE-2013-2128

The tcp_read_sock function in net/ipv4/tcp.c in the Linux kernel before 2.6.34 does not properly manage skb consumption, which allows local users to …

Fix: 2.6.34+
Fix from $1,600 2013-06-07
Linux Kernel MEDIUM 5.5
CVE-2011-2906

Integer signedness error in the pmcraid_ioctl_passthrough function in drivers/scsi/pmcraid.c in the Linux kernel before 3.1 might allow local users t…

Fix: 3.1+
Fix from $1,600 2012-05-24
Linux Kernel MEDIUM 5.5
CVE-2011-2918

The Performance Events subsystem in the Linux kernel before 3.1 does not properly handle event overflows associated with PERF_COUNT_SW_CPU_CLOCK even…

Fix: 3.1+
Fix from $1,600 2012-05-24
Linux Kernel MEDIUM 5.5
CVE-2012-0058

The kiocb_batch_free function in fs/aio.c in the Linux kernel before 3.2.2 allows local users to cause a denial of service (OOPS) via vectors that tr…

Fix: 3.2.2+
Fix from $1,600 2012-05-17