Browse CVEs

MEDIUM 5.5 CVE-2021-3764 A memory leak flaw was found in the Linux kernel's ccp_run_aes_gcm_cmd() function that allows an attacker to cause a denial of service. The vulnerabi… Linux Kernel after 5.14.20 Fix from $1,6002022-08-23 MEDIUM 5.5 CVE-2021-3679 A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffe… Linux Kernel 5.14+ Fix from $1,6002021-08-05 MEDIUM 5.5 CVE-2020-25673 A vulnerability was found in Linux kernel where non-blocking socket in llcp_sock_connect() leads to leak and eventually hanging-up the system. Linux Kernel 5.3.18+ Fix from $1,6002021-05-26 MEDIUM 5.5 CVE-2021-20265 A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a signal was pending. This flaw … Linux Kernel after 7.7.1 Fix from $1,6002021-03-10 MEDIUM 5.5 CVE-2019-20812 An issue was discovered in the Linux kernel before 5.4.7. The prb_calc_retire_blk_tmo() function in net/packet/af_packet.c can result in a denial of … Linux Kernel 5.4.7+ Fix from $1,6002020-06-03 MEDIUM 5.5 CVE-2020-8992 ext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows attackers to cause a denial of service (soft lockup)… Linux Kernel after 5.5.3 Fix from $1,6002020-02-14 MEDIUM 5.5 CVE-2012-0810 The int3 handler in the Linux kernel before 3.3 relies on a per-CPU debug stack, which allows local users to cause a denial of service (stack corrupt… Linux Kernel 3.3+ Fix from $1,6002020-02-12 MEDIUM 5.5 CVE-2011-1474 A locally locally exploitable DOS vulnerability was found in pax-linux versions 2.6.32.33-test79.patch, 2.6.38-test3.patch, and 2.6.37.4-test14.patch… Linux Kernel Mitigation only Fix from $1,6002019-12-26 MEDIUM 5.5 CVE-2019-19922 kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows attackers to cause a denial of se… Linux Kernel 5.3.9+ Fix from $1,6002019-12-22 CRITICAL 9.8 CVE-2019-14901EPSS 17% A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerability allows… Linux Kernel 3.16.83 / 4.4.217+ Fix from $2,3002019-11-29 HIGH 7.5 CVE-2019-15538 An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on acc… Linux Kernel 4.9.191 / 4.14.141+ Fix from $1,9502019-08-25 HIGH 7.5 CVE-2019-11478EPSS 95% Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling cer… Linux Kernel 4.4.182 / 4.9.182+ Fix from $1,9502019-06-19 MEDIUM 5.9 CVE-2013-7470 cipso_v4_validate in include/net/cipso_ipv4.h in the Linux kernel before 3.11.7, when CONFIG_NETLABEL is disabled, allows attackers to cause a denial… Linux Kernel 3.11.7+ Fix from $1,6002019-04-23 MEDIUM 6.5 CVE-2019-3874 The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of … Linux Kernel after 4.18.20 Fix from $1,6002019-03-25 MEDIUM 6.8 CVE-2018-20169 An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, relate… Linux Kernel 3.16.63 / 3.18.129+ Fix from $1,6002018-12-17 HIGH 7.5 CVE-2018-5391EPSS 32% The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-as… Linux Kernel after 4.18 Fix from $1,9502018-09-06 MEDIUM 5.5 CVE-2018-6554 Memory leak in the irda_bind function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linux kernel before 4.17 allows lo… Linux Kernel 4.17+ Fix from $1,6002018-09-04 MEDIUM 6.5 CVE-2017-12190 The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector h… Linux Kernel after 4.13.7 Fix from $1,6002017-11-22 HIGH 7.5 CVE-2017-5972EPSS 24% The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which … Linux Kernel after 3.19.8 Fix from $1,9502017-02-14 MEDIUM 5.5 CVE-2016-9685 Multiple memory leaks in error paths in fs/xfs/xfs_attr_list.c in the Linux kernel before 4.5.1 allow local users to cause a denial of service (memor… Linux Kernel after 4.5.0 Fix from $1,6002016-12-28 HIGH 7.5 CVE-2016-8666 The IP stack in the Linux kernel before 4.6 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspe… Linux Kernel 3.16.35 / 3.18.47+ Fix from $1,9502016-10-16 MEDIUM 5.5 CVE-2014-8559 The d_walk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of rename_lock, which allows local use… Linux Kernel after 3.17.2 Fix from $1,6002014-11-10 MEDIUM 5.5 CVE-2014-3690 arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control regis… Linux Kernel 3.17.2+ Fix from $1,6002014-11-10 HIGH 7.5 CVE-2014-3687EPSS 9% The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attacke… Linux Kernel 3.2.64 / 3.4.107+ Fix from $1,9502014-11-10 MEDIUM 5.5 CVE-2014-7970 The pivot_root implementation in fs/namespace.c in the Linux kernel through 3.17 does not properly interact with certain locations of a chroot direct… Linux Kernel after 3.17 Fix from $1,6002014-10-13 HIGH 7.8 CVE-2012-6638 The tcp_rcv_state_process function in net/ipv4/tcp_input.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of service (ke… Linux Kernel 3.0.38 / 3.2.24+ Fix from $1,9502014-02-15 MEDIUM 5.5 CVE-2013-2128 The tcp_read_sock function in net/ipv4/tcp.c in the Linux kernel before 2.6.34 does not properly manage skb consumption, which allows local users to … Linux Kernel 2.6.34+ Fix from $1,6002013-06-07 MEDIUM 5.5 CVE-2011-2906 Integer signedness error in the pmcraid_ioctl_passthrough function in drivers/scsi/pmcraid.c in the Linux kernel before 3.1 might allow local users t… Linux Kernel 3.1+ Fix from $1,6002012-05-24 MEDIUM 5.5 CVE-2011-2918 The Performance Events subsystem in the Linux kernel before 3.1 does not properly handle event overflows associated with PERF_COUNT_SW_CPU_CLOCK even… Linux Kernel 3.1+ Fix from $1,6002012-05-24 MEDIUM 5.5 CVE-2012-0058 The kiocb_batch_free function in fs/aio.c in the Linux kernel before 3.2.2 allows local users to cause a denial of service (OOPS) via vectors that tr… Linux Kernel 3.2.2+ Fix from $1,6002012-05-17