Browse CVEs

MEDIUM 5.5 CVE-2023-6039 A use-after-free flaw was found in lan78xx_disconnect in drivers/net/usb/lan78xx.c in the network sub-component, net/usb/lan78xx in the Linux Kernel.… Linux Kernel 6.5+ Fix from $1,6002023-11-09 HIGH 7.0 CVE-2023-1476 A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code. This issue occurs due to a race conditio… Linux Kernel 5.14+ Fix from $1,9502023-11-03 HIGH 8.1 CVE-2023-1194 An out-of-bounds (OOB) memory read flaw was found in parse_lease_state in the KSMBD implementation of the in-kernel samba server and CIFS in the Linu… Linux Kernel 5.15.145 / 6.1.34+ Fix from $1,9502023-11-03 MEDIUM 6.5 CVE-2023-1192 A use-after-free flaw was found in smb2_is_status_io_timeout() in CIFS in the Linux Kernel. After CIFS transfers response data to a system call, ther… Linux Kernel 6.4+ Fix from $1,6002023-11-01 MEDIUM 6.5 CVE-2023-1193 A use-after-free flaw was found in setup_async_work in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. This issu… Linux Kernel 6.3+ Fix from $1,6002023-11-01 MEDIUM 6.3 CVE-2023-3397 A race condition occurred between the functions lmLogClose and txEnd in JFS, in the Linux Kernel, executed in different threads. This flaw allows a l… Linux Kernel Patch available Fix from $1,6002023-11-01 HIGH 8.8 CVE-2023-5178EPSS 9% A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in t… Linux Kernel 5.4.260 / 5.10.199+ Fix from $1,9502023-11-01 HIGH 7.8 CVE-2023-5633 The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were … Linux Kernel 6.1.75 / 6.5.8+ Fix from $1,9502023-10-23 HIGH 7.8 CVE-2023-45898 The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extents_status.c, related to ext4_es_insert_extent. Linux Kernel 6.5.4+ Fix from $1,9502023-10-16 HIGH 7.8 CVE-2023-5345 A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation. In case of an e… Linux Kernel 6.1.56 / 6.5.6+ Fix from $1,9502023-10-03 HIGH 7.8 CVE-2023-4921 A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. When the p… Linux Kernel 4.14.326 / 4.19.295+ Fix from $1,9502023-09-12 HIGH 7.8 CVE-2023-4623 A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local pri… Linux Kernel 4.14.327 / 4.19.295+ Fix from $1,9502023-09-06 HIGH 7.0 CVE-2023-4622 A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation. The unix_stream_sendp… Linux Kernel 6.1.47+ Fix from $1,9502023-09-06 HIGH 7.8 CVE-2023-4015 A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. On an er… Linux Kernel 5.10.190 / 5.15.124+ Fix from $1,9502023-09-06 HIGH 7.8 CVE-2023-4206 A use-after-free vulnerability in the Linux kernel's net/sched: cls_route component can be exploited to achieve local privilege escalation. When rou… Linux Kernel 4.14.322 / 4.19.291+ Fix from $1,9502023-09-06 HIGH 7.8 CVE-2023-4207 A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. When fw_cha… Linux Kernel 4.14.326 / 4.19.295+ Fix from $1,9502023-09-06 HIGH 7.8 CVE-2023-4208 A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. When u32_c… Linux Kernel 4.14.322 / 4.19.291+ Fix from $1,9502023-09-06 HIGH 7.0 CVE-2023-4244 A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Due to… Linux Kernel 4.19.316 / 5.4.262+ Fix from $1,9502023-09-06 HIGH 7.8 CVE-2023-3777 A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. When nf_… Linux Kernel 5.10.188 / 5.15.123+ Fix from $1,9502023-09-06 MEDIUM 6.5 CVE-2023-20849 In imgsys_cmdq, there is a possible use after free due to a missing valid range checking. This could lead to local escalation of privilege with Syste… Linux Kernel Mitigation only Fix from $1,6002023-09-04 MEDIUM 6.3 CVE-2023-4611 A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbin… Linux Kernel 6.5+ Fix from $1,6002023-08-29 MEDIUM 6.0 CVE-2023-4394 A use-after-free flaw was found in btrfs_get_dev_args_from_path in fs/btrfs/volumes.c in btrfs file-system in the Linux Kernel. This flaw allows a lo… Linux Kernel 6.0+ Fix from $1,6002023-08-17 HIGH 7.1 CVE-2023-4387 A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in VMware's vmxnet3 ethernet NIC driver in the Linux … Linux Kernel 3.17 / 4.9.316+ Fix from $1,9502023-08-16 HIGH 7.8 CVE-2023-40283 An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the … Linux Kernel 4.14.322 / 4.19.291+ Fix from $1,9502023-08-14 HIGH 7.8 CVE-2023-4147 A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local us… Linux Kernel 5.10.190 / 5.15.124+ Fix from $1,9502023-08-07 MEDIUM 5.5 CVE-2023-4133 A use-after-free vulnerability was found in the cxgb4 driver in the Linux kernel. The bug occurs when the cxgb4 device is detaching due to a possible… Linux Kernel 6.3+ Fix from $1,6002023-08-03 MEDIUM 5.5 CVE-2023-4132 A use-after-free vulnerability was found in the siano smsusb module in the Linux kernel. The bug occurs during device initialization when the siano d… Linux Kernel after 6.2.16 Fix from $1,6002023-08-03 HIGH 7.8 CVE-2023-4004 A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a… Linux Kernel 5.10.188 / 5.15.123+ Fix from $1,9502023-07-31 HIGH 7.8 CVE-2023-3812 An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big)… Linux Kernel 4.19.265 / 5.4.224+ Fix from $1,9502023-07-24 HIGH 7.1 CVE-2023-3567 A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attacker with loc… Linux Kernel 6.2.0+ Fix from $1,9502023-07-24