Browse CVEs

MEDIUM 5.5 CVE-2023-2166 A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in the recei… Linux Kernel 6.1+ Fix from $1,6002023-04-19 MEDIUM 5.5 CVE-2023-1583 A NULL pointer dereference was found in io_file_bitmap_get in io_uring/filetable.c in the io_uring sub-component in the Linux Kernel. When fixed file… Linux Kernel 6.1.22 / 6.2.9+ Fix from $1,6002023-03-24 HIGH 7.0 CVE-2023-28466 do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-a… Linux Kernel 5.10.177 / 5.15.105+ Fix from $1,9502023-03-16 MEDIUM 5.5 CVE-2023-23005 In the Linux kernel before 6.2, mm/memory-tiers.c misinterprets the alloc_memory_type return value (expects it to be NULL in the error case, whereas … Linux Kernel 6.2+ Fix from $1,6002023-03-01 MEDIUM 5.5 CVE-2023-23006 In the Linux kernel before 5.15.13, drivers/net/ethernet/mellanox/mlx5/core/steering/dr_domain.c misinterprets the mlx5_get_uars_page return value (e… Linux Kernel 5.15.13+ Fix from $1,6002023-03-01 MEDIUM 5.5 CVE-2023-23004 In the Linux kernel before 5.19, drivers/gpu/drm/arm/malidp_planes.c misinterprets the get_sg_table return value (expects it to be NULL in the error … Linux Kernel 5.19+ Fix from $1,6002023-03-01 MEDIUM 5.5 CVE-2023-23001 In the Linux kernel before 5.16.3, drivers/scsi/ufs/ufs-mediatek.c misinterprets the regulator_get return value (expects it to be NULL in the error c… Linux Kernel 5.16.3+ Fix from $1,6002023-03-01 MEDIUM 5.5 CVE-2023-23002 In the Linux kernel before 5.16.3, drivers/bluetooth/hci_qca.c misinterprets the devm_gpiod_get_index_optional return value (expects it to be NULL in… Linux Kernel 5.16.3+ Fix from $1,6002023-03-01 MEDIUM 5.5 CVE-2023-23000 In the Linux kernel before 5.17, drivers/phy/tegra/xusb.c mishandles the tegra_xusb_find_port_node return value. Callers expect NULL in the error cas… Linux Kernel 5.17+ Fix from $1,6002023-03-01 MEDIUM 5.5 CVE-2023-1095 In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object. nft_trans_destroy() ca… Linux Kernel 6.0+ Fix from $1,6002023-02-28 MEDIUM 5.5 CVE-2023-22997 In the Linux kernel before 6.1.2, kernel/module/decompress.c misinterprets the module_get_next_page return value (expects it to be NULL in the error … Linux Kernel 6.1.2+ Fix from $1,6002023-02-28 MEDIUM 5.5 CVE-2023-22999 In the Linux kernel before 5.16.3, drivers/usb/dwc3/dwc3-qcom.c misinterprets the dwc3_qcom_create_urs_usb_platdev return value (expects it to be NUL… Linux Kernel 5.16.3+ Fix from $1,6002023-02-28 MEDIUM 5.5 CVE-2023-0394 A NULL pointer dereference flaw was found in rawv6_push_pending_frames in net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw c… Linux Kernel 6.2+ Fix from $1,6002023-01-26 HIGH 7.5 CVE-2023-0122 A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmet_setup_auth(), allows an attacker to perform a Pre-Auth Deni… Linux Kernel Patch available Fix from $1,9502023-01-17 MEDIUM 5.5 CVE-2022-47929 In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of … Linux Kernel 6.1.6+ Fix from $1,6002023-01-17 HIGH 7.1 CVE-2022-41858 A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sl_tx_timeout in drivers/n… Linux Kernel 4.9.311 / 4.14.276+ Fix from $1,9502023-01-17 MEDIUM 5.5 CVE-2022-4842 A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attr_punch_hole() was found. A local user could use this flaw to crash the … Linux Kernel Mitigation only Fix from $1,6002023-01-12 MEDIUM 5.5 CVE-2022-3110 An issue was discovered in the Linux kernel through 5.16-rc6. _rtw_init_xmit_priv in drivers/staging/r8188eu/core/rtw_xmit.c lacks check of the retur… Linux Kernel 5.16.0+ Fix from $1,6002022-12-14 MEDIUM 5.5 CVE-2022-3111 An issue was discovered in the Linux kernel through 5.16-rc6. free_charger_irq() in drivers/power/supply/wm8350_power.c lacks free of WM8350_IRQ_CHG_… Linux Kernel 5.16.0+ Fix from $1,6002022-12-14 MEDIUM 5.5 CVE-2022-3112 An issue was discovered in the Linux kernel through 5.16-rc6. amvdec_set_canvases in drivers/staging/media/meson/vdec/vdec_helpers.c lacks check of t… Linux Kernel 5.16.0+ Fix from $1,6002022-12-14 MEDIUM 5.5 CVE-2022-3113 An issue was discovered in the Linux kernel through 5.16-rc6. mtk_vcodec_fw_vpu_init in drivers/media/platform/mtk-vcodec/mtk_vcodec_fw_vpu.c lacks c… Linux Kernel 5.16.0+ Fix from $1,6002022-12-14 MEDIUM 5.5 CVE-2022-3114 An issue was discovered in the Linux kernel through 5.16-rc6. imx_register_uart_clocks in drivers/clk/imx/clk.c lacks check of the return value of kc… Linux Kernel 5.16.0+ Fix from $1,6002022-12-14 MEDIUM 5.5 CVE-2022-3115 An issue was discovered in the Linux kernel through 5.16-rc6. malidp_crtc_reset in drivers/gpu/drm/arm/malidp_crtc.c lacks check of the return value … Linux Kernel 5.16.0+ Fix from $1,6002022-12-14 MEDIUM 5.5 CVE-2022-3104 An issue was discovered in the Linux kernel through 5.16-rc6. lkdtm_ARRAY_BOUNDS in drivers/misc/lkdtm/bugs.c lacks check of the return value of kmal… Linux Kernel 5.16.0+ Fix from $1,6002022-12-14 MEDIUM 5.5 CVE-2022-3105 An issue was discovered in the Linux kernel through 5.16-rc6. uapi_finalize in drivers/infiniband/core/uverbs_uapi.c lacks check of kmalloc_array(). Linux Kernel 5.16.0+ Fix from $1,6002022-12-14 MEDIUM 5.5 CVE-2022-3106 An issue was discovered in the Linux kernel through 5.16-rc6. ef100_update_stats in drivers/net/ethernet/sfc/ef100_nic.c lacks check of the return va… Linux Kernel 5.16.0+ Fix from $1,6002022-12-14 MEDIUM 5.5 CVE-2022-3107 An issue was discovered in the Linux kernel through 5.16-rc6. netvsc_get_ethtool_stats in drivers/net/hyperv/netvsc_drv.c lacks check of the return v… Linux Kernel 5.16.0+ Fix from $1,6002022-12-14 MEDIUM 5.5 CVE-2022-4127 A NULL pointer dereference issue was discovered in the Linux kernel in io_files_update_with_index_alloc. A local user could use this flaw to potentia… Linux Kernel Patch available Fix from $1,6002022-11-28 MEDIUM 5.5 CVE-2022-4128 A NULL pointer dereference issue was discovered in the Linux kernel in the MPTCP protocol when traversing the subflow list at disconnect time. A loca… Linux Kernel after 5.18 Fix from $1,6002022-11-28 MEDIUM 6.5 CVE-2022-3621 A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_bmap_lookup_at_level of the file fs/… Linux Kernel Patch available Fix from $1,6002022-10-20