Browse CVEs

MEDIUM 5.5 CVE-2022-42722 In the Linux kernel 5.8 through 5.19.x before 5.19.16, local attackers able to inject WLAN frames into the mac80211 stack could cause a NULL pointer … Linux Kernel 5.19.16+ Fix from $1,6002022-10-14 MEDIUM 5.5 CVE-2022-40476 A null pointer dereference issue was discovered in fs/io_uring.c in the Linux kernel before 5.15.62. A local user could use this flaw to crash the sy… Linux Kernel 5.15.62+ Fix from $1,6002022-09-14 HIGH 7.1 CVE-2022-3202 A NULL pointer dereference flaw in diFree in fs/jfs/inode.c in Journaled File System (JFS)in the Linux kernel. This could allow a local attacker to c… Linux Kernel 4.9.311 / 4.14.276+ Fix from $1,9502022-09-14 MEDIUM 5.5 CVE-2022-38096 A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with devi… Linux Kernel Mitigation only Fix from $1,6002022-09-09 MEDIUM 5.5 CVE-2022-3078 An issue was discovered in the Linux kernel through 5.16-rc6. There is a lack of check after calling vzalloc() and lack of free after allocation in d… Linux Kernel 5.18+ Fix from $1,6002022-09-01 MEDIUM 5.5 CVE-2022-2153 A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/S… Linux Kernel 5.18+ Fix from $1,6002022-08-31 MEDIUM 5.5 CVE-2022-1263 A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attac… Linux Kernel 5.18+ Fix from $1,6002022-08-31 HIGH 7.5 CVE-2022-1199 A flaw was found in the Linux kernel. This flaw allows an attacker to crash the Linux kernel by simulating amateur radio from the user space, resulti… Linux Kernel after 5.17.14 Fix from $1,9502022-08-29 MEDIUM 5.5 CVE-2021-3659 A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN co… Linux Kernel 5.12+ Fix from $1,6002022-08-22 HIGH 7.1 CVE-2022-1671 A NULL pointer dereference flaw was found in rxrpc_preparse_s in net/rxrpc/server_key.c in the Linux kernel. This flaw allows a local attacker to cra… Linux Kernel 5.15.33 / 5.16.19+ Fix from $1,9502022-07-26 MEDIUM 5.1 CVE-2020-36558 A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault. Linux Kernel 5.5.7+ Fix from $1,6002022-07-21 MEDIUM 5.5 CVE-2022-1852 A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the x86_emulate_insn in arch/x86… Linux Kernel 5.19+ Fix from $1,6002022-06-30 MEDIUM 6.8 CVE-2022-1789 With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If INVPCID is executed with CR0.PG=0, the invlpg callba… Linux Kernel 5.8+ Fix from $1,6002022-06-02 MEDIUM 5.5 CVE-2022-1516 A NULL pointer dereference flaw was found in the Linux kernel’s X.25 set of standardized network protocols functionality in the way a user terminates… Linux Kernel Patch available Fix from $1,6002022-05-05 MEDIUM 5.5 CVE-2022-0433 A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the map_get_next_key function of the BPF blo… Linux Kernel after 5.16 Fix from $1,6002022-03-10 MEDIUM 5.5 CVE-2021-4095 A NULL pointer dereference was found in the Linux kernel's KVM when dirty ring logging is enabled without an active vCPU context. An unprivileged loc… Linux Kernel after 5.16 Fix from $1,6002022-03-10 HIGH 7.1 CVE-2021-3739 A NULL pointer dereference flaw was found in the btrfs_rm_device function in fs/btrfs/volumes.c in the Linux Kernel, where triggering the bug require… Linux Kernel after 5.14.20 Fix from $1,9502022-03-10 MEDIUM 5.5 CVE-2022-0617 A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udf_file_write_iter function for… Linux Kernel 5.17+ Fix from $1,6002022-02-16 MEDIUM 5.5 CVE-2021-44879 In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dere… Linux Kernel 5.16.3+ Fix from $1,6002022-02-14 MEDIUM 5.5 CVE-2022-0286 A flaw was found in the Linux kernel. A null pointer dereference in bond_ipsec_add_sa() may lead to local denial of service. Linux Kernel Patch available Fix from $1,6002022-01-31 HIGH 7.8 CVE-2022-23222 kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of the availability of pointer arithmetic via… Linux Kernel 5.15.37 / 5.16.11+ Fix from $1,9502022-01-14 MEDIUM 5.5 CVE-2021-38200 arch/powerpc/perf/core-book3s.c in the Linux kernel before 5.12.13, on systems with perf_event_paranoid=-1 and no specific PMU driver support registe… Linux Kernel 5.12.13+ Fix from $1,6002021-08-08 MEDIUM 5.5 CVE-2021-38206 The mac80211 subsystem in the Linux kernel before 5.12.13, when a device supporting only 5 GHz is used, allows attackers to cause a denial of service… Linux Kernel 5.12.13+ Fix from $1,6002021-08-08 MEDIUM 5.5 CVE-2021-38208 net/nfc/llcp_sock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service (NULL pointer dereference and BUG… Linux Kernel 5.12.10+ Fix from $1,6002021-08-08 HIGH 7.5 CVE-2021-36143 ACRN before 2.5 has a hw/pci/virtio/virtio.c vq_endchains NULL Pointer Dereference. Acrn 2.5+ Fix from $1,9502021-07-02 HIGH 7.5 CVE-2021-36146 ACRN before 2.5 has a devicemodel/hw/pci/xhci.c NULL Pointer Dereference for a trb pointer. Acrn 2.5+ Fix from $1,9502021-07-02 HIGH 7.5 CVE-2021-36147 An issue was discovered in ACRN before 2.5. It allows a devicemodel/hw/pci/virtio/virtio_net.c virtio_net_ping_rxq NULL pointer dereference for vq->u… Acrn 2.5+ Fix from $1,9502021-07-02 MEDIUM 5.5 CVE-2020-27830 A vulnerability was found in Linux Kernel where in the spk_ttyio_receive_buf2() function, it would dereference spk_ttyio_synth without checking wheth… Linux Kernel 5.9.14+ Fix from $1,6002021-05-13 MEDIUM 5.5 CVE-2021-30178 An issue was discovered in the Linux kernel through 5.11.11. synic_get in arch/x86/kvm/hyperv.c has a NULL pointer dereference for certain accesses t… Linux Kernel after 5.11.11 Fix from $1,6002021-04-07 MEDIUM 6.7 CVE-2020-35499 A NULL pointer dereference flaw in Linux kernel versions prior to 5.11 may be seen if sco_sock_getsockopt function in net/bluetooth/sco.c do not have… Linux Kernel 5.10.4+ Fix from $1,6002021-02-19