Browse CVEs

MEDIUM 6.4 CVE-2020-25285 A race condition between hugetlb sysctl handlers in mm/hugetlb.c in the Linux kernel before 5.8.8 could be used by local attackers to corrupt memory,… Linux Kernel 5.8.8+ Fix from $1,6002020-09-13 HIGH 7.8 CVE-2020-14356 A flaw null pointer dereference in the Linux kernel cgroupv2 subsystem in versions before 5.7.10 was found in the way when reboot the system. A local… Linux Kernel 4.9.231 / 4.14.189+ Fix from $1,9502020-08-19 MEDIUM 5.9 CVE-2020-10711 A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occurs while importing the Commer… Linux Kernel 5.7+ Fix from $1,6002020-05-22 HIGH 7.1 CVE-2020-11668 In the Linux kernel before 5.6.1, drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera USB driver) mishandles invalid descriptors, aka CID-a… Linux Kernel 5.6.1+ Fix from $1,9502020-04-09 MEDIUM 5.5 CVE-2019-20054 In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka CID-… Linux Kernel 5.0.6+ Fix from $1,6002019-12-28 MEDIUM 5.5 CVE-2019-19815 In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause a NULL pointer dereference in f2fs_recover_fsync_data in fs/f2fs/recov… Linux Kernel Patch available Fix from $1,6002019-12-17 MEDIUM 5.5 CVE-2019-19462 relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering… Linux Kernel after 5.4.1 Fix from $1,6002019-11-30 MEDIUM 5.5 CVE-2019-10207 A flaw was found in the Linux kernel's Bluetooth implementation of UART, all versions kernel 3.x.x before 4.18.0 and kernel 5.x.x. An attacker with l… Linux Kernel 4.18.0+ Fix from $1,6002019-11-25 MEDIUM 5.5 CVE-2019-19227 In the AppleTalk subsystem in the Linux kernel before 5.1, there is a potential NULL pointer dereference because register_snap_client may return NULL… Linux Kernel 5.1+ Fix from $1,6002019-11-22 MEDIUM 5.5 CVE-2019-19037 ext4_empty_dir in fs/ext4/namei.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because ext4_read_dirblock(inode,0,DIRENT_HTRE… Linux Kernel after 5.3.12 Fix from $1,6002019-11-21 MEDIUM 5.5 CVE-2019-19036 btrfs_root_node in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcu_dereference(root->node) can be z… Linux Kernel after 5.3.12 Fix from $1,6002019-11-21 MEDIUM 5.5 CVE-2019-18885 fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verify_dev_extents NULL pointer dereference via a crafted btrfs image because fs_dev… Linux Kernel 5.1+ Fix from $1,6002019-11-14 HIGH 7.5 CVE-2019-18680 An issue was discovered in the Linux kernel 4.4.x before 4.4.195. There is a NULL pointer dereference in rds_tcp_kill_sock() in net/rds/tcp.c that wi… Linux Kernel 4.4.195+ Fix from $1,9502019-11-04 MEDIUM 5.5 CVE-2019-15922 An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a pf data structure if alloc_disk fails in drivers/… Linux Kernel 5.0.9+ Fix from $1,6002019-09-04 MEDIUM 5.5 CVE-2019-15923 An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a cd data structure if alloc_disk fails in drivers/… Linux Kernel 5.0.9+ Fix from $1,6002019-09-04 MEDIUM 5.5 CVE-2019-15924 An issue was discovered in the Linux kernel before 5.0.11. fm10k_init_module in drivers/net/ethernet/intel/fm10k/fm10k_main.c has a NULL pointer dere… Linux Kernel 5.0.11+ Fix from $1,6002019-09-04 HIGH 7.5 CVE-2019-15099 drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descr… Linux Kernel 4.14.157 / 4.19.87+ Fix from $1,9502019-08-16 MEDIUM 5.5 CVE-2019-10140 A vulnerability was found in Linux kernel's, versions up to 3.10, implementation of overlayfs. An attacker with local access can create a denial of s… Linux Kernel after 3.10 Fix from $1,6002019-08-15 HIGH 7.5 CVE-2018-16871 A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exp… Linux Kernel after 4.20 Fix from $1,9502019-07-30 MEDIUM 5.5 CVE-2019-12984 A NULL pointer dereference vulnerability in the function nfc_genl_deactivate_target() in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be t… Linux Kernel 5.1.13+ Fix from $1,6002019-06-26 HIGH 7.8 CVE-2019-12881 i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local users to cause a deni… Linux Kernel No fix yet Fix from $1,9502019-06-18 HIGH 7.5 CVE-2019-12818EPSS 5% An issue was discovered in the Linux kernel before 4.20.15. The nfc_llcp_build_tlv function in net/nfc/llcp_commands.c may return NULL. If the caller… Linux Kernel 4.20.15+ Fix from $1,9502019-06-14 HIGH 7.5 CVE-2019-12615 An issue was discovered in get_vdev_port_node_info in arch/sparc/kernel/mdesc.c in the Linux kernel through 5.1.6. There is an unchecked kstrdup_cons… Linux Kernel 4.14.130 / 4.19.56+ Fix from $1,9502019-06-03 MEDIUM 5.5 CVE-2019-12455 An issue was discovered in sunxi_divs_clk_setup in drivers/clk/sunxi/clk-sunxi.c in the Linux kernel through 5.1.5. There is an unchecked kstrndup of… Linux Kernel after 5.1.5 Fix from $1,6002019-05-30 MEDIUM 5.5 CVE-2019-12378 An issue was discovered in ip6_ra_control in net/ipv6/ipv6_sockglue.c in the Linux kernel through 5.1.5. There is an unchecked kmalloc of new_ra, whi… Linux Kernel after 5.1.5 Fix from $1,6002019-05-28 MEDIUM 5.5 CVE-2019-12381 An issue was discovered in ip_ra_control in net/ipv4/ip_sockglue.c in the Linux kernel through 5.1.5. There is an unchecked kmalloc of new_ra, which … Linux Kernel after 5.1.5 Fix from $1,6002019-05-28 MEDIUM 5.5 CVE-2019-12382 An issue was discovered in drm_load_edid_firmware in drivers/gpu/drm/drm_edid_load.c in the Linux kernel through 5.1.5. There is an unchecked kstrdup… Linux Kernel after 5.1.5 Fix from $1,6002019-05-28 MEDIUM 5.5 CVE-2018-7191 In the tun subsystem in the Linux kernel before 4.13.14, dev_get_valid_name is not called before register_netdevice. This allows local users to cause… Linux Kernel 4.13.14+ Fix from $1,6002019-05-17 HIGH 7.5 CVE-2019-11810EPSS 6% An issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur when megasas_create_frame_pool() fails in megasas_allo… Linux Kernel 3.16.69 / 3.18.139+ Fix from $1,9502019-05-07 MEDIUM 5.5 CVE-2019-9213EPSS 6% In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to … Linux Kernel 4.9.162 / 4.14.105+ Fix from $1,6002019-03-05