Vulnerability index

Browse CVEs

602 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Out-of-bounds WriteCWE-787 × clear
Linux Kernel HIGH 7.8
CVE-2021-3489

The eBPF RINGBUF bpf_ringbuf_reserve() function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing…

Fix: 5.10.37 / 5.11.21+
Fix from $1,950 2021-06-04
Linux Kernel HIGH 7.8
CVE-2021-3490EPSS 27%

The eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) in the Linux kernel did not properly update 32-bit bounds, which could be turned int…

Fix: 5.10.37 / 5.11.21+
Fix from $1,950 2021-06-04
Linux Kernel MEDIUM 6.0
CVE-2020-10742

A flaw was found in the Linux kernel. An index buffer overflow during Direct IO write leading to the NFS client to crash. In some cases, a reach out …

Mitigation only
Fix from $1,600 2021-06-02
Linux Kernel HIGH 7.8
CVE-2021-33200

kernel/bpf/verifier.c in the Linux kernel through 5.12.7 enforces incorrect limits for pointer arithmetic operations, aka CID-bb01a1bba579. This can …

Fix: 5.4.123 / 5.10.41+
Fix from $1,950 2021-05-27
Linux Kernel HIGH 7.8
CVE-2020-27815

A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic th…

Fix: 4.9.249 / 4.14.213+
Fix from $1,950 2021-05-26
Linux Kernel MEDIUM 6.7
CVE-2021-31916

An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel bef…

Fix: 5.12+
Fix from $1,600 2021-05-06
Linux Kernel HIGH 7.1
CVE-2021-3501

A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be …

Fix: 5.12+
Fix from $1,950 2021-05-06
Linux Kernel HIGH 8.8
CVE-2021-28660

rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the ->ssid[] ar…

Fix: 4.4.262 / 4.9.262+
Fix from $1,950 2021-03-17
Linux Kernel HIGH 7.8
CVE-2021-27365

An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate length constraints or checks, and c…

Fix: 4.4.260 / 4.9.260+
Fix from $1,950 2021-03-07
Linux Kernel HIGH 7.8
CVE-2021-20194

There is a vulnerability in the linux kernel versions higher than 5.2 (if kernel compiled with config params CONFIG_BPF_SYSCALL=y , CONFIG_BPF=y , CO…

Patch available
Fix from $1,950 2021-02-23
Linux Kernel HIGH 8.1
CVE-2020-14305EPSS 5%

An out-of-bounds memory write flaw was found in how the Linux kernel’s Voice Over IP H.323 connection tracking functionality handled connections on i…

Fix: after 4.11.12
Fix from $1,950 2020-12-02
Linux Kernel MEDIUM 5.6
CVE-2020-14390

A flaw was found in the Linux kernel in versions before 5.9-rc6. When changing screen size, an out-of-bounds memory write can occur leading to memory…

Fix: 5.9.0+
Fix from $1,600 2020-09-18
Linux Kernel HIGH 7.8
CVE-2020-14386

A flaw was found in the Linux kernel before 5.9-rc4. Memory corruption can be exploited to gain root privileges from unprivileged processes. The high…

Fix: 4.9.239 / 4.14.201+
Fix from $1,950 2020-09-16
Linux Kernel MEDIUM 6.6
CVE-2020-14331

A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console, …

Fix: after 5.7.19
Fix from $1,600 2020-09-15
Linux Kernel MEDIUM 6.4
CVE-2020-25285

A race condition between hugetlb sysctl handlers in mm/hugetlb.c in the Linux kernel before 5.8.8 could be used by local attackers to corrupt memory,…

Fix: 5.8.8+
Fix from $1,600 2020-09-13
Linux Kernel HIGH 7.0
CVE-2020-25212

A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspeci…

Fix: 5.8.3+
Fix from $1,950 2020-09-09
Linux Kernel MEDIUM 6.7
CVE-2020-12659

An issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write (by a user with the CAP_NET_A…

Fix: 4.19.118 / 5.4.35+
Fix from $1,600 2020-05-05
Linux Kernel HIGH 7.8
CVE-2020-12653

An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c allows loc…

Fix: 5.5.4+
Fix from $1,950 2020-05-05
Linux Kernel HIGH 7.1
CVE-2020-12654

An issue was found in Linux kernel before 5.5.4. mwifiex_ret_wmm_get_status() in drivers/net/wireless/marvell/mwifiex/wmm.c allows a remote AP to tri…

Fix: 5.5.4+
Fix from $1,950 2020-05-05
Linux Kernel MEDIUM 6.7
CVE-2019-20636

In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demonstrated by input_set_keycode, …

Fix: 3.16.83 / 4.4.210+
Fix from $1,600 2020-04-08
Linux Kernel MEDIUM 6.0
CVE-2020-11565

An issue was discovered in the Linux kernel through 5.6.2. mpol_parse_str in mm/mempolicy.c has a stack-based out-of-bounds write because an empty no…

Fix: after 5.6.2
Fix from $1,600 2020-04-06
Linux Kernel HIGH 7.8
CVE-2020-8835EPSS 6%

In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, le…

Fix: 5.4.29 / 5.5.14+
Fix from $1,950 2020-04-02
Linux Kernel MEDIUM 5.3
CVE-2020-10942

In the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigge…

Fix: 5.5.8+
Fix from $1,600 2020-03-24
Linux Kernel MEDIUM 5.5
CVE-2020-9391

An issue was discovered in the Linux kernel 5.4 and 5.5 through 5.5.6 on the AArch64 architecture. It ignores the top byte in the address passed to t…

Fix: after 5.5.6
Fix from $1,600 2020-02-25
Linux Kernel HIGH 7.0
CVE-2011-0699

Integer signedness error in the btrfs_ioctl_space_info function in the Linux kernel 2.6.37 allows local users to cause a denial of service (heap-base…

Patch available
Fix from $1,950 2020-02-20
Linux Kernel HIGH 8.3
CVE-2019-9500

The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on…

Fix: 4.9.181 / 4.14.123+
Fix from $1,950 2020-01-16
Linux Kernel MEDIUM 6.1
CVE-2019-19332

An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel's KVM hypervisor handled the…

Fix: after 5.4
Fix from $1,600 2020-01-09
Linux Kernel HIGH 7.8
CVE-2019-19814

In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause __remove_dirty_segment slab-out-of-bounds write access because an arra…

No fix yet
Fix from $1,950 2019-12-17
Linux Kernel HIGH 7.8
CVE-2019-19816

In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some operations can cause slab-out-of-bounds write access in __b…

Fix: 4.4.247 / 4.9.247+
Fix from $1,950 2019-12-17
Linux Kernel MEDIUM 6.8
CVE-2019-19532

In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID dr…

Fix: 5.3.9+
Fix from $1,600 2019-12-03