Browse CVEs

HIGH 7.8 CVE-2021-3489 The eBPF RINGBUF bpf_ringbuf_reserve() function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing… Linux Kernel 5.10.37 / 5.11.21+ Fix from $1,9502021-06-04 HIGH 7.8 CVE-2021-3490EPSS 27% The eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) in the Linux kernel did not properly update 32-bit bounds, which could be turned int… Linux Kernel 5.10.37 / 5.11.21+ Fix from $1,9502021-06-04 MEDIUM 6.0 CVE-2020-10742 A flaw was found in the Linux kernel. An index buffer overflow during Direct IO write leading to the NFS client to crash. In some cases, a reach out … Linux Kernel Mitigation only Fix from $1,6002021-06-02 HIGH 7.8 CVE-2021-33200 kernel/bpf/verifier.c in the Linux kernel through 5.12.7 enforces incorrect limits for pointer arithmetic operations, aka CID-bb01a1bba579. This can … Linux Kernel 5.4.123 / 5.10.41+ Fix from $1,9502021-05-27 HIGH 7.8 CVE-2020-27815 A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic th… Linux Kernel 4.9.249 / 4.14.213+ Fix from $1,9502021-05-26 MEDIUM 6.7 CVE-2021-31916 An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel bef… Linux Kernel 5.12+ Fix from $1,6002021-05-06 HIGH 7.1 CVE-2021-3501 A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be … Linux Kernel 5.12+ Fix from $1,9502021-05-06 HIGH 8.8 CVE-2021-28660 rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the ->ssid[] ar… Linux Kernel 4.4.262 / 4.9.262+ Fix from $1,9502021-03-17 HIGH 7.8 CVE-2021-27365 An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate length constraints or checks, and c… Linux Kernel 4.4.260 / 4.9.260+ Fix from $1,9502021-03-07 HIGH 7.8 CVE-2021-20194 There is a vulnerability in the linux kernel versions higher than 5.2 (if kernel compiled with config params CONFIG_BPF_SYSCALL=y , CONFIG_BPF=y , CO… Linux Kernel Patch available Fix from $1,9502021-02-23 HIGH 8.1 CVE-2020-14305EPSS 5% An out-of-bounds memory write flaw was found in how the Linux kernel’s Voice Over IP H.323 connection tracking functionality handled connections on i… Linux Kernel after 4.11.12 Fix from $1,9502020-12-02 MEDIUM 5.6 CVE-2020-14390 A flaw was found in the Linux kernel in versions before 5.9-rc6. When changing screen size, an out-of-bounds memory write can occur leading to memory… Linux Kernel 5.9.0+ Fix from $1,6002020-09-18 HIGH 7.8 CVE-2020-14386 A flaw was found in the Linux kernel before 5.9-rc4. Memory corruption can be exploited to gain root privileges from unprivileged processes. The high… Linux Kernel 4.9.239 / 4.14.201+ Fix from $1,9502020-09-16 MEDIUM 6.6 CVE-2020-14331 A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console, … Linux Kernel after 5.7.19 Fix from $1,6002020-09-15 MEDIUM 6.4 CVE-2020-25285 A race condition between hugetlb sysctl handlers in mm/hugetlb.c in the Linux kernel before 5.8.8 could be used by local attackers to corrupt memory,… Linux Kernel 5.8.8+ Fix from $1,6002020-09-13 HIGH 7.0 CVE-2020-25212 A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspeci… Linux Kernel 5.8.3+ Fix from $1,9502020-09-09 MEDIUM 6.7 CVE-2020-12659 An issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write (by a user with the CAP_NET_A… Linux Kernel 4.19.118 / 5.4.35+ Fix from $1,6002020-05-05 HIGH 7.8 CVE-2020-12653 An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c allows loc… Linux Kernel 5.5.4+ Fix from $1,9502020-05-05 HIGH 7.1 CVE-2020-12654 An issue was found in Linux kernel before 5.5.4. mwifiex_ret_wmm_get_status() in drivers/net/wireless/marvell/mwifiex/wmm.c allows a remote AP to tri… Linux Kernel 5.5.4+ Fix from $1,9502020-05-05 MEDIUM 6.7 CVE-2019-20636 In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demonstrated by input_set_keycode, … Linux Kernel 3.16.83 / 4.4.210+ Fix from $1,6002020-04-08 MEDIUM 6.0 CVE-2020-11565 An issue was discovered in the Linux kernel through 5.6.2. mpol_parse_str in mm/mempolicy.c has a stack-based out-of-bounds write because an empty no… Linux Kernel after 5.6.2 Fix from $1,6002020-04-06 HIGH 7.8 CVE-2020-8835EPSS 6% In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, le… Linux Kernel 5.4.29 / 5.5.14+ Fix from $1,9502020-04-02 MEDIUM 5.3 CVE-2020-10942 In the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigge… Linux Kernel 5.5.8+ Fix from $1,6002020-03-24 MEDIUM 5.5 CVE-2020-9391 An issue was discovered in the Linux kernel 5.4 and 5.5 through 5.5.6 on the AArch64 architecture. It ignores the top byte in the address passed to t… Linux Kernel after 5.5.6 Fix from $1,6002020-02-25 HIGH 7.0 CVE-2011-0699 Integer signedness error in the btrfs_ioctl_space_info function in the Linux kernel 2.6.37 allows local users to cause a denial of service (heap-base… Linux Kernel Patch available Fix from $1,9502020-02-20 HIGH 8.3 CVE-2019-9500 The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on… Linux Kernel 4.9.181 / 4.14.123+ Fix from $1,9502020-01-16 MEDIUM 6.1 CVE-2019-19332 An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel's KVM hypervisor handled the… Linux Kernel after 5.4 Fix from $1,6002020-01-09 HIGH 7.8 CVE-2019-19814 In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause __remove_dirty_segment slab-out-of-bounds write access because an arra… Linux Kernel No fix yet Fix from $1,9502019-12-17 HIGH 7.8 CVE-2019-19816 In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some operations can cause slab-out-of-bounds write access in __b… Linux Kernel 4.4.247 / 4.9.247+ Fix from $1,9502019-12-17 MEDIUM 6.8 CVE-2019-19532 In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID dr… Linux Kernel 5.3.9+ Fix from $1,6002019-12-03