Browse CVEs

CRITICAL 9.8 CVE-2026-43037 In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar Kjos reported the following … Linux Kernel 5.10.253 / 5.15.203+ Fix from $2,3002026-05-01 CRITICAL 9.8 CVE-2026-43038 In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() Sashiko AI-review … Linux Kernel 5.10.253 / 5.15.203+ Fix from $2,3002026-05-01 HIGH 7.8 CVE-2026-31502 In the Linux kernel, the following vulnerability has been resolved: team: fix header_ops type confusion with non-Ethernet ports Similar to commit 9… Linux Kernel 6.12.80 / 6.18.21+ Fix from $1,9502026-04-22 HIGH 7.1 CVE-2024-49860 In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of _STR method Only buffer objects are valid … Linux Kernel 5.10.227 / 5.15.168+ Fix from $1,9502024-10-21 MEDIUM 5.5 CVE-2023-4194 A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized acc… Linux Kernel after 6.4 Fix from $1,6002023-08-07 MEDIUM 5.5 CVE-2023-3022 A flaw was found in the IPv6 module of the Linux kernel. The arg.result was not used consistently in fib6_rule_lookup, sometimes holding rt6_info and… Linux Kernel after 5.1 Fix from $1,6002023-06-19 HIGH 7.8 CVE-2023-1078 A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol. The rds_rm_zerocopy_callback() uses list_entry() on the head of a l… Linux Kernel 4.19.273 / 5.4.232+ Fix from $1,9502023-03-27 HIGH 7.0 CVE-2023-1077 In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be … Linux Kernel 4.19.293 / 5.4.235+ Fix from $1,9502023-03-27 MEDIUM 5.5 CVE-2023-1076 A flaw was found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0 due to a type confusion in their initialization functi… Linux Kernel Patch available Fix from $1,6002023-03-27 MEDIUM 5.5 CVE-2023-23455 atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service because of type confusion (non-… Linux Kernel after 6.1.4 Fix from $1,6002023-01-12 MEDIUM 5.5 CVE-2023-23454 cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (slab-out-of-bounds read) because… Linux Kernel after 6.1.4 Fix from $1,6002023-01-12 HIGH 7.8 CVE-2022-34918EPSS 5% An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by… Linux Kernel 4.14.316 / 4.19.284+ Fix from $1,9502022-07-04 HIGH 7.8 CVE-2022-1786 A use-after-free flaw was found in the Linux kernel’s io_uring subsystem in the way a user sets up a ring with IORING_SETUP_IOPOLL with more than one… Linux Kernel 5.12+ Fix from $1,9502022-06-02 HIGH 7.8 CVE-2021-34866 This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.14-rc3. An attacker must first obtain th… Linux Kernel 5.10.62 / 5.13.14+ Fix from $1,9502022-01-25 HIGH 7.8 CVE-2020-10757 A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with acces… Linux Kernel 4.9.227 / 4.14.184+ Fix from $1,9502020-06-09 HIGH 7.8 CVE-2019-15792 In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() calls fdget(o… Linux Kernel Patch available Fix from $1,9502020-04-24