Browse CVEs

HIGH 7.8 CVE-2022-3103 off-by-one in io_uring module. Linux Kernel No fix yet Fix from $1,9502022-09-26 MEDIUM 5.5 CVE-2022-36402 An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file… Linux Kernel Mitigation only Fix from $1,6002022-09-16 MEDIUM 5.5 CVE-2022-3169 A flaw was found in the Linux kernel. A denial of service flaw may occur if there is a consecutive request of the NVME_IOCTL_RESET and the NVME_IOCTL… Linux Kernel Mitigation only Fix from $1,6002022-09-09 MEDIUM 5.5 CVE-2022-38096 A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with devi… Linux Kernel Mitigation only Fix from $1,6002022-09-09 MEDIUM 6.5 CVE-2022-2308 A flaw was found in vDPA with VDUSE backend. There are currently no checks in VDUSE kernel driver to ensure the size of the device config space is in… Linux Kernel Mitigation only Fix from $1,6002022-09-01 MEDIUM 5.3 CVE-2022-2663 An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall… Linux Kernel No fix yet Fix from $1,6002022-09-01 HIGH 7.0 CVE-2022-1247 An issue found in linux-kernel that leads to a race condition in rose_connect(). The rose driver uses rose_neigh->use to represent how many objects a… Linux Kernel No fix yet Fix from $1,9502022-08-31 HIGH 7.5 CVE-2022-0400 An out-of-bounds read vulnerability was discovered in linux kernel in the smc protocol stack, causing remote dos. Linux Kernel Mitigation only Fix from $1,9502022-08-29 MEDIUM 5.5 CVE-2021-4218 A flaw was found in the Linux kernel’s implementation of reading the SVC RDMA counters. Reading the counter sysctl panics the system. This flaw allow… Linux Kernel No fix yet Fix from $1,6002022-08-24 MEDIUM 5.9 CVE-2021-3714 A flaw was found in the Linux kernels memory deduplication mechanism. Previous work has shown that memory deduplication can be attacked via a local e… Linux Kernel Mitigation only Fix from $1,6002022-08-23 MEDIUM 5.5 CVE-2021-3759 A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function… Linux Kernel Mitigation only Fix from $1,6002022-08-23 MEDIUM 6.3 CVE-2022-1462 An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls … Linux Kernel No fix yet Fix from $1,6002022-06-02 MEDIUM 6.7 CVE-2022-20105 In MM service, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilege with Sy… Linux Kernel Mitigation only Fix from $1,6002022-05-03 MEDIUM 6.7 CVE-2022-20106 In MM service, there is a possible out of bounds write due to a heap-based buffer overflow. This could lead to local escalation of privilege with Sys… Linux Kernel Mitigation only Fix from $1,6002022-05-03 MEDIUM 6.7 CVE-2022-20108 In voice service, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilege with… Linux Kernel Mitigation only Fix from $1,6002022-05-03 MEDIUM 5.5 CVE-2021-3564 A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user attach malicious HCI TTY Bluet… Linux Kernel No fix yet Fix from $1,6002021-06-08 MEDIUM 6.0 CVE-2020-10742 A flaw was found in the Linux kernel. An index buffer overflow during Direct IO write leading to the NFS client to crash. In some cases, a reach out … Linux Kernel Mitigation only Fix from $1,6002021-06-02 MEDIUM 5.5 CVE-2008-2544 Mounting /proc filesystem via chroot command silently mounts it in read-write mode. The user could bypass the chroot environment and gain write acces… Linux Kernel No fix yet Fix from $1,6002021-05-27 HIGH 7.8 CVE-2021-22543 An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed… Linux Kernel No fix yet Fix from $1,9502021-05-26 MEDIUM 5.5 CVE-2020-28588 An information disclosure vulnerability exists in the /proc/pid/syscall functionality of Linux Kernel 5.1 Stable and 5.4.66. More specifically, this … Linux Kernel No fix yet Fix from $1,6002021-05-10 MEDIUM 6.5 CVE-2020-8834 KVM in the Linux kernel on Power8 processors has a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restor… Linux Kernel No fix yet Fix from $1,6002020-04-09 HIGH 8.8 CVE-2018-16262 The pkgmgr system service in Tizen allows an unprivileged process to perform package management actions, due to improper D-Bus security policy config… Tizen Mitigation only Fix from $1,9502020-01-22 HIGH 8.8 CVE-2018-16263 The PulseAudio system service in Tizen allows an unprivileged process to control its A2DP MediaEndpoint, due to improper D-Bus security policy config… Tizen Mitigation only Fix from $1,9502020-01-22 HIGH 8.1 CVE-2018-16266 The Enlightenment system service in Tizen allows an unprivileged process to fully control or capture windows, due to improper D-Bus security policy c… Tizen Mitigation only Fix from $1,9502020-01-22 HIGH 8.1 CVE-2018-16267 The system-popup system service in Tizen allows an unprivileged process to perform popup-related system actions, due to improper D-Bus security polic… Tizen Mitigation only Fix from $1,9502020-01-22 MEDIUM 6.5 CVE-2018-16264 The BlueZ system service in Tizen allows an unprivileged process to partially control Bluetooth or acquire sensitive information, due to improper D-B… Tizen Mitigation only Fix from $1,6002020-01-22 MEDIUM 6.5 CVE-2018-16265 The bt/bt_core system service in Tizen allows an unprivileged process to create a system user interface and control the Bluetooth pairing process, du… Tizen Mitigation only Fix from $1,6002020-01-22 MEDIUM 5.5 CVE-2011-1474 A locally locally exploitable DOS vulnerability was found in pax-linux versions 2.6.32.33-test79.patch, 2.6.38-test3.patch, and 2.6.37.4-test14.patch… Linux Kernel Mitigation only Fix from $1,6002019-12-26 HIGH 7.8 CVE-2019-19814 In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause __remove_dirty_segment slab-out-of-bounds write access because an arra… Linux Kernel No fix yet Fix from $1,9502019-12-17 MEDIUM 5.5 CVE-2019-19813 In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a… Linux Kernel No fix yet Fix from $1,6002019-12-17