Lucene search
+L

4393 matches found

CNNVD
CNNVD
•added 2022/08/09 12:00 a.m.•7 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel POSIX CPU timer, which stems from the fact that reuse after release can lead to local privilege escalation...

7.8CVSS6.5AI score0.01284EPSS
SaveExploits3References19
Positive Technologies
Positive Technologies
•added 2022/08/09 12:00 a.m.•17 views

PT-2025-26021

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue has been identified in the Linux kernel. The problem occurs when a non-leader thread calls execve, causing it to switch PIDs with the leader process. As a result,...

7.8CVSS6.2AI score0.00258EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/08/08 12:00 a.m.•27 views

PT-2022-6763 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A critical issue has been found in the Linux Kernel, affecting the function tst timer of the file drivers/atm/idt77252.c of the component IPsec. The manipulation leads to use after fre...

9.8CVSS6AI score0.6777EPSS
SaveExploits239References1705
osv_suse
osv_suse
•added 2022/08/02 1:58 p.m.•18 views

SUSE-SU-2022:2629-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak arbitrary kernel information...

8.2CVSS6.7AI score0.0687EPSS
SaveExploits7References108
Amazon
Amazon
•added 2022/07/21 12:00 a.m.•24 views

Important: kernel

Issue Overview: An out-of-bounds write flaw was found in the Linux kernels framebuffer-based console driver functionality in the way a user triggers ioctl FBIOPUTVSCREENINFO with malicious data. This flaw allows a local user to crash or potentially escalate their privileges on the system...

7.8CVSS6.5AI score0.05451EPSS
SaveExploits11
Amazon
Amazon
•added 2022/07/20 12:00 a.m.•82 views

Important: kernel

Issue Overview: There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow attackers to crash linux kernel without any privileges. CVE-2022-2318 Linux disk/nic frontends data leaks This CNA information record relates to multiple CVEs; the text...

7.8CVSS7AI score0.00424EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2022/07/19 7:00 a.m.•12 views

There are use-after-free vulnerabilities caused by timer handler in net/rose/rose_timer.c of linux that allow attackers to crash linux kernel without any privileges.

...

5.5CVSS7.1AI score0.00424EPSS
SaveExploits0
osv_suse
osv_suse
•added 2022/07/15 9:51 a.m.•31 views

SUSE-SU-2022:2407-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak arbitrary kernel information bsc1199657. -...

8CVSS7.2AI score0.05011EPSS
SaveExploits4References32
Tenable Nessus
Tenable Nessus
•added 2022/07/13 12:00 a.m.•67 views

SUSE SLES12 Security Update : kernel (SUSE-SU-2022:2377-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2377-1 advisory. - The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database aka dbx protection...

8.2CVSS7.1AI score0.05011EPSS
SaveExploits4References68
osv_debian
osv_debian
•added 2022/07/06 7:15 p.m.•16 views

DEBIAN-CVE-2022-2318

There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow attackers to crash linux kernel without any privileges...

5.5CVSS6.5AI score0.00424EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2022/07/06 7:15 p.m.•29 views

AZL-10106 CVE-2022-2318 affecting package kernel for versions less than 5.15.55.1-1

There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow attackers to crash linux kernel without any privileges...

5.5CVSS6.7AI score0.00424EPSS
SaveExploits0References1
NVD
NVD
•added 2022/07/06 7:15 p.m.•32 views

CVE-2022-2318

There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow attackers to crash linux kernel without any privileges...

5.5CVSS0.00424EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2022/07/06 7:15 p.m.•21 views

UBUNTU-CVE-2022-2318

There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow attackers to crash linux kernel without any privileges...

7.3CVSS6.7AI score0.00424EPSS
SaveExploits0References29
attackerkb
attackerkb
•added 2022/07/06 7:15 p.m.•15 views

CVE-2022-2318

There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow attackers to crash linux kernel without any privileges...

5.5CVSS6.8AI score0.00424EPSS
SaveExploits0References5
Prion
Prion
•added 2022/07/06 7:15 p.m.•29 views

Design/Logic Flaw

There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow attackers to crash linux kernel without any privileges...

4.9CVSS6.4AI score0.00424EPSS
SaveExploits0References4Affected Software2
UbuntuCve
UbuntuCve
•added 2022/07/06 7:15 p.m.•60 views

CVE-2022-2318

There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow attackers to crash linux kernel without any privileges...

5.5CVSS6.9AI score0.00424EPSS
SaveExploits0References28
attackerkb
attackerkb
•added 2022/07/06 12:15 p.m.•16 views

CVE-2022-30591

quic-go through 0.27.0 allows remote attackers to cause a denial of service CPU consumption via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent. This occurs because mtudiscoverer.go misparses the MTU Discovery service and consequently overflows the probe timer. NOTE: the...

7.5CVSS5.9AI score0.02918EPSS
SaveExploits2References2
osv_debian
osv_debian
•added 2022/07/06 12:15 p.m.•33 views

DEBIAN-CVE-2022-30591

quic-go through 0.27.0 allows remote attackers to cause a denial of service CPU consumption via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent. This occurs because mtudiscoverer.go misparses the MTU Discovery service and consequently overflows the probe timer. NOTE: the...

7.5CVSS7.3AI score0.02918EPSS
SaveExploits2References1
UbuntuCve
UbuntuCve
•added 2022/07/06 12:15 p.m.•53 views

CVE-2022-30591

quic-go through 0.27.0 allows remote attackers to cause a denial of service CPU consumption via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent. This occurs because mtudiscoverer.go misparses the MTU Discovery service and consequently overflows the probe timer. NOTE: the...

7.5CVSS7.1AI score0.02918EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2022/07/06 11:19 a.m.•63 views

CVE-2022-30591

quic-go through 0.27.0 allows remote attackers to cause a denial of service CPU consumption via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent. This occurs because mtudiscoverer.go misparses the MTU Discovery service and consequently overflows the probe timer. NOTE: the...

7.7AI score0.02918EPSS
SaveExploits2References1
Rows per page
Query Builder