PT-2024-11816 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions up to 5.16.13 Description: A double free issue in the netfront component of the Linux kernel has been identified. This issue can be exploited, although no public exploit is available yet. It is recommended to patch the...

PT-2024-7191

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.10.8 Description The issue is related to a negative array index read in the Linux kernel, specifically in the drm/amd/pm module. The problem arises from using negative values for clk idex as an index into an...

PT-2024-21606 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.8.7/6.9-rc4 Description: A buffer overflow vulnerability has been identified in the intel fb bo framebuffer init function within the DRM component of the Linux kernel. This issue can be exploited to cause a...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: llc: verify mac len before reading mac header CVE-2023-52843 In the Linux kernel, the following vulnerability has been resolved: hsr: Prevent use after free in prpcreatetaggedframe CVE-2023-52846 In the Linux...

Important: kernel

Issue Overview: A race condition between two functions, lmLogClose and txEnd, in the Linux kernel's JFS filesystem can lead to a use-after-free vulnerability and crash. CVE-2023-3397 In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to...

Important: kernel

Issue Overview: 2023-08-03: CVE-2023-3609 was added to this advisory. A use-after-free flaw was found in the Netfilter subsystem of the Linux kernel when processing named and anonymous sets in batch requests, which can lead to performing arbitrary reads and writes in kernel memory. This flaw allo...

AZL-26389 CVE-2023-2235 affecting package kernel for versions less than 5.15.111.1-1

A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation. The perfgroupdetach function did not check the event's siblings' attachstate before calling addeventtogroups, but removeonexec made it possible to call listdelevent...

PT-2023-33365 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.227 Description: A potential security issue has been identified in the Linux Kernel, related to the ASoC: soc-pcm component. The actual impact and attack plausibility have not yet been proven...

PT-2022-7658 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.1 Description: The vulnerability is related to a buffer overflow issue in the vivid component of the Linux kernel. It occurs due to a failure to check boundaries after adjusting the compose height in the V4L...

PT-2025-8599 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the version containing commit ffa0b64e3be5 Description: A bug in the Linux kernel has been resolved, related to memory hotplug. The issue arises when the kernel validates an address against the high memory value...

PT-2024-11336 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.13.0-rc7 Description: A vulnerability in the Linux kernel has been resolved, which involved a bad pointer dereference when the ehandler kthread is invalid. The issue occurred when the error handler thread fail...

PT-2015-3305 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.3 Description: The issue is related to the skb flow dissect function in net/core/flow dissector.c, which does not properly initialize n proto, ip proto, and thoff. This allows remote attackers to cause a denia...

PT-2015-6383 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 4.0.5 Description: The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted packet, related to the oz usb rx and oz usb handle ep data functions. This is due...

PT-2013-5055 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.12 Description: The issue allows local users to obtain sensitive information from kernel stack memory. This is due to the mp get count function in drivers/staging/sb105x/sb pci mp.c not initializing a certain...

PT-2012-1800 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.39 Description: The issue allows local users to bypass intended access restrictions and read the kernel ring buffer by leveraging root privileges. This can be demonstrated by a root user in a Linux Container...

PT-2011-1076 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.38.4 Description: The issue is related to multiple integer overflows in the next pidmap function in kernel/pid.c, which can cause a denial of service system crash via crafted system calls, specifically 1...

GLSA-200403-02 : Linux kernel do_mremap local privilege escalation vulnerability

The remote host is affected by the vulnerability described in GLSA-200403-02 Linux kernel domremap local privilege escalation vulnerability The memory subsystem allows for shrinking, growing, and moving of chunks of memory along any of the allocated memory areas which the kernel possesses. To...

Fedora Core 2 : kernel-2.6.6-1.435.2.3 (2004-205)

During an audit of the Linux kernel, SUSE discovered a flaw in the Linux kernel that inappropriately allows an unprivileged user to change the group ID of a file to his/her own group ID. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2004-0497 to this...