Lucene search
K

1072 matches found

OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2019:1364-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.9AI score0.00151EPSS
Exploits6References2
RedhatCVE
RedhatCVE
added 2021/05/28 12:48 a.m.115 views

CVE-2021-33200

A flaw was found in kernel/bpf/verifier.c in BPF in the Linux kernel. An incorrect limit is enforced for pointer arithmetic operations which can be abused to perform out-of-bounds reads and writes in kernel memory, leading to local privilege escalation. The highest threat from this vulnerability ...

7.8CVSS2.1AI score0.00047EPSS
Exploits0References7
OSV
OSV
added 2021/05/27 7:15 p.m.0 views

CVE-2020-10774

A memory disclosure flaw was found in the Linux kernel's versions before 4.18.0-193.el8 in the sysctl subsystem when reading the /proc/sys/kernel/rhfeatures file. This flaw allows a local user to read uninitialized values from the kernel memory. The highest threat from this vulnerability is to...

5.5CVSS6.7AI score0.00038EPSS
Exploits0References1
Prion
Prion
added 2021/05/27 7:15 p.m.30 views

Design/Logic Flaw

A memory disclosure flaw was found in the Linux kernel's versions before 4.18.0-193.el8 in the sysctl subsystem when reading the /proc/sys/kernel/rhfeatures file. This flaw allows a local user to read uninitialized values from the kernel memory. The highest threat from this vulnerability is to...

2.1CVSS5.2AI score0.00038EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2021/05/27 7:15 p.m.1 views

UBUNTU-CVE-2020-10774

A memory disclosure flaw was found in the Linux kernel's versions before 4.18.0-193.el8 in the sysctl subsystem when reading the /proc/sys/kernel/rhfeatures file. This flaw allows a local user to read uninitialized values from the kernel memory. The highest threat from this vulnerability is to...

5.5CVSS6.7AI score0.00038EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2021/05/27 6:46 p.m.33 views

CVE-2020-10774

A memory disclosure flaw was found in the Linux kernel's versions before 4.18.0-193.el8 in the sysctl subsystem when reading the /proc/sys/kernel/rhfeatures file. This flaw allows a local user to read uninitialized values from the kernel memory. The highest threat from this vulnerability is to...

5.5CVSS5.9AI score0.00038EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2021/05/18 4:7 p.m.0 views

kernel: race condition between hugetlb sysctl handlers in mm/hugetlb.c

A flaw was found in the Linux kernels sysctl handling code for hugepages management. When multiple root level processes would write to modify the /proc/sys/vm/nrhugepages file it could create a race on internal variables leading to a system crash or memory corruption...

6.4CVSS7.2AI score0.00046EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2021/05/18 3:49 p.m.1 views

kernel: race condition between hugetlb sysctl handlers in mm/hugetlb.c

A flaw was found in the Linux kernels sysctl handling code for hugepages management. When multiple root level processes would write to modify the /proc/sys/vm/nrhugepages file it could create a race on internal variables leading to a system crash or memory corruption...

6.4CVSS7.2AI score0.00046EPSS
Exploits0References4
OSV
OSV
added 2021/05/18 5:33 a.m.32 views

ALSA-2021:1578 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Integer overflow in IntelR Graphics Drivers CVE-2020-12362 kernel: memory leak in sofsetgetlargectrldata function in sound/soc/sof/ipc.c CVE-2019-18811 kernel: use-after-free caused by a...

7.8CVSS8.5AI score0.06617EPSS
Exploits6References26
RedhatCVE
RedhatCVE
added 2021/05/11 8:54 p.m.42 views

CVE-2021-3490

A flaw was found in the Linux kernels eBPF verification code. It was discovered that eBPF ALU32 bounds tracking for bitwise ops AND, OR and XOR did not update the 32-bit bounds. By default accessing the eBPF verifier is only accessible to privileged users with CAPSYSADMIN. A local user with the...

7.8CVSS7.6AI score0.0346EPSS
Exploits8References3
RedhatCVE
RedhatCVE
added 2021/05/06 6:36 p.m.50 views

CVE-2021-31829

A flaw was found in the Linux kernel's eBPF verification code. By default, accessing the eBPF verifier is only accessible to privileged users with CAPSYSADMIN. This flaw allows a local user who can insert eBPF instructions, to use the eBPF verifier to abuse a spectre-like flaw and infer all syste...

6.2CVSS2.3AI score0.00081EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.22 views

SUSE: Security Advisory (SUSE-SU-2019:0054-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.01533EPSS
Exploits7References7
Tenable Nessus
Tenable Nessus
added 2021/04/14 12:0 a.m.218 views

Ubuntu 20.04 LTS : Linux kernel (OEM) vulnerabilities (USN-4912-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4912-1 advisory. Piotr Krysiuk discovered that the BPF JIT compiler for x86 in the Linux kernel did not properly validate computation of branch displacements in some...

8.8CVSS7.3AI score0.00949EPSS
Exploits5References15
Ubuntu
Ubuntu
added 2021/04/13 9:35 p.m.147 views

USN-4912-1: Linux kernel (OEM) vulnerabilities

Piotr Krysiuk discovered that the BPF JIT compiler for x86 in the Linux kernel did not properly validate computation of branch displacements in some situations. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-29154 It was...

8.8CVSS7AI score0.00949EPSS
Exploits5
OSV
OSV
added 2021/04/13 9:35 p.m.1 views

USN-4912-1 linux-oem-5.6 vulnerabilities

Piotr Krysiuk discovered that the BPF JIT compiler for x86 in the Linux kernel did not properly validate computation of branch displacements in some situations. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-29154 It was...

8.8CVSS7AI score0.00949EPSS
Exploits5References15
RedhatCVE
RedhatCVE
added 2021/03/04 6:34 p.m.32 views

CVE-2021-20268

An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls devmapinitmap or sockmapalloc. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from thi...

7.8CVSS1.8AI score0.00133EPSS
Exploits0References4
Cloud Foundry
Cloud Foundry
added 2021/02/10 12:0 a.m.63 views

USN-4660-2: Linux kernel regression | Cloud Foundry

Severity Unknown Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Description USN-4660-1 fixed vulnerabilities in the Linux kernel. Unfortunately, that update introduced a regression in the software raid10 driver when used with fstrim that could lead to data corruption. This updat...

7.8CVSS8.1AI score0.00393EPSS
Exploits2Affected Software1
RedhatCVE
RedhatCVE
added 2021/02/09 1:5 p.m.26 views

CVE-2021-20194

A flaw buffer overflow in the Linux kernel BPF subsystem was found in the way user running BPF script calling getsockopt. A local user could use this flaw to crash the system or possibly escalate their privileges on the system. Mitigation The default Red Hat Enterprise Linux kernel prevents...

7.8CVSS1.7AI score0.0005EPSS
Exploits0References3
Oracle linux
Oracle linux
added 2021/02/08 12:0 a.m.125 views

Unbreakable Enterprise kernel security update

4.14.35-2025.405.3 - Revert 'rds: Deregister all FRWR mr with freemr' aru kolappan Orabug: 32426280 4.14.35-2025.405.2 - nfs: Fix security label length not being reset Jeffrey Mitchell Orabug: 32350995 4.14.35-2025.405.1 - net/rds: Fix gfpt parameter Hans Westgaard Ry Orabug: 32372162 - uek-rpm:...

8.8CVSS0.1AI score0.00579EPSS
Exploits1
Oracle linux
Oracle linux
added 2021/02/08 12:0 a.m.64 views

Unbreakable Enterprise kernel-container security update

4.14.35-2025.405.3.el7 - Revert 'rds: Deregister all FRWR mr with freemr' aru kolappan Orabug: 32426280 4.14.35-2025.405.2.el7 - nfs: Fix security label length not being reset Jeffrey Mitchell Orabug: 32350995 4.14.35-2025.405.1.el7 - net/rds: Fix gfpt parameter Hans Westgaard Ry Orabug: 32372162...

8.8CVSS0.1AI score0.00579EPSS
Exploits1
Rows per page
Query Builder