Lucene search
+L
LinuxLinux Kernel

14801 matches found

CVE
CVE
added 2018/09/21 4:00 p.m.146 views

CVE-2018-16597

CVE-2018-16597 affects the Linux kernel prior to version 4.8. The issue is an incorrect access check in overlayfs mounts, which could allow a local attacker to modify or truncate files on the underlying filesystem. The connected Nessus/OpenVAS advisories reference kernel updates to fix this vulne...

5.5CVSS5.7AI score0.00542EPSS
Save
CVE
CVE
added 2013/03/01 11:00 a.m.145 views

CVE-2011-1182

CVE-2011-1182 affects the Linux kernel’s signal handling: kernel/signal.c before 2.6.39 allows local users to spoof the UID and PID of a signal sender via sigqueueinfo. Affected in MiracleLinux 3 (kernel 2.6.18-274.1.AXS3) per AXSA-2011-313:06; the issue is described as a kill-signal spoofing vul...

3.6CVSS6.8AI score0.00485EPSS
Save
CVE
CVE
added 2011/08/31 11:00 p.m.145 views

CVE-2011-1576

CVE-2011-1576 affects the Linux kernel GRO offload path (napi_reuse_skb) used in Red Hat Enterprise Linux 5 (kernel 2.6.18) and Red Hat Enterprise Linux 6 (kernel 2.6.32) as deployed in RHEV Hypervisor. The advisory notes that remote attackers can trigger VLAN-packet processing to cause a denial ...

5.7CVSS7.2AI score0.00994EPSS
Save
CVE
CVE
added 2012/05/24 11:00 p.m.145 views

CVE-2011-3191

CVE-2011-3191 affects the Linux kernel CIFS implementation (fs/cifs/cifssmb.c: CIFSFindNext). It is caused by an integer signedness error, existing in kernels before 3.1, which can allow a remote CIFS server to trigger memory corruption or other impact via a large length value in a directory read...

8.8CVSS9.2AI score0.01077EPSS
Save
CVE
CVE
added 2012/05/17 10:00 a.m.145 views

CVE-2011-4131

CVE-2011-4131 affects the Linux kernel’s NFSv4 GETACL handling: the NFSv4 implementation does not correctly manage bitmap sizes when replying, allowing a remote NFS server to trigger a denial of service (OOPS) by sending an excessive number of bitmap words. The issue is fixed in or after the 3.2....

4.6CVSS6.1AI score0.00775EPSS
Save
CVE
CVE
added 2014/02/28 2:00 a.m.145 views

CVE-2014-0069

The CVE-2014-0069 entry affects the Linux kernel (fs/cifs/file.c: cifs_iovec_write) up to version 3.13.5. The vulnerability stems from improper handling of uncached write operations that copy fewer bytes than requested, enabling local users to read kernel memory (information disclosure), cause me...

7.2CVSS6.5AI score0.00414EPSS
Save
CVE
CVE
added 2014/04/01 1:00 a.m.145 views

CVE-2014-2678

CVE-2014-2678 affects the Linux kernel (net/rds/iw.c). The rds_iw_laddr_check function can be triggered by a bind() on an RDS socket on systems lacking RDS transports, enabling local attackers to cause a NULL pointer dereference and a system crash (DoS). This is described as affecting kernels up ...

4.7CVSS6.7AI score0.00403EPSS
Save
CVE
CVE
added 2014/07/03 1:00 a.m.145 views

CVE-2014-4653

Summary (CVE-2014-4653) : The ALSA control implementation in the Linux kernel has a race/lock handling issue in sound/core/control.c. It does not ensure possession of a read/write lock, enabling a local attacker to trigger a denial of service (use-after-free) and to potentially read kernel memory...

4.6CVSS5.1AI score0.00498EPSS
Save
CVE
CVE
added 2016/11/28 3:01 a.m.145 views

CVE-2016-8632

CVE-2016-8632 affects the Linux kernel’s tipc_msg_build() in net/tipc/msg.c (up to version 4.8.11). The vulnerability stems from failing to validate the relationship between minimum fragment length and maximum packet size, enabling a local user with CAP_NET_ADMIN to gain privileges or cause a hea...

7.8CVSS8.1AI score0.00399EPSS
Save
CVE
CVE
added 2017/11/04 1:00 a.m.145 views

CVE-2017-16529

CVE-2017-16529 affects the Linux kernel’s snd_usb_create_streams in sound/usb/card.c, allowing a local attacker to trigger an out-of-bounds read and system crash via a crafted USB device, with impact described as a denial of service and potentially other effects. The issue is present in kernels p...

7.2CVSS6.7AI score0.00398EPSS
Save
CVE
CVE
added 2017/11/07 11:00 p.m.145 views

CVE-2017-16643

CVE-2017-16643 affects the Linux kernel, specifically the parse_hid_report_descriptor function in drivers/input/tablet/gtco.c, with exploitation possible via a crafted USB device. It allows a local user to trigger an out-of-bounds read and system crash (DoS) and potentially other impacts. The iss...

7.2CVSS6.6AI score0.00482EPSS
Save
CVE
CVE
added 2017/03/24 9:00 p.m.145 views

CVE-2017-7261

CVE-2017-7261 affects the Linux kernel driver vmwgfx. The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c does not check for a zero value of certain levels data, allowing a local user to cause a denial of service (ZERO_SIZE_PTR dereference, GP fault, and potentially a...

5.5CVSS5.6AI score0.00366EPSS
Save
CVE
CVE
added 2024/05/21 2:35 p.m.145 views

CVE-2021-47353

CVE-2021-47353 in the Linux kernel fixes a NULL pointer dereference in the udf_symlink function. The issue arises when udf_tgetblk returns a NULL sb_getblk value and the code uses epos.bh without checking, leading to a possible crash. The fix adds a NULL check for epos.bh before use, mitigating p...

5.5CVSS6.6AI score0.00309EPSS
Save
CVE
CVE
added 2025/02/26 1:54 a.m.145 views

CVE-2021-47646

CVE-2021-47646 (Linux kernel) involves a crash triggered by interactions around block, bfq: honor already-setup queue merges. The vulnerability arose when the commit 2d52c58b9c9b was merged and later reverted by ebc69e897e17; that revert did not introduce the bug, but actually exposed a UAF cause...

7.8CVSS5.4AI score0.00282EPSS
Save
CVE
CVE
added 2024/10/21 8:05 p.m.145 views

CVE-2022-48976

The CVE-2022-48976 case concerns Linux kernel netfilter flowtable_offload. A preemptible path used __this_cpu_add in flow_offload_queue_work(), which could trigger a BUG when called from a workqueue without bh disabled. The fix replaces __this_cpu_add with NF_FLOW_TABLE_STAT_INC_ATOMIC() in flow_...

5.5CVSS5.9AI score0.00204EPSS
Save
CVE
CVE
added 2025/02/26 1:54 a.m.145 views

CVE-2022-49066

The CVE-2022-49066 issue affects the Linux kernel’s veth path. When a decapsulated packet is fed to a veth device with act_mirred, skb_headlen() may be 0, yet veth_xmit() forwards the skb to __dev_forward_skb() which unconditionally requires ETH_HLEN bytes of linear data. The root cause is the mi...

5.5CVSS5.3AI score0.00264EPSS
Save
CVE
CVE
added 2025/02/26 2:11 a.m.145 views

CVE-2022-49378

CVE-2022-49378 concerns a Linux kernel driver issue in the sfc/efx10 path where TX queue initialization can fail when modparam efx_separate_tx_channels=1 causes some channels to have only RX or only TX queues. The root cause is an incorrect determination of whether a channel has TX queues, which ...

5.5CVSS5.5AI score0.00263EPSS
Save
CVE
CVE
added 2025/02/26 2:12 a.m.145 views

CVE-2022-49433

The CVE-2022-49433 entry is confirmed with concrete details in connected advisories: in the Linux kernel RDMA/hfi1 driver, a path may call hfi1_free_devdata() with sdma_map_lock uninitialized if probe of hfi1 fails before sdma_map_lock is set up. This could lead to locking operations being perfor...

5.5CVSS5.4AI score0.00264EPSS
Save
CVE
CVE
added 2025/02/26 2:23 a.m.145 views

CVE-2022-49616

CVE-2022-49616 affects Linux kernel ASoC Realtek rt7*-sdw headset codecs. The rt700, rt711, and rt711-sdca drivers lacked a null check on the card pointer in jack_detect_handler, allowing potential NULL dereferences during driver bind/unbind tests. Patch/mitigation involves hardened jack_detect_h...

5.5CVSS6.5AI score0.00253EPSS
Save
CVE
CVE
added 2024/02/29 5:43 a.m.145 views

CVE-2023-52479

The CVE-2023-52479 issue is in the Linux kernel ksmbd SMB2 oplock handling, where a use-after-free occurs due to not dropping a reference to opinfo after smb20_oplock_break_ack. The provided documents state that the fix is to drop the reference after use of opinfo, resolving the use-after-free. T...

8.8CVSS6.7AI score0.00603EPSS
Save
CVE
CVE
added 2024/03/18 10:19 a.m.145 views

CVE-2023-52617

CVE-2023-52617 : Linux kernel PCI: switchtec device crash on surprise hot-remove fixed. The issue occurred when a PCI device was hot-removed while stdev->cdev was open; stdev_release() ran after switchtec_pci_remove(), risking a fatal page fault in DMA mode and a stale dev pointer during dma_f...

4.4CVSS5.8AI score0.00237EPSS
Save
CVE
CVE
added 2024/05/21 3:22 p.m.145 views

CVE-2023-52731

CVE-2023-52731 relates to the Linux kernel fbdev with deferred I/O. After a fbdev device is opened and closed, dirty pages can remain in the pageref list and may later be processed, risking memory/page corruption and an Oops. The fix adds cancellation of the delayed work and cleans up the pageref...

7.8CVSS6.8AI score0.00245EPSS
Save
CVE
CVE
added 2024/05/21 3:31 p.m.145 views

CVE-2023-52781

CVE-2023-52781 concerns the Linux kernel USB config BOS descriptor handling. In usb_get_bos_descriptor(), an iteration issue occurs when skipping USB_DT_DEVICE_CAPABILITY, causing the same descriptor to be read repeatedly. The fix introduces a goto to advance the pointer and bytes read so the fun...

5.5CVSS6.6AI score0.00236EPSS
Save
CVE
CVE
added 2025/03/27 4:43 p.m.145 views

CVE-2023-52988

CVE-2023-52988 — Linux kernel ALSA: hda/via : The issue arises in the HDA VIA path where snd_hda_get_connections() may return a negative error code, allowing an array access with a negative index in add_secret_dac_path(). This can lead to out-of-bounds access of the conn array, with potential imp...

7.8CVSS6.5AI score0.00267EPSS
Save
CVE
CVE
added 2025/03/27 4:43 p.m.145 views

CVE-2023-53026

CVE-2023-53026 — Linux kernel RDMA/core overflow in ib block iterator . The issue occurs when registering a DMA memory region (MR) after choosing a best-aligned page size, while iterating the sglist to split entries into DMA blocks. If the sg entry size and page size match in a way that the total...

7.8CVSS6.8AI score0.00189EPSS
Save
CVE
CVE
added 2024/04/04 8:20 a.m.145 views

CVE-2024-26793

CVE-2024-26793 affects the Linux kernel gtp subsystem. The issue is a use-after-free and null pointer dereference in gtp_newlink() caused by incorrect registration order of gtp_link_ops relative to gtp_net_ops pernet structures. Syzkaller observed a general protection fault in gtp_genl_dump_pdp w...

7.8CVSS6.2AI score0.00291EPSS
Save
CVE
CVE
added 2024/05/17 11:40 a.m.145 views

CVE-2024-27407

CVE-2024-27407 : In the Linux kernel, a vulnerability in the NTFS3 file system was fixed by adding an overflow check in mi_enum_attr() within fs/ntfs3. The issue was identified as a local, high-severity impact and is addressed by applying the patch described in the Ubuntu USN-7726-1 advisory, whi...

8.4CVSS7AI score0.00281EPSS
Save
CVE
CVE
added 2024/05/17 12:01 p.m.145 views

CVE-2024-27419

CVE-2024-27419 – Linux kernel data race in sysctl_net_busy_read The connected Astra Linux advisory and the initial description confirm a Linux kernel vulnerability: netrom: Fix data-races around sysctl_net_busy_read. The issue involved reading a sysctl value that could be modified concurrently, n...

4.7CVSS6.7AI score0.00191EPSS
Save
CVE
CVE
added 2024/05/17 1:27 p.m.145 views

CVE-2024-35826

CVE-2024-35826 — Linux kernel: fix page refcounts for unaligned buffers in __bio_release_pages(). This patch corrects the number of pages released for buffers that do not start at the beginning of a page, addressing a vulnerability in block I/O handling. Impact, as described in the FP: local acce...

5.5CVSS6.7AI score0.00209EPSS
Save
CVE
CVE
added 2024/05/30 3:35 p.m.145 views

CVE-2024-36946

CVE-2024-36946 is a Linux kernel local denial of service issue related to phonet: rtm_phonet_notify() skb allocation. The root cause is that fill_route() stores three components in the skb (rtmsg, RTA_DST, RTA_OIF) and rtm_phonet_notify() should allocate space via NLMSG_ALIGN(sizeof(struct rtmsg)...

5.5CVSS6.6AI score0.00266EPSS
Save
CVE
CVE
added 2024/05/30 3:35 p.m.145 views

CVE-2024-36959

In CVE-2024-36959, the Linux kernel pinctrl subsystem fixed a refcount leak in pinctrl_dt_to_map() when propname allocation fails. The code now drops the recently taken reference by calling pinctrl_dt_free_maps() directly to avoid leak and potential exploitation via local access. Affected: Linux ...

5.5CVSS6.5AI score0.00249EPSS
Save
CVE
CVE
added 2024/07/29 2:31 p.m.145 views

CVE-2024-41030

The CVE-2024-41030 vulnerability affects the Linux kernel’s ksmbd server: when opening a directory, write access could be inappropriately granted due to flags from the client, causing ksmbd to become incompatible with FUSE filesystems. The fix discards write access during directory opens, address...

5.5CVSS6.5AI score0.00288EPSS
Save
CVE
CVE
added 2024/07/29 3:48 p.m.145 views

CVE-2024-41096

CVE-2024-41096 : In the Linux kernel, KFENCE reported a use-after-free in PCI MSI handling during msi_capability_init. The root cause is an error-path path that unmasks a descriptor after it may have been freed, propagating a failure from __msi_domain_alloc_locked() back to pci_alloc_irq_vectors ...

7.8CVSS6.6AI score0.0024EPSS
Save
CVE
CVE
added 2024/07/29 5:39 p.m.145 views

CVE-2024-42093

CVE-2024-42093 – Linux kernel vulnerability in net/dpaa2: cpumask allocation on stack. For CONFIG_CPUMASK_OFFSTACK=y, explicit allocation of cpumask on the stack can overflow the stack. The fix is to use the *cpumask_var API(s) to allocate cpumask variables in a config-neutral way, leaving alloca...

7.3CVSS6.6AI score0.00223EPSS
Save
CVE
CVE
added 2024/07/29 5:39 p.m.145 views

CVE-2024-42098

The CVE-2024-42098 entry concerns the Linux kernel crypto/ecdh logic, where private_key can remain partially overwritten when a caller-supplied or newly generated key is shorter than the previous one. The documented fix explicitly zeroizes the entire private_key array before writing new material,...

5.5CVSS6.4AI score0.0021EPSS
Save
CVE
CVE
added 2024/09/04 6:35 p.m.145 views

CVE-2024-44957

CVE-2024-44957 is a Linux kernel issue affecting the Xen privcmd path, where irqfds handling could deadlock if mutexes were used under spin_lock_irqsave. The root cause is switching the synchronization primitive for irqfd wakeups from a mutex to a spinlock, due to EPOLLHUP being delivered to irqf...

5.5CVSS5.2AI score0.00164EPSS
Save
CVE
CVE
added 2024/09/27 12:35 p.m.145 views

CVE-2024-46814

CVE-2024-46814 affects the Linux kernel in the DRM AMD display path. The vulnerability arises from not validating HDCP-related message IDs (msg_id) before processing a transcation, allowing 4 overrun issues to be triggered by an invalid HDCP_MESSAGE_ID (-1) acting as an index. The root cause is a...

7.8CVSS7.3AI score0.00248EPSS
Save
CVE
CVE
added 2024/09/27 12:42 p.m.145 views

CVE-2024-46865

CVE-2024-46865 (Linux kernel) : The vulnerability arises from improper initialization of a resource named “grc” in a code path using fou. If fou is NULL, the code may execute a goto out and use grc uninitialized, enabling an attacker with local access to trigger use of an uninitialized resource. ...

9.8CVSS6.8AI score0.00551EPSS
Save
CVE
CVE
added 2024/10/21 12:18 p.m.145 views

CVE-2024-49852

CVE-2024-49852 affects Linux kernel SCSI/ELX libefc code, where a use-after-free occurs in efc_nport_vport_del() due to dereferencing nport after its release. The root cause is that kref_put() may call nport->release (_efc_nport_free()) which frees nport, but the code subsequently dereferences...

7.8CVSS8.3AI score0.00209EPSS
Save
CVE
CVE
added 2024/10/21 6:01 p.m.145 views

CVE-2024-49877

CVE-2024-49877 : In the Linux kernel, OCFS2 may dereference a NULL pointer during cleanup in ocfs2_set_buffer_uptodate() when bh is NULL and flags do not include OCFS2_BH_READAHEAD. This can trigger a NULL pointer dereference in the investigated code path. The CVE is characterized as a local, low...

5.5CVSS5.2AI score0.0025EPSS
Save
CVE
CVE
added 2024/10/21 6:01 p.m.145 views

CVE-2024-49922

The CVE-2024-49922 entry concerns the Linux kernel DRM AMD display driver. The issue arises from using pointers that may be NULL in a path where they had been validated earlier in the same function, triggering null-pointer handling after use. The vulnerability is mitigated by a fix that adds null...

5.5CVSS5.1AI score0.00235EPSS
Save
CVE
CVE
added 2024/10/21 6:02 p.m.145 views

CVE-2024-50001

The CVE 2024-50001 entry affects the Linux kernel, specifically the net/mlx5 multi-packet WQE transmit path. The code that obtains a DMA mapping for the skb may fail under memory pressure; in the error path it erroneously unmaps one entry from the sq’s FIFO list of active mappings. Since the mapp...

7.8CVSS5.2AI score0.00327EPSS
Save
CVE
CVE
added 2024/10/29 12:50 a.m.145 views

CVE-2024-50088

CVE-2024-50088 affects the Linux kernel’s Btrfs filesystem code. The issue is in add_inode_ref(), where a name struct is not initialized when declared; if read_one_inode() returns NULL for either parent or inode, name.name is freed during cleanup without being initialized. This uninitialized free...

7.8CVSS7.4AI score0.00214EPSS
Save
CVE
CVE
added 2024/11/05 5:07 p.m.145 views

CVE-2024-50098

The CVE-2024-50098 issue affects the Linux kernel SCSI UFS core. The root cause was a deadlock during reboot at boot start: SDEV_QUIESCE was set for all logical units, causing an audio-driver thread to wait on blk_mq_submit_bio(), which held a mutex. The fix changes behavior by marking all LUs of...

5.5CVSS5.3AI score0.00235EPSS
Save
CVE
CVE
added 2024/11/07 9:31 a.m.145 views

CVE-2024-50145

Summary: CVE-2024-50145 concerns the Linux kernel octeon_ep driver. The root cause is the possibility that build_skb() returns NULL on memory allocation failure during RX processing in __octep_oq_process_rx(). The documented fix handles such skb allocation failures inside __octep_oq_process_rx():...

7.5CVSS5.2AI score0.00576EPSS
Save
CVE
CVE
added 2024/11/19 1:30 a.m.145 views

CVE-2024-50280

CVE-2024-50280 : In the Linux kernel, the dm cache feature was fixed to avoid warning in flush_work() when cache creation fails due to destroying an uninitialized delayed_work waker. Root cause: cancel_delayed_work_sync() remained in the error path of cache_create(), risking a WARN_ON in certain ...

7.8CVSS6.6AI score0.00251EPSS
Save
CVE
CVE
added 2024/12/24 11:28 a.m.145 views

CVE-2024-53151

The CVE-2024-53151 entry concerns Linux kernel svcrdma: an integer overflow in xdr_check_write_chunk() that uses an untrusted segcount to compute a buffer-parse size, potentially triggering a buffer overflow in 32-bit environments. The calculation segcount * rpcrdma_segment_maxsz * sizeof(*p) cre...

7.5CVSS7.1AI score0.00636EPSS
Save
CVE
CVE
added 2024/12/27 1:49 p.m.145 views

CVE-2024-53206

CVE-2024-53206 affects the Linux kernel TCP stack. The vulnerability is a use-after-free of the nreq in reqsk_timer_handler(), triggered when a reqsk is migrated and a retry occurs (e.g., on timeout). The cited fix replaces inet_csk_reqsk_queue_drop_and_put() with __inet_csk_reqsk_queue_drop() an...

9.8CVSS6.5AI score0.00632EPSS
Save
CVE
CVE
added 2024/12/27 1:50 p.m.145 views

CVE-2024-53223

Technical details about CVE-2024-53223 are not provided in the connected documents. Please monitor for updates; current sources do not reveal affected products, versions, root cause, impact, or fixes.

5.5CVSS6.9AI score0.00216EPSS
Save
CVE
CVE
added 2024/12/29 11:30 a.m.145 views

CVE-2024-56749

Technical details for CVE-2024-56749 are not publicly provided in the supplied documents; no vendor names, affected products, or remediation specifics are present. Monitor for official advisories and patches.

7.5CVSS6.6AI score0.00386EPSS
Save
Total number of security vulnerabilities14801