LLinux Kernel

Products

Exploited and recent CVEs

• CVE-2021-22600 Medium 6.6 Exploited Double Free in net/packet/af_packet.c leading to priviledge escalation 6.6%
• CVE-2022-2785 Medium 6.7 Arbitrary Memory read in BPF Linux Kernel 0.3%
• CVE-2022-2503 Medium 6.9 Linux Kernel LoadPin bypass via dm-verity table reload 0.4%
• CVE-2022-2327 High 7.5 Use-after-free in io_uring ad work_flags in Linux Kernel 0.3%
• CVE-2021-22543 High 8.7 Improper memory handling in Linux KVM 0.7%
• CVE-2021-23134 High 7.8 Linux kernel llcp_sock_bind/connect use-after-free 0.4%
• CVE-2021-23133 Medium 6.7 Linux Kernel sctp_destroy_sock race condition 0.5%
• CVE-2020-16120 Medium 5.1 Unprivileged overlay + shiftfs read access 0.4%
• CVE-2020-14386 Medium 6.7 A flaw was found in the Linux kernel before 5.9-rc4. Memory corruption can be exploited to gain root privileges from unprivileged processes. The highest threat from this vulnerability is to data confi 1.3%
• CVE-2020-10781 Medium 5.5 A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the /sys/class/zram-control/hot_add file can create ZRAM device 0.3%
• CVE-2020-10768 Medium 5.5 A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used to enable indirect branch speculation after it has been disabled. This call incorrectly reports it as 0.4%
• CVE-2020-10767 Medium 5.5 A flaw was found in the Linux kernel before 5.8-rc1 in the implementation of the Enhanced IBPB (Indirect Branch Prediction Barrier). The IBPB mitigation will be disabled when STIBP is not available or 0.4%
• CVE-2020-10766 Medium 5.5 A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context 0.5%
• CVE-2020-14385 Medium 5.5 A flaw was found in the Linux kernel before 5.9-rc4. A failure of the file system metadata validator in XFS can cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt. 0.4%
• CVE-2020-14304 Medium 4.4 A memory disclosure flaw was found in the Linux kernel's ethernet drivers, in the way it read data from the EEPROM of the device. This flaw allows a local user to read uninitialized values from the ke 0.4%
• CVE-2020-14314 Medium 5.5 A memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4 file system, in the way it accesses a directory with broken indexing. This flaw allows a local user to 0.4%
• CVE-2020-1749 High 7.5 A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kern 1.2%
• CVE-2020-10732 Low 3.3 A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a trivial program and exfiltrate private kernel data. 0.6%
• CVE-2020-8834 Medium 6.5 Linux kernel KVM Power8 conflicting use of HSTATE_HOST_R1 0.3%
• CVE-2020-8835 High 7.8 Linux kernel bpf verifier vulnerability 6.0%