TThe Linux Kernel Organization

Products

Exploited and recent CVEs

• CVE-2022-2586 Medium 5.3 Exploited It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted. 10.2%
• CVE-2023-6040 High 7.8 An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family) 0.3%
• CVE-2021-3600 High 7.8 It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod operations. A local attacker could use thi 0.3%
• CVE-2023-1032 Medium 4.7 The Linux kernel io_uring IORING_OP_SOCKET operation contained a double free in function __sys_socket_file() in file net/socket.c. This issue was introduced in da214a475f8bd1d3e9e7a19ddfeb4d1617551bab 0.3%
• CVE-2022-2602 Medium 5.3 io_uring UAF, Unix SCM garbage collection 1.4%
• CVE-2022-2588 Medium 5.3 It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0. 5.9%
• CVE-2022-2585 Medium 5.3 It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free. 1.3%