Linux Kernel vulnerabilities, page 2

25 vulnerabilities

Known vulnerabilities in Linux Kernel products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.

7.8CVE-2022-2327chainguardhyperv-daemons-6.18+119
EPSS score
0.31%
io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORING_OP. Some operations are missing some types, which can lead to incorrect reference counts which can then lead to a double free. We recommend upgrading the kernel past commit df3f3bb5059d20ef094d6b2f0256c4bf4127a8596.7CVE-2022-2785chainguardhyperv-daemons-6.18+92
EPSS score
0.27%
There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpf_sys_bpf are not verified and can point anywhere, including memory not owned by BPF. An attacker with CAP_BPF can arbitrarily read memory from anywhere on the system. We recommend upgrading past commit 86f44fcec22c7.8CVE-2012-0055canonicalubuntu_linux+2
EPSS score
1.24%
OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow attackers to bypass security restrictions and perform unauthorized actions.7CVE-2019-14898ubuntulinux+7
EPSS score
0.44%
The fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10 was not complete. A local user could use this flaw to obtain sensitive information, cause a denial of service, or possibly have other unspecified impacts by triggering a race condition with mmget_not_zero or get_task_mm calls.7.8CVE-2019-14835canonicalubuntu_linux+182
EPSS score
0.62%
A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host.