Netapp Solidfire \& Hci Management Node vulnerabilities, page 5
103 vulnerabilities
Known vulnerabilities in Netapp Solidfire \& Hci Management Node, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2019-19966debianlinux+41
EPSS score0.63%
In the Linux kernel before 5.1.6, there is a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that will cause denial of service, aka CID-dea37a972655.CVE-2019-19054broadcombrocade_fabric_operating_system_firmware+57EPSS score0.45%
A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b.CVE-2019-19057broadcombrocade_fabric_operating_system_firmware+52EPSS score0.79%
Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures, aka CID-d10dcb615c8e.CVE-2019-20054debianlinux+40EPSS score0.48%
In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka CID-23da9588037e.CVE-2019-25044ubuntulinux-aws-5.0+27EPSS score0.65%
The block subsystem in the Linux kernel before 5.2 has a use-after-free that can lead to arbitrary code execution in the kernel context and privilege escalation, aka CID-c3e2219216c9. This is related to blk_mq_free_rqs and blk_cleanup_queue.CVE-2019-25045debianlinux+54EPSS score0.50%
An issue was discovered in the Linux kernel before 5.0.19. The XFRM subsystem has a use-after-free, related to an xfrm_state_fini panic, aka CID-dbb2483b2a46.CVE-2019-15211canonicalubuntu_linux+35EPSS score0.76%
An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/v4l2-core/v4l2-dev.c driver because drivers/media/radio/radio-raremono.c does not properly allocate memory.CVE-2019-15221canonicalubuntu_linux+35EPSS score0.71%
An issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/pcm.c driver.CVE-2019-15219canonicalubuntu_linux+37EPSS score0.71%
An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/sisusbvga/sisusb.c driver.CVE-2019-15218canonicalubuntu_linux+36EPSS score0.84%
An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/siano/smsusb.c driver.CVE-2019-15223canonicalubuntu_linux+12EPSS score0.60%
An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/driver.c driver.CVE-2019-15213debianlinux+177EPSS score0.66%
An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver.CVE-2019-15220canonicalubuntu_linux+35EPSS score0.76%
An issue was discovered in the Linux kernel before 5.2.1. There is a use-after-free caused by a malicious USB device in the drivers/net/wireless/intersil/p54/p54usb.c driver.CVE-2019-15216canonicalubuntu_linux+34EPSS score0.69%
An issue was discovered in the Linux kernel before 5.0.14. There is a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c driver.CVE-2019-15215canonicalubuntu_linux+35EPSS score0.76%
An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/cpia2/cpia2_usb.c driver.CVE-2019-15222ubuntulinux+10EPSS score0.60%
An issue was discovered in the Linux kernel before 5.2.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/helper.c (motu_microbookii) driver.CVE-2019-15217canonicalubuntu_linux+35EPSS score0.68%
An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver.CVE-2019-15212canonicalubuntu_linux+35EPSS score0.77%
An issue was discovered in the Linux kernel before 5.1.8. There is a double-free caused by a malicious USB device in the drivers/usb/misc/rio500.c driver.CVE-2023-2007debianlinux+106EPSS score0.27%
The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel.CVE-2023-38428debianlinux+95EPSS score3.16%
An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not properly check the UserName value because it does not consider the address of security buffer, leading to an out-of-bounds read.