The Linux Kernel Organization Linux vulnerabilities
7 vulnerabilities
Known vulnerabilities in The Linux Kernel Organization Linux, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2023-6040the linux kernel organization · linux +104 moreAn out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family)An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family); While creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) values within `nf_tables_newtable` function enables an attacker to achieve out-of-bounds access.CVSS7.8HighEPSS0.31%RoutineCVE-2021-3600the linux kernel organization · linux +54 morethe linux kernel organization linuxIt was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod operations. A local attacker could use this to possibly execute arbitrary code.CVSS7.8HighEPSS0.28%RoutineCVE-2023-1032the linux kernel organization · linux +51 morethe linux kernel organization linuxThe Linux kernel io_uring IORING_OP_SOCKET operation contained a double free in function __sys_socket_file() in file net/socket.c. This issue was introduced in da214a475f8bd1d3e9e7a19ddfeb4d1617551bab and fixed in 649c15c7691e9b13cbe9bf6c65c365350e056067.CVSS5.5MediumEPSS0.27%RoutineCVE-2022-2602the linux kernel organization · linux +86 morethe linux kernel organization linuxio_uring UAF, Unix SCM garbage collectionCVSS7.0HighEPSS1.43%RoutineCVE-2022-2588the linux kernel organization · linux +180 morethe linux kernel organization linuxIt was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.CVSS7.8HighEPSS5.87%Act nowCVE-2022-2586Linux · Kernel +88 moreLinux Kernel Use-After-Free VulnerabilityIt was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.CVSS7.8HighKEVEPSS10.20%RoutineCVE-2022-2585the linux kernel organization · linux +76 morethe linux kernel organization linuxIt was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free.CVSS7.8HighEPSS1.28%