CVE Browser

Arbitrary Memory read in BPF Linux Kernel

Linux Kernel LoadPin bypass via dm-verity table reload

Use-after-free in io_uring ad work_flags in Linux Kernel

Double Free in net/packet/af_packet.c leading to priviledge escalation

Improper memory handling in Linux KVM

Linux kernel llcp_sock_bind/connect use-after-free

Linux Kernel sctp_destroy_sock race condition

Unprivileged overlay + shiftfs read access

kernel: memory corruption in net/packet/af_packet.c leads to elevation of privilege

kernel: zram sysfs resource consumption

kernel: Indirect branch speculation can be enabled after it was force-disabled by the PR_SPEC_FORCE_DISABLE prctl command.

kernel: Indirect Branch Prediction Barrier is force-disabled when STIBP is unavailable or enhanced IBRS is available.

kernel: Rogue cross-process SSBD shutdown. Linux scheduler logical bug allows an attacker to turn off the SSBD protection.

kernel: metadata validator in XFS may cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt

kernel: ethtool when reading eeprom of device could lead to memory leak

kernel: buffer uses out of index in ext3/4 filesystem

kernel: some ipv6 protocols not encrypted over ipsec tunnel

kernel: uninitialized kernel data leak in userspace coredumps

kernel: incomplete fix for race condition between mmget_not_zero()/get_task_mm() and core dumping in CVE-2019-11599

Linux kernel KVM Power8 conflicting use of HSTATE_HOST_R1

Linux kernel bpf verifier vulnerability

OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow attackers to bypas…

kernel: vhost-net: guest to host kernel escape during migration

kernel: irda: use-after-free vulnerability in the hashbin list

kernel: irda: Memory leak caused by repeated binds of irda socket