KE
Operating System
Kernel
On CISA KEVExploited in the wildRansomware-linked
15,204
CVEs
33
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 277High 219Medium 4Low 0
Watch
Add Kernel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-49114 | 8.8 | Feb 26 | In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix use after free in fc_exch_abts_resp() fc_exch_release(ep) will decrease the ep's reference… Affected: before 4.9.311; 4.10 before 4.14.276; 4.15 before 4.19.238; 4.20 before 5.4.189; 5.5 before 5.10.111; 5.11 before 5.15.34; +2 more |
| CVE-2022-49111 | 8.8 | Feb 26 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use after free in hci_send_acl This fixes the following trace caused by receiving… Affected: before 4.9.311; 4.10 before 4.14.276; 4.15 before 4.19.238; 4.20 before 5.4.189; 5.5 before 5.10.111; 5.11 before 5.15.34; +2 more |
| CVE-2024-47659 | 8.8 | Oct 9 | In the Linux kernel, the following vulnerability has been resolved: smack: tcp: ipv4, fix incorrect labeling Currently, Smack mirrors the label of incoming tcp/ipv4 connections:… Affected: before 4.19.322; 4.20 before 5.4.284; 5.5 before 5.10.226; 5.11 before 5.15.167; 5.16 before 6.1.109; 6.2 before 6.6.50; +1 more |
| CVE-2024-43847 | 8.8 | Aug 17 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix invalid memory access while processing fragmented packets The monitor ring and the reo… Affected: 6.3 before 6.6.44; 6.7 before 6.10.3 |
| CVE-2021-4440 | 8.8 | Jun 25 | In the Linux kernel, the following vulnerability has been resolved: x86/xen: Drop USERGS_SYSRET64 paravirt call commit afd30525a659ac0ae0904f0cb4a2ca75522c3123 upstream Affected: 5.10.215 before 5.10.218 |
| CVE-2024-36013 | 8.8 | May 23 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() Extend a critical section to prevent chan from… Affected: 3.0 before 6.6.32; 6.7 before 6.8.11; 6.9; 6.9; 6.9; 6.9; +3 more |
| CVE-2023-52801 | 8.8 | May 21 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix missing update of domains_itree after splitting iopt_area In iopt_area_split(), if the original… Affected: 6.2 before 6.5.13; 6.6 before 6.6.3 |
| CVE-2023-52798 | 8.8 | May 21 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix dfs radar event locking The ath11k active pdevs are protected by RCU but the DFS radar… Affected: 5.6 before 5.10.202; 5.11 before 5.15.140; 5.16 before 6.1.64; 6.2 before 6.5.13; 6.6 before 6.6.3 |
| CVE-2023-52776 | 8.8 | May 21 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix dfs-radar and temperature event locking The ath12k active pdevs are protected by RCU but… Affected: 6.3 before 6.5.13; 6.6 before 6.6.3 |
| CVE-2021-47324 | 8.8 | May 21 | In the Linux kernel, the following vulnerability has been resolved: watchdog: Fix possible use-after-free in wdt_startup() This module's remove path calls del_timer() Affected: before 4.4.276; 4.5 before 4.9.276; 4.10 before 4.14.240; 4.15 before 4.19.198; 4.20 before 5.4.134; 5.5 before 5.10.52; +2 more |
| CVE-2021-47323 | 8.8 | May 21 | In the Linux kernel, the following vulnerability has been resolved: watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff() This module's remove path calls del_timer() Affected: before 4.4.276; 4.5 before 4.9.276; 4.10 before 4.14.240; 4.15 before 4.19.198; 4.20 before 5.4.134; 5.5 before 5.10.52; +2 more |
| CVE-2021-47308 | 8.8 | May 21 | In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix array index out of bound exception Fix array index out of bound exception in… Affected: before 4.14.241; 4.15 before 4.19.199; 4.20 before 5.4.135; 5.5 before 5.10.53; 5.11 before 5.13.5 |
| CVE-2024-35969 | 8.8 | May 20 | ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr Affected: 2.6.35 before 4.19.313; 4.20 before 5.4.275; 5.5 before 5.10.216; 5.11 before 5.15.156; 5.16 before 6.1.87; 6.2 before 6.6.28; +4 more |
| CVE-2024-35955 | 8.8 | May 20 | kprobes: Fix possible use-after-free issue on kprobe registration Affected: 4.14.291 before 4.15; 4.19.256 before 4.19.313; 5.4.211 before 5.4.275; 5.10.137 before 5.10.216; 5.15.61 before 5.15.157; 5.18.18 before 5.19; +6 more |
| CVE-2024-35843 | 8.8 | May 17 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Use device rbtree in iopf reporting path The existing I/O page fault handler currently locates… Affected: before 6.8.2 |
| CVE-2024-35814 | 8.8 | May 17 | In the Linux kernel, the following vulnerability has been resolved: swiotlb: Fix double-allocation of slots due to broken alignment handling Commit bbb73a103fbb ("swiotlb: fix a… Affected: 6.3 before 6.6.24; 6.7 before 6.7.12; 6.8 before 6.8.3 |
| CVE-2024-27053 | 8.8 | May 1 | wifi: wilc1000: fix RCU usage in connect path Affected: 5.1 before 5.4.273; 5.5 before 5.10.214; 5.11 before 5.15.153; 5.16 before 6.1.83; 6.2 before 6.6.23; 6.7 before 6.7.11; +1 more |
| CVE-2024-26779 | 8.8 | Apr 3 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix race condition on enabling fast-xmit fast-xmit must only be enabled after the sta has… Affected: before 4.19.308; 4.20 before 5.4.270; 5.5 before 5.10.211; 5.11 before 5.15.150; 5.16 before 6.1.80; 6.2 before 6.6.19; +2 more |
| CVE-2024-20040 | 8.8 | Apr 1 | In wlan firmware, there is a possible out of bounds write due to improper input validation Affected: 4.19 |
| CVE-2023-52502 | 8.8 | Mar 2 | In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() Sili Luo reported a race in… Affected: 3.6 before 4.19.297; 4.20 before 5.4.259; 5.5 before 5.10.199; 5.11 before 5.15.136; 5.16 before 6.1.59; 6.2 before 6.5.8; +5 more |
| CVE-2023-52479 | 8.8 | Feb 29 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix uaf in smb20_oplock_break_ack drop reference after use opinfo Affected: before 5.15.135; 5.16 before 6.1.57; 6.2 before 6.5.7; 6.6; 6.6; 6.6; +1 more |
| CVE-2024-25744 | 8.8 | Feb 12 | In the Linux kernel before 6.6.7, an untrusted VMM can trigger int80 syscall handling at any given point Affected: before 6.6.7 |
| CVE-2023-5178 | 8.8 | Nov 1 | Kernel: use after free in nvmet_tcp_free_crypto in nvme Affected: 5.0 before 5.4.260; 5.5 before 5.10.199; 5.11 before 5.15.137; 5.16 before 6.1.60; 6.2 before 6.5.9 |
| CVE-2023-44466 | 8.8 | Sep 29 | An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5 Affected: 5.11 before 5.15.121; 5.16 before 6.1.40; 6.2 before 6.4.5 |
| CVE-2023-2163 | 8.8 | Sep 20 | Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral… Affected: 5.3 before 5.4.242; 5.5 before 5.10.179; 5.11 before 5.15.109; 5.16 before 6.1.26; 6.2 before 6.2.13 |
| CVE-2022-2196 | 8.8 | Jan 9 | A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't… Affected: 5.4.47 before 5.4.233; 5.6.19 before 5.7; 5.7.3 before 5.10.170; 5.11 before 5.15.96; 5.16 before 6.1.14 |
| CVE-2022-47942 | 8.8 | Dec 23 | An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2 Affected: 5.15 before 5.15.62; 5.16 before 5.18.18; 5.19 before 5.19.2 |
| CVE-2022-42896 | 8.8 | Nov 23 | Info Leak in l2cap_core in the Linux Kernel Affected: 3.0.0 through 711f8c3fb3db61897080468586b970c87c61d9e4 |
| CVE-2022-3640 | 8.8 | Oct 21 | Linux Kernel Bluetooth l2cap_core.c l2cap_conn_del use after free Affected: 4.9.326 before 4.9.333; 4.14.291 before 4.14.299; 4.19.255 before 4.19.265; 5.4.209 before 5.4.224; 5.10.135 before 5.10.154; 5.15.59 before 5.15.79; +1 more |
| CVE-2022-42719 | 8.8 | Oct 13 | A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN… Affected: 5.2 before 5.4.219; 5.5 before 5.10.149; 5.11 before 5.15.74; 5.16 before 5.19.16; 6.0 before 6.0.2 |
| CVE-2022-1043 | 8.8 | Aug 29 | A flaw was found in the Linux kernel’s io_uring implementation Affected: 5.10.51 before 5.10.61; 5.11 before 5.13.13 |
| CVE-2022-0435 | 8.8 | Mar 25 | A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes… Affected: 4.8 before 4.9.301; 4.10 before 4.14.266; 4.15 before 4.19.229; 4.20 before 5.4.179; 5.5 before 5.10.100; 5.11 before 5.15.23; +5 more |
| CVE-2022-27223 | 8.8 | Mar 16 | In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and might be manipulated by the host for out-of-array access Affected: 3.18 before 4.9.304; 4.10 before 4.14.269; 4.15 before 4.19.232; 4.20 before 5.4.182; 5.5 before 5.10.103; 5.11 before 5.15.26; +1 more |
| CVE-2021-3656 | 8.8 | Mar 4 | A flaw was found in the KVM's AMD code for supporting SVM nested virtualization Affected: 4.13 before 4.14.245; 4.15 before 4.19.205; 4.20 before 5.4.142; 5.5 before 5.10.60; 5.11 before 5.13.12; 5.14; +6 more |
| CVE-2021-4093 | 8.8 | Feb 18 | A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State (SEV-ES) Affected: 5.11 before 5.14.16 |
| CVE-2021-4154 | 8.8 | Feb 4 | A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser Affected: 5.1 before 5.4.134; 5.5 before 5.10.52; 5.11 before 5.12.19; 5.13 before 5.13.4; 5.14 |
| CVE-2017-5123 | 8.8 | Nov 2 | Insufficient data validation in waitid allowed an user to escape sandboxes on Linux Affected: 4.13 before 4.13.7 |
| CVE-2021-3653 | 8.8 | Sep 29 | A flaw was found in the KVM's AMD code for supporting SVM nested virtualization Affected: 2.6.30 before 4.4.282; 4.5 before 4.9.281; 4.10 before 4.14.245; 4.15 before 4.19.205; 4.20 before 5.4.142; 5.5 before 5.10.60; +7 more |
| CVE-2021-3491 | 8.8 | Jun 4 | The io_uring subsystem in the Linux kernel allowed the MAX_RW_COUNT limit to be bypassed in the PROVIDE_BUFFERS operation, which led to negative values being usedin mem_rw when… Affected: 5.7 before 5.10.37; 5.11 before 5.11.21; 5.12 before 5.12.4 |
| CVE-2021-28660 | 8.8 | Mar 17 | rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the ->ssid[] array Affected: 3.12 before 4.4.262; 4.5 before 4.9.262; 4.10 before 4.14.226; 4.15 before 4.19.181; 4.20 before 5.4.106; 5.5 before 5.10.24; +1 more |
| CVE-2020-29569 | 8.8 | Dec 15 | An issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x Affected: 4.1.44 before 4.2; 4.4.80 before 4.4.254; 4.9.36 before 4.9.249; 4.11.9 before 4.12; 4.12 before 4.14.213; 4.15 before 4.19.164; +2 more |
| CVE-2020-12351 | 8.8 | Nov 23 | Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access Affected: 4.7.7 before 4.9.240; 4.10 before 4.14.202; 4.15 before 4.19.152; 4.20 before 5.4.72; 5.5 before 5.8.16; 5.9.0; +7 more |
| CVE-2019-15793 | 8.8 | Apr 24 | In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, several locations which shift ids translate user/group ids before performing… Affected: 5.0; 5.3 |
| CVE-2019-10220 | 8.8 | Nov 27 | Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists Affected: 2.6.12 before 3.16.81; 3.17 before 4.4.208; 4.5 before 4.9.208; 4.10 before 4.14.162; 4.15 before 4.19.93; 4.20 before 5.3.8 |
| CVE-2019-17666 | 8.8 | Oct 17 | rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bound check, leading to a buffer overflow Affected: before 3.16.77; 3.17 before 4.4.199; 4.5 before 4.9.199; 4.10 before 4.14.152; 4.15 before 4.19.82; 4.20 before 5.2; +1 more |
| CVE-2019-14821 | 8.8 | Sep 19 | An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation Affected: 2.6.27 through 3.15.10; 3.16 before 3.16.74; 4.4 before 4.4.194; 4.9 before 4.9.194; 4.14 before 4.14.146; 4.19 before 4.19.75; +3 more |
| CVE-2019-3846 | 8.8 | Jun 3 | A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network Affected: 3.0 before 3.16.70; 3.17 before 4.4.186; 4.5 before 4.9.186; 4.10 before 4.14.134; 4.15 before 4.19.59; 4.20 before 5.1.18 |
| CVE-2018-16882 | 8.8 | Jan 3 | A use-after-free issue was found in the way the Linux kernel's KVM hypervisor processed posted interrupts when nested(=1) virtualization is enabled Affected: 4.14 before 4.14.91; 4.15 before 4.19.13 |
| CVE-2011-3191 | 8.8 | May 24 | Integer signedness error in the CIFSFindNext function in fs/cifs/cifssmb.c in the Linux kernel before 3.1 allows remote CIFS servers to cause a denial of service (memory… Affected: before 3.0.5 |
| CVE-2026-64104 | 8.7 | Jul 19 | virt: sev-guest: Explicitly leak pages in unknown state Affected: 6.13.8 before 6.14; 6.14.1 before 6.18.34; 6.19 before 7.0.11; 6.14; 6.14; 6.14; +4 more |
The 500 most important CVEs for this product (exploited first, then by severity)