A flaw was found in the Linux kernel

A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network

Openssh: regresshion - race condition in ssh allows rce/dos

A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13

An issue was found in Linux kernel before 5.5.4

In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads…

In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in…

There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of…

There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial…

Resource leakage when decoding certificates and keys

scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument

The c_rehash script allows command injection

In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy…

In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enable_sacf_uaccess in…

An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8

A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) in the Linux kernel

Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a…

An issue was discovered in the Linux kernel through 5.6.11

gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an internal '\0' value,…

An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3

Incorrect MAC key used in the RC4-MD5 ciphersuite

In the Linux kernel, the following vulnerability has been resolved: arp: Prevent overflow in arp_req_get()

An issue was discovered in the Linux kernel through 5.18.14

An issue was discovered in the Linux kernel through 5.6.11

An issue was discovered in the Linux kernel before 5.4.17

mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1.6 has some error-handling cases that did not free allocated hostcmd memory, aka…

OCSP_basic_verify may incorrectly verify the response signing certificate

The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space

The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f

In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related…

A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while filtering…

A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13