LE
Product
Linux Enterprise High Availability Extension
On CISA KEVExploited in the wild
28
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 6Low 0
Watch
Add Linux Enterprise High Availability Extension to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-31431 In wildKEV | 7.8 | Apr 22 | crypto: algif_aead - Revert to operating out-of-place Affected: 15; 15; 15; 16.0 |
| CVE-2014-3153 In wildKEV | 7.8 | Jun 7 | Linux Kernel Privilege Escalation Vulnerability Affected: 11 |
| CVE-2017-18017 | 9.8 | Jan 3 | The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service… Affected: 11 |
| CVE-2014-2323 | 9.8 | Mar 14 | SQL injection vulnerability in mod_mysql_vhost.c in lighttpd before 1.4.35 allows remote attackers to execute arbitrary SQL commands via the host name, related to… Affected: 11 |
| CVE-2012-1097 | 7.8 | May 17 | The regset (aka register set) feature in the Linux kernel before 3.2.10 does not properly handle the absence of .get and .set methods, which allows local users to cause a denial… Affected: 11; 11 |
| CVE-2010-2798 | 7.8 | Sep 8 | The gfs2_dirent_find_space function in fs/gfs2/dir.c in the Linux kernel before 2.6.35 uses an incorrect size value in calculations associated with sentinel directory entries,… Affected: 11; 11 |
| CVE-2010-2537 | 7.1 | Sep 30 | The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a (1) BTRFS_IOC_CLONE or (2)… Affected: 11 |
| CVE-2010-1437 | 7.0 | May 7 | Race condition in the find_keyring_by_name function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local users to cause a denial of service (memory… Affected: 11 |
| CVE-2012-1146 | 5.5 | May 17 | The mem_cgroup_usage_unregister_event function in mm/memcontrol.c in the Linux kernel before 3.2.10 does not properly handle multiple events that are attached to the same eventfd,… Affected: 11 |
| CVE-2012-1090 | 5.5 | May 17 | The cifs_lookup function in fs/cifs/dir.c in the Linux kernel before 3.2.10 allows local users to cause a denial of service (OOPS) via attempted access to a special file, as… Affected: 11; 11 |
| CVE-2012-0879 | 5.5 | May 17 | The I/O implementation for block devices in the Linux kernel before 2.6.33 does not properly handle the CLONE_IO feature, which allows local users to cause a denial of service… Affected: 11 |
| CVE-2010-3079 | 5.5 | Sep 30 | kernel/trace/ftrace.c in the Linux kernel before 2.6.35.5, when debugfs is enabled, does not properly handle interaction between mutex possession and llseek operations, which… Affected: 11 |
| CVE-2010-2538 | 5.5 | Sep 30 | Integer overflow in the btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel before 2.6.35 might allow local users to obtain sensitive information via a… Affected: 11 |
| CVE-2010-2066 | 5.5 | Sep 8 | The mext_check_arguments function in fs/ext4/move_extent.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a MOVE_EXT ioctl call that… Affected: 11 |
| CVE-2015-3281 | – | Jul 6 | The buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote… Affected: 12 |
| CVE-2014-4027 | – | Jun 23 | The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local… Affected: 11 |
| CVE-2014-1739 | – | Jun 23 | The media_device_enum_entities function in drivers/media/media-device.c in the Linux kernel before 3.14.6 does not initialize a certain data structure, which allows local users to… Affected: 11 |
| CVE-2014-3469 | – | Jun 5 | The (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows context-dependent attackers to cause a denial of service (NULL pointer dereference… Affected: 11 |
| CVE-2014-3468 | – | Jun 5 | The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows context-dependent attackers to… Affected: 11 |
| CVE-2014-3467 | – | Jun 5 | Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a denial of service (out-of-bounds read) via… Affected: 11 |
| CVE-2014-1738 | – | May 11 | The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD… Affected: 11 |
| CVE-2014-1737 | – | May 11 | The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call,… Affected: 11 |
| CVE-2014-2706 | – | Apr 14 | Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service (system crash) via network traffic that improperly… Affected: 11 |
| CVE-2014-2324 | – | Mar 14 | Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd before 1.4.35 allow remote attackers to read arbitrary files via a Affected: 11 |
| CVE-2013-3301 | – | Apr 29 | The ftrace implementation in the Linux kernel before 3.8.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified… Affected: 11 |
| CVE-2010-3865 | – | Jan 11 | Integer overflow in the rds_rdma_pages function in net/rds/rdma.c in the Linux kernel allows local users to cause a denial of service (crash) and possibly execute arbitrary code… Affected: 11 |
| CVE-2010-2959 | – | Sep 8 | Integer overflow in net/can/bcm.c in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6,… Affected: 11 |
| CVE-2010-2803 | – | Sep 8 | The drm_ioctl function in drivers/gpu/drm/drm_drv.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x… Affected: 11 |
Showing 28