LE
Product
Linux Enterprise Real Time Extension
On CISA KEVExploited in the wild
58
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 7Medium 5Low 0
Watch
Add Linux Enterprise Real Time Extension to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-3153 In wildKEV | 7.8 | Jun 7 | Linux Kernel Privilege Escalation Vulnerability Affected: 11 |
| CVE-2010-3904 In wildKEV | 7.8 | Dec 6 | Linux Kernel Improper Input Validation Vulnerability Affected: 11 |
| CVE-2017-18017 | 9.8 | Jan 3 | The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service… Affected: 11; 12; 12 |
| CVE-2015-8539 | 7.8 | Feb 8 | The KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (BUG) via crafted keyctl commands that negatively instantiate… Affected: 12 |
| CVE-2014-8369 | 7.8 | Nov 10 | The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.17.2 miscalculates the number of pages during the handling of a mapping failure, which allows… Affected: 11 |
| CVE-2016-5244 | 7.5 | Jun 27 | The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obtain… Affected: 11; 12 |
| CVE-2014-3687 | 7.5 | Nov 10 | The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of… Affected: 11 |
| CVE-2014-4608 | 7.3 | Jul 3 | Multiple integer overflows in the lzo1x_decompress_safe function in lib/lzo/lzo1x_decompress_safe.c in the LZO decompressor in the Linux kernel before 3.15.2 allow… Affected: 11 |
| CVE-2015-8785 | 6.2 | Feb 8 | The fuse_fill_write_pages function in fs/fuse/file.c in the Linux kernel before 4.4 allows local users to cause a denial of service (infinite loop) via a writev system call that… Affected: 12 |
| CVE-2015-8551 | 6.0 | Apr 13 | The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to hit BUG conditions and… Affected: 11; 12 |
| CVE-2014-8559 | 5.5 | Nov 10 | The d_walk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of rename_lock, which allows local users to cause a denial of… Affected: 11 |
| CVE-2014-3690 | 5.5 | Nov 10 | arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control register remains the same after a… Affected: 11 |
| CVE-2016-2782 | 4.6 | Apr 27 | The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (NULL pointer dereference… Affected: 11; 12 |
| CVE-2015-0272 | – | Nov 17 | GNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic disruption) via a crafted MTU value in an IPv6 Router Advertisement (RA) message, a… Affected: 11; 11 |
| CVE-2014-8160 | – | Mar 2 | net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP,… Affected: 11 |
| CVE-2014-9585 | – | Jan 9 | The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users… Affected: 11 |
| CVE-2014-9584 | – | Jan 9 | The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel before 3.18.2 does not validate a length value in the Extensions Reference (ER) System Use… Affected: 11 |
| CVE-2014-3601 | – | Sep 1 | The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1 miscalculates the number of pages during the handling of a mapping failure, which allows… Affected: 11.0 |
| CVE-2014-5077 | – | Aug 1 | The sctp_assoc_update function in net/sctp/associola.c in the Linux kernel through 3.15.8, when SCTP authentication is enabled, allows remote attackers to cause a denial of… Affected: 11 |
| CVE-2014-4667 | – | Jul 3 | The sctp_association_free function in net/sctp/associola.c in the Linux kernel before 3.15.2 does not properly manage a certain backlog value, which allows remote attackers to… Affected: 11 |
| CVE-2014-4027 | – | Jun 23 | The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local… Affected: 11 |
| CVE-2014-1738 | – | May 11 | The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD… Affected: 11 |
| CVE-2014-1737 | – | May 11 | The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call,… Affected: 11 |
| CVE-2014-0181 | – | Apr 27 | The Netlink implementation in the Linux kernel through 3.14.1 does not provide a mechanism for authorizing socket operations based on the opener of a socket, which allows local… Affected: 11 |
| CVE-2010-4164 | – | Jan 3 | Multiple integer underflows in the x25_parse_facilities function in net/x25/x25_facilities.c in the Linux kernel before 2.6.36.2 allow remote attackers to cause a denial of… Affected: 11 |
| CVE-2010-4163 | – | Jan 3 | The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 2.6.36.2 allows local users to cause a denial of service (panic) via a zero-length I/O request in a… Affected: 11 |
| CVE-2010-4162 | – | Jan 3 | Multiple integer overflows in fs/bio.c in the Linux kernel before 2.6.36.2 allow local users to cause a denial of service (system crash) via a crafted device ioctl to a SCSI… Affected: 11 |
| CVE-2010-3876 | – | Jan 3 | net/packet/af_packet.c in the Linux kernel before 2.6.37-rc2 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive… Affected: 11 |
| CVE-2010-3850 | – | Dec 30 | The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_ADMIN capability, which allows local users to bypass intended… Affected: 11 |
| CVE-2010-3848 | – | Dec 30 | Stack-based buffer overflow in the econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users… Affected: 11 |
| CVE-2010-3849 | – | Dec 30 | The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to cause a denial of service… Affected: 11 |
| CVE-2010-4158 | – | Dec 30 | The sk_run_filter function in net/core/filter.c in the Linux kernel before 2.6.36.2 does not check whether a certain memory location has been initialized before executing a (1)… Affected: 11 |
| CVE-2010-4258 | – | Dec 30 | The do_exit function in kernel/exit.c in the Linux kernel before 2.6.36.2 does not properly handle a KERNEL_DS get_fs value, which allows local users to bypass intended access_ok… Affected: 11 |
| CVE-2010-3874 | – | Dec 29 | Heap-based buffer overflow in the bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the Linux kernel before… Affected: 11 |
| CVE-2010-4347 | – | Dec 22 | The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which allows local users to gain privileges by placing a custom… Affected: 11 |
| CVE-2010-4157 | – | Dec 10 | Integer overflow in the ioc_general function in drivers/scsi/gdth.c in the Linux kernel before 2.6.36.1 on 64-bit platforms allows local users to cause a denial of service (memory… Affected: 11 |
| CVE-2010-3861 | – | Dec 10 | The ethtool_get_rxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize a certain block of heap memory, which allows local users to obtain… Affected: 11 |
| CVE-2010-4083 | – | Nov 30 | The copy_semid_to_user function in ipc/sem.c in the Linux kernel before 2.6.36 does not initialize a certain structure, which allows local users to obtain potentially sensitive… Affected: 11 |
| CVE-2010-4082 | – | Nov 30 | The viafb_ioctl_get_viafb_info function in drivers/video/via/ioctl.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows… Affected: 11 |
| CVE-2010-4081 | – | Nov 30 | The snd_hdspm_hwdep_ioctl function in sound/pci/rme9652/hdspm.c in the Linux kernel before 2.6.36-rc6 does not initialize a certain structure, which allows local users to obtain… Affected: 11 |
| CVE-2010-4080 | – | Nov 30 | The snd_hdsp_hwdep_ioctl function in sound/pci/rme9652/hdsp.c in the Linux kernel before 2.6.36-rc6 does not initialize a certain structure, which allows local users to obtain… Affected: 11 |
| CVE-2010-4078 | – | Nov 29 | The sisfb_ioctl function in drivers/video/sis/sis_main.c in the Linux kernel before 2.6.36-rc6 does not properly initialize a certain structure member, which allows local users to… Affected: 11 |
| CVE-2010-4073 | – | Nov 29 | The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local users to obtain potentially sensitive information from kernel… Affected: 11 |
| CVE-2010-4072 | – | Nov 29 | The copy_shmid_to_user function in ipc/shm.c in the Linux kernel before 2.6.37-rc1 does not initialize a certain structure, which allows local users to obtain potentially… Affected: 11 |
| CVE-2010-2962 | – | Nov 26 | drivers/gpu/drm/i915/i915_gem.c in the Graphics Execution Manager (GEM) in the Intel i915 driver in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.36… Affected: 11 |
| CVE-2010-4169 | – | Nov 20 | Use-after-free vulnerability in mm/mprotect.c in the Linux kernel before 2.6.37-rc2 allows local users to cause a denial of service via vectors involving an mprotect system call Affected: 11 |
| CVE-2010-4165 | – | Nov 20 | The do_tcp_setsockopt function in net/ipv4/tcp.c in the Linux kernel before 2.6.37-rc2 does not properly restrict TCP_MAXSEG (aka MSS) values, which allows local users to cause a… Affected: 11 |
| CVE-2010-3432 | – | Nov 20 | The sctp_packet_config function in net/sctp/output.c in the Linux kernel before 2.6.35.6 performs extraneous initializations of packet data structures, which allows remote… Affected: 11 |
| CVE-2010-3442 | – | Oct 4 | Multiple integer overflows in the snd_ctl_new function in sound/core/control.c in the Linux kernel before 2.6.36-rc5-next-20100929 allow local users to cause a denial of service… Affected: 11 |
| CVE-2010-3437 | – | Oct 4 | Integer signedness error in the pkt_find_dev_from_minor function in drivers/block/pktcdvd.c in the Linux kernel before 2.6.36-rc6 allows local users to obtain sensitive… Affected: 11 |