KE
Vendor
Kernel
22
CVEs
0
On KEV
0
New 30D
Products
UT9.8
Util-linux
Kernel
18 CVEs0 on KEV0 new
LK–
Linux Kernel
Kernel
2 CVEs0 on KEV0 new
LI8.1
Linux-pam
Kernel
1 CVEs0 on KEV0 new
SE6.1
Selinux
Kernel
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-13595 | UT Util-linux Kernel | 5.3 | Jun 29 | Util-linux: util-linux: heap use-after-free in libblkid nested partition probing |
| CVE-2026-27456 | UT Util-linux Kernel | 4.7 | Apr 3 | util-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device Setup |
| CVE-2026-3184 | UT Util-linux Kernel | 5.3 | Apr 3 | Util-linux: util-linux: access control bypass due to improper hostname canonicalization |
| CVE-2024-28085 | UT Util-linux Kernel | 3.3 | Mar 27 | wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv |
| CVE-2020-21583 | UT Util-linux Kernel | 6.7 | Aug 22 | An issue was discovered in hwclock.13-v2.27 allows attackers to gain escalated privlidges or execute arbitrary commands via the path parameter when setting the date |
| CVE-2021-3996 | UT Util-linux Kernel | 5.5 | Aug 23 | A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem |
| CVE-2021-3995 | UT Util-linux Kernel | 5.5 | Aug 23 | A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem |
| CVE-2022-0563 | UT Util-linux Kernel | 5.5 | Feb 21 | A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support |
| CVE-2021-37600 | UT Util-linux Kernel | 5.5 | Jul 28 | An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in… |
| CVE-2020-10751 | SE Selinux Kernel | 6.1 | May 26 | A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single netlink message |
| CVE-2018-17953 | LI Linux-pam Kernel | 8.1 | Nov 27 | A incorrect variable in a SUSE specific patch for pam_access rule matching in PAM 1.3.0 in openSUSE Leap 15.0 and SUSE Linux Enterprise 15 could lead to pam_access rules not being… |
| CVE-2018-7738 | UT Util-linux Kernel | 7.8 | Mar 7 | In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount… |
| CVE-2015-5224 | UT Util-linux Kernel | 9.8 | Aug 23 | The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks |
| CVE-2016-5011 | UT Util-linux Kernel | 4.6 | Apr 11 | The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption)… |
| CVE-2014-9114 | UT Util-linux Kernel | 7.8 | Mar 31 | Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code |
| CVE-2016-2779 | UT Util-linux Kernel | 7.8 | Feb 7 | runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer |
| CVE-2015-5218 | UT Util-linux Kernel | – | Nov 9 | Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a crafted file, related to the page global… |
| CVE-2013-0157 | UT Util-linux Kernel | – | Jan 21 | (a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the… |
| CVE-2009-3288 | LK Linux Kernel Kernel | – | Sep 22 | The sg_build_indirect function in drivers/scsi/sg.c in Linux kernel 2.6.28-rc1 through 2.6.31-rc8 uses an incorrect variable when accessing an array, which allows local users to… |
| CVE-2007-6712 | LK Linux Kernel Kernel | – | Apr 12 | Integer overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel 2.6.21-rc4, when running on 64-bit systems, allows local users to cause a denial of service (infinite… |
| CVE-2007-5191 | UT Util-linux Kernel | – | Oct 4 | mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain… |
| CVE-2001-1494 | UT Util-linux Kernel | 5.5 | Dec 31 | script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system,… |