kernel doc vulnerabilities and exploits

(subscribe to this query)

NA

An information leak flaw was found in NFS over RDMA in the net/sunrpc/xprtrdma/rpc_rdma.c in the Linux Kernel. This flaw allows an attacker with normal user privileges to leak kernel information.

Linux Linux Kernel Linux Linux Kernel 5.8.0

NA

A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size. This flaw may allow an malicious user to information leak and may cause a denial of service problem.

Linux Linux Kernel 5.18 Linux Linux Kernel

4.6

CVSSv2

The root cause of this vulnerability is that the ioctl$DRM_IOCTL_MODE_DESTROY_DUMB can decrease refcount of *drm_vgem_gem_object *(created in *vgem_gem_dumb_create*) concurrently, and *vgem_gem_dumb_create *will access the freed drm_vgem_gem_object.

Linux Linux Kernel Linux Linux Kernel 5.6 Debian Debian Linux 10.0

NA

A use-after-free vulnerabilitity exists in drivers/net/hamradio/6pack.c of linux that allows an malicious user to crash linux kernel by simulating ax25 device using 6pack driver from user space.

Linux Linux Kernel Linux Linux Kernel 5.17 Redhat Enterprise Linux 9.0

2.1

CVSSv2

A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a local attacker with a user privilege to cause a denial of service (DOS) when the mkiss or sixpack device is detached and reclaim resources early.

Linux Linux Kernel 5.16 Linux Linux Kernel Debian Debian Linux 10.0 Debian Debian Linux 11.0

NA

A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a use-after-free. This issue needs to handle 'return' with proper preconditions, as it can lead to a kernel information leak problem caused by a local, unprivileged atta...

Linux Linux Kernel Linux Linux Kernel 3.13 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0

2 Github repositories

NA

A NULL pointer dereference flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system.

Linux Linux Kernel

2.1

CVSSv2

The Linux kernel prior to 5.17.9 allows TCP servers to identify clients by observing what source ports are used. This occurs because of use of Algorithm 4 ("Double-Hash Port Selection Algorithm") of RFC 6056.

Linux Linux Kernel

1 Github repository

NA

A use-after-free flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system.

Linux Linux Kernel Linux Linux Kernel 5.17 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Debian Debian Linux 10.0

NA

A use-after-free flaw was found in the Linux kernel's NFC core functionality due to a race condition between kobject creation and delete. This vulnerability allows a local attacker with CAP_NET_ADMIN privilege to leak kernel information.

Linux Linux Kernel 5.18

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook