kernel-rt vulnerabilities and exploits

(subscribe to this query)

6.8

CVSSv2

The icmp_check_sysrq function in net/ipv4/icmp.c in the kernel.org projects/rt patches for the Linux kernel, as used in the kernel-rt package prior to 3.10.0-327.22.1 in Red Hat Enterprise Linux for Real Time 7 and other products, allows remote malicious users to execute SysRq co...

Linux Linux Kernel-rt Redhat Enterprise Linux For Real Time 7 Redhat Enterprise Linux For Real Time For Nfv 7 Novell Suse Linux Enterprise Real Time Extension 12.0

1.9

CVSSv2

net/packet/af_packet.c in the Linux kernel prior to 2.6.39.3 does not properly restrict user-space access to certain packet data structures associated with VLAN Tag Control Information, which allows local users to obtain potentially sensitive information via a crafted application...

Linux Linux Kernel

7.2

CVSSv2

ntfs_end_buffer_async_read in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows malicious users to trigger a stack-based out-of-bounds write and cause a denial of service (kernel oops or panic) or possibly have unspecified other impact via a crafted ntfs filesystem.

Linux Linux Kernel 4.15 Canonical Ubuntu Linux 16.04.4

4.9

CVSSv2

The int3 handler in the Linux kernel prior to 3.3 relies on a per-CPU debug stack, which allows local users to cause a denial of service (stack corruption and panic) via a crafted application that triggers certain lock contention.

Linux Linux Kernel

4.9

CVSSv2

ntfs_read_locked_inode in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows malicious users to trigger a use-after-free read and possibly cause a denial of service (kernel oops or panic) via a crafted ntfs filesystem.

Linux Linux Kernel 4.15 Canonical Ubuntu Linux 16.04.4

7.2

CVSSv2

ntfs_attr_find in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows malicious users to trigger a stack-based out-of-bounds write and cause a denial of service (kernel oops or panic) or possibly have unspecified other impact via a crafted ntfs filesystem.

Linux Linux Kernel 4.15 Canonical Ubuntu Linux 16.04.4

7.8

CVSSv2

The IP stack in the Linux kernel prior to 4.6 allows remote malicious users to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by triggering use of the GRO path for packets with tunnel stacking, as demonstrated by interleaved IPv4...

Linux Linux Kernel

NA

The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unp...

Linux Linux Kernel 6.6 Linux Linux Kernel Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0

8.3

CVSSv2

A Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth implementation handled L2CAP packets with A2MP CID. This flaw allows a remote attacker in an adjacent range to crash the system, causing a denial of service or potentially execut...

Redhat Enterprise Linux 8.3

3.3

CVSSv2

A Red Hat only CVE-2020-12352 regression issue was found in the way the Linux kernel's Bluetooth stack implementation handled the initialization of stack memory when handling certain AMP packets. This flaw allows a remote attacker in an adjacent range to leak small portions ...

Redhat Enterprise Linux 8.3

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook