Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

linux linux kernel 3.13 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2022-1016
A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a use-after-free. This issue needs to handle 'return' with proper preconditions, as it can lead to a kernel information leak problem caused by a local, unprivileged atta...
Linux Linux KernelLinux Linux Kernel 3.13Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0
4.9
CVSSv2
CVE-2017-8106
The handle_invept function in arch/x86/kvm/vmx.c in the Linux kernel 3.12 up to and including 3.15 allows privileged KVM guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) via a single-context INVEPT instruction with a NULL EPT pointer.
Linux Linux Kernel 3.12Linux Linux Kernel 3.12.5Linux Linux Kernel 3.12.7Linux Linux Kernel 3.12.14Linux Linux Kernel 3.12.16Linux Linux Kernel 3.12.23Linux Linux Kernel 3.12.25Linux Linux Kernel 3.12.27Linux Linux Kernel 3.12.29Linux Linux Kernel 3.12.36Linux Linux Kernel 3.12.38Linux Linux Kernel 3.12.45Linux Linux Kernel 3.12.47Linux Linux Kernel 3.12.52Linux Linux Kernel 3.12.54Linux Linux Kernel 3.12.9Linux Linux Kernel 3.12.10Linux Linux Kernel 3.12.11Linux Linux Kernel 3.12.12Linux Linux Kernel 3.14.67Linux Linux Kernel 3.14.68Linux Linux Kernel 3.15
6.4
CVSSv2
CVE-2014-7284
The net_get_random_once implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x prior to 3.14.5 on certain Intel processors does not perform the intended slow-path operation to initialize random seeds, which makes it easier for remote malicious users to spoof or ...
Linux Linux Kernel 3.13.1Linux Linux Kernel 3.13.10Linux Linux Kernel 3.13.11Linux Linux Kernel 3.14.3Linux Linux Kernel 3.14.1Linux Linux Kernel 3.13.6Linux Linux Kernel 3.13.4Linux Linux Kernel 3.13.3Linux Linux Kernel 3.13.2Linux Linux Kernel 3.13.5Linux Linux Kernel 3.13.9Linux Linux Kernel 3.14.2Linux Linux Kernel 3.14.4Linux Linux Kernel 3.13.8Linux Linux Kernel 3.13.7
6.2
CVSSv2
CVE-2014-4014
The capabilities implementation in the Linux kernel prior to 3.14.8 does not properly consider that namespaces are inapplicable to inodes, which allows local users to bypass intended chmod restrictions by first creating a user namespace, as demonstrated by setting the setgid bit ...
Linux Linux Kernel
4.6
CVSSv2
CVE-2014-8989
The Linux kernel up to and including 3.17.4 does not properly restrict dropping of supplemental group memberships in certain namespace scenarios, which allows local users to bypass intended file permissions by leveraging a POSIX ACL containing an entry for the group category that...
Linux Linux Kernel 3.0Linux Linux Kernel 3.0.1Linux Linux Kernel 3.0.10Linux Linux Kernel 3.0.18Linux Linux Kernel 3.0.11Linux Linux Kernel 3.0.12Linux Linux Kernel 3.0.13Linux Linux Kernel 3.0.2Linux Linux Kernel 3.0.20Linux Linux Kernel 3.0.27Linux Linux Kernel 3.0.28Linux Linux Kernel 3.0.35Linux Linux Kernel 3.0.36Linux Linux Kernel 3.0.42Linux Linux Kernel 3.0.43Linux Linux Kernel 3.0.5Linux Linux Kernel 3.0.50Linux Linux Kernel 3.0.58Linux Linux Kernel 3.0.59Linux Linux Kernel 3.0.65Linux Linux Kernel 3.0.66Linux Linux Kernel 3.1
4.9
CVSSv2
CVE-2014-9090
The do_double_fault function in arch/x86/kernel/traps.c in the Linux kernel up to and including 3.17.4 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to cause a denial of service (panic) via a modify_ldt system ca...
Linux Linux Kernel 3.0.25Linux Linux Kernel 3.15.8Linux Linux Kernel 3.1.2Linux Linux Kernel 3.10.8Linux Linux Kernel 3.15.1Linux Linux Kernel 3.0Linux Linux Kernel 3.0.22Linux Linux Kernel 3.12Linux Linux Kernel 3.0.5Linux Linux Kernel 3.0.68Linux Linux Kernel 3.14Linux Linux Kernel 3.13.1Linux Linux Kernel 3.0.38Linux Linux Kernel 3.13.10Linux Linux Kernel 3.1Linux Linux Kernel 3.0.63Linux Linux Kernel 3.0.46Linux Linux Kernel 3.10.24Linux Linux Kernel 3.13.11Linux Linux Kernel 3.0.47Linux Linux Kernel 3.0.48Linux Linux Kernel 3.15.3
4.9
CVSSv2
CVE-2014-8172
The filesystem implementation in the Linux kernel prior to 3.13 performs certain operations on lists of files with an inappropriate locking approach, which allows local users to cause a denial of service (soft lockup or system crash) via unspecified use of Asynchronous I/O (AIO) ...
Linux Linux Kernel
5.6
CVSSv2
CVE-2019-19332
An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 up to and including 5.4, in the way the Linux kernel's KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user ...
Linux Linux KernelRedhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0
7.2
CVSSv2
CVE-2017-15951
The KEYS subsystem in the Linux kernel prior to 4.13.10 does not correctly synchronize the actions of updating versus finding a key in the "negative" state to avoid a race condition, which allows local users to cause a denial of service or possibly have unspecified othe...
Linux Linux Kernel
4.9
CVSSv2
CVE-2017-12190
The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel prior to 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page. The bio_add_pc_page function merges them into one, but the page referenc...
Linux Linux Kernel
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook