linux linux kernel 5.18 vulnerabilities and exploits

(subscribe to this query)

8.2

CVSSv3

A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size. This flaw may allow an malicious user to information leak and may cause a denial of service problem.

Linux Linux Kernel 5.18 Linux Linux Kernel

6.7

CVSSv3

A use after free issue exists in driver/firewire in outbound_phy_packet_callback in the Linux Kernel. In this flaw a local attacker with special privilege may cause a use after free problem when queue_event() fails.

Linux Linux Kernel 5.18 Linux Linux Kernel

4.7

CVSSv3

A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister() reclaims the device's relevant resource when a netcard detaches. However, a running routine may be unaware of this and cause the use-after-free of the mdev->addrs object, potentially...

Linux Linux Kernel 5.18 Linux Linux Kernel

4.1

CVSSv3

A use-after-free flaw was found in the Linux kernel's NFC core functionality due to a race condition between kobject creation and delete. This vulnerability allows a local attacker with CAP_NET_ADMIN privilege to leak kernel information.

Linux Linux Kernel 5.18

5.5

CVSSv3

There is a sleep-in-atomic bug in /net/nfc/netlink.c that allows an malicious user to crash the Linux kernel by simulating a nfc device from user-space.

Linux Linux Kernel 5.18

5.5

CVSSv3

A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management options functionality was found in the way user resuming CPU from suspend-to-RAM. A local user could use this flaw to potentially get unaut...

Linux Linux Kernel 5.18

5.5

CVSSv3

A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.

Linux Linux Kernel 5.18 Linux Linux Kernel Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0

5.5

CVSSv3

A NULL pointer dereference flaw was found in the Linux kernel’s X.25 set of standardized network protocols functionality in the way a user terminates their session using a simulated Ethernet card and continued usage of this connection. This flaw allows a local user to crash...

Linux Linux Kernel 5.18 Debian Debian Linux 9.0 Debian Debian Linux 10.0

5.5

CVSSv3

Found Linux Kernel flaw in the i740 driver. The Userspace program could pass any values to the driver through ioctl() interface. The driver doesn't check the value of 'pixclock', so it may cause a divide by zero error.

Linux Linux Kernel 5.18 Debian Debian Linux 10.0 Debian Debian Linux 11.0

5.5

CVSSv3

A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root (host) user-level application to crash the host kernel by creating a confidential guest VM instance in AMD CPU that supports Secure Encrypted Virtualization (SEV).

Linux Linux Kernel 5.18 Linux Linux Kernel Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook