Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

kernel vulnerabilities and exploits

(subscribe to this query)
4.9
CVSSv2

CVE-2009-1914

The pci_register_iommu_region function in arch/sparc/kernel/pci_common.c in the Linux kernel prior to 2.6.29 on the sparc64 platform allows local users to cause a denial of service (system crash) by reading the /proc/iomem file, related to uninitialized pointers and the request_r...
Linux Linux KernelLinux Linux Kernel 2.6.0Linux Linux Kernel 2.6.1Linux Linux Kernel 2.6.2Linux Linux Kernel 2.6.3Linux Linux Kernel 2.6.4Linux Linux Kernel 2.6.5Linux Linux Kernel 2.6.6Linux Linux Kernel 2.6.7Linux Linux Kernel 2.6.8Linux Linux Kernel 2.6.8.1Linux Linux Kernel 2.6.9
4.6
CVSSv2

CVE-2013-7348

Double free vulnerability in the ioctx_alloc function in fs/aio.c in the Linux kernel prior to 3.12.4 allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via vectors involving an error condition in the aio_setup_ring function.
Linux Linux KernelLinux Linux Kernel 3.0Linux Linux Kernel 3.0.1Linux Linux Kernel 3.0.2Linux Linux Kernel 3.0.3Linux Linux Kernel 3.0.4Linux Linux Kernel 3.0.5Linux Linux Kernel 3.0.6Linux Linux Kernel 3.0.7Linux Linux Kernel 3.0.8Linux Linux Kernel 3.0.9Linux Linux Kernel 3.0.10
1.2
CVSSv2

CVE-2008-7256

mm/shmem.c in the Linux kernel prior to 2.6.28-rc8, when strict overcommit is enabled and CONFIG_SECURITY is disabled, does not properly handle the export of shmemfs objects by knfsd, which allows malicious users to cause a denial of service (NULL pointer dereference and knfsd cr...
Linux Linux KernelLinux Linux Kernel 2.6.0Linux Linux Kernel 2.6.1Linux Linux Kernel 2.6.2Linux Linux Kernel 2.6.10Linux Linux Kernel 2.6.11Linux Linux Kernel 2.6.11.1Linux Linux Kernel 2.6.11.2Linux Linux Kernel 2.6.11.3Linux Linux Kernel 2.6.11.4Linux Linux Kernel 2.6.11.5Linux Linux Kernel 2.6.11.6
4.9
CVSSv2

CVE-2009-3640

The update_cr8_intercept function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel prior to 2.6.32-rc1 does not properly handle the absence of an Advanced Programmable Interrupt Controller (APIC), which allows local users to cause a denial of service (NULL pointer d...
Linux Linux KernelLinux Linux Kernel 2.6.0Linux Linux Kernel 2.6.1Linux Linux Kernel 2.6.2Linux Linux Kernel 2.6.3Linux Linux Kernel 2.6.4Linux Linux Kernel 2.6.5Linux Linux Kernel 2.6.6Linux Linux Kernel 2.6.7Linux Linux Kernel 2.6.8Linux Linux Kernel 2.6.8.1Linux Linux Kernel 2.6.9
7.1
CVSSv2

CVE-2009-4307

The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel prior to 2.6.32-git6 allows user-assisted remote malicious users to cause a denial of service (divide-by-zero error and panic) via a malformed ext4 filesystem containing a super block with a large FLEX_BG gro...
Linux Linux KernelLinux Linux Kernel 2.6.0Linux Linux Kernel 2.6.1Linux Linux Kernel 2.6.2Linux Linux Kernel 2.6.3Linux Linux Kernel 2.6.4Linux Linux Kernel 2.6.5Linux Linux Kernel 2.6.6Linux Linux Kernel 2.6.7Linux Linux Kernel 2.6.8Linux Linux Kernel 2.6.8.1Linux Linux Kernel 2.6.9
7.1
CVSSv2

CVE-2009-4308

The ext4_decode_error function in fs/ext4/super.c in the ext4 filesystem in the Linux kernel prior to 2.6.32 allows user-assisted remote malicious users to cause a denial of service (NULL pointer dereference), and possibly have unspecified other impact, via a crafted read-only fi...
Linux Linux KernelLinux Linux Kernel 2.6.0Linux Linux Kernel 2.6.1Linux Linux Kernel 2.6.2Linux Linux Kernel 2.6.3Linux Linux Kernel 2.6.4Linux Linux Kernel 2.6.5Linux Linux Kernel 2.6.6Linux Linux Kernel 2.6.7Linux Linux Kernel 2.6.8Linux Linux Kernel 2.6.8.1Linux Linux Kernel 2.6.9
4.9
CVSSv2

CVE-2009-2909

Integer signedness error in the ax25_setsockopt function in net/ax25/af_ax25.c in the ax25 subsystem in the Linux kernel prior to 2.6.31.2 allows local users to cause a denial of service (OOPS) via a crafted optlen value in an SO_BINDTODEVICE operation.
Linux Linux KernelLinux Linux Kernel 2.6.0Linux Linux Kernel 2.6.1Linux Linux Kernel 2.6.2Linux Linux Kernel 2.6.3Linux Linux Kernel 2.6.4Linux Linux Kernel 2.6.5Linux Linux Kernel 2.6.6Linux Linux Kernel 2.6.7Linux Linux Kernel 2.6.8Linux Linux Kernel 2.6.8.1Linux Linux Kernel 2.6.9
4.6
CVSSv2

CVE-2013-1819

The _xfs_buf_find function in fs/xfs/xfs_buf.c in the Linux kernel prior to 3.7.6 does not validate block numbers, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging the ability...
Linux Linux KernelLinux Linux Kernel 3.0Linux Linux Kernel 3.0.1Linux Linux Kernel 3.0.2Linux Linux Kernel 3.0.3Linux Linux Kernel 3.0.4Linux Linux Kernel 3.0.5Linux Linux Kernel 3.0.6Linux Linux Kernel 3.0.7Linux Linux Kernel 3.0.8Linux Linux Kernel 3.0.9Linux Linux Kernel 3.0.10
1.9
CVSSv2

CVE-2013-0349

The hidp_setup_hid function in net/bluetooth/hidp/core.c in the Linux kernel prior to 3.7.6 does not properly copy a certain name field, which allows local users to obtain sensitive information from kernel memory by setting a long name and making an HIDPCONNADD ioctl call.
Linux Linux KernelLinux Linux Kernel 3.0Linux Linux Kernel 3.0.1Linux Linux Kernel 3.0.2Linux Linux Kernel 3.0.3Linux Linux Kernel 3.0.4Linux Linux Kernel 3.0.5Linux Linux Kernel 3.0.6Linux Linux Kernel 3.0.7Linux Linux Kernel 3.0.8Linux Linux Kernel 3.0.9Linux Linux Kernel 3.0.10
7.8
CVSSv2

CVE-2009-1439

Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and previous versions allows remote malicious users to cause a denial of service (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request.
Linux Linux KernelLinux Linux Kernel 2.2.27Linux Linux Kernel 2.4.36Linux Linux Kernel 2.4.36.1Linux Linux Kernel 2.4.36.2Linux Linux Kernel 2.4.36.3Linux Linux Kernel 2.4.36.4Linux Linux Kernel 2.4.36.5Linux Linux Kernel 2.4.36.6Linux Linux Kernel 2.6Linux Linux Kernel 2.6.0Linux Linux Kernel 2.6.1
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
path traversalCVE-2025-2657CVE-2025-30066CVE-2025-24813apache commons vfsCVE-2025-2478validationCVE-2025-2674code injectionmedical card generation systemmicrosoft edge (chromium-based)CVE-2025-2688cicadascms
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook