Product:

Linux_kernel

(Linux)
Repositories • https://github.com/torvalds/linux
• https://github.com/mjg59/linux
• https://github.com/stoth68000/media-tree
• https://github.com/acpica/acpica
• https://github.com/derrekr/android_security
#Vulnerabilities 4633
Date Id Summary Products Score Patch Annotated
2023-03-16 CVE-2023-28466 do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference). Debian_linux, Linux_kernel, H300s, H410c, H410s, H500s, H700s 7.0
2023-11-01 CVE-2023-1193 A use-after-free flaw was found in setup_async_work in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. This issue could allow an attacker to crash the system by accessing freed work. Linux_kernel 6.5
2023-11-01 CVE-2023-3397 A race condition occurred between the functions lmLogClose and txEnd in JFS, in the Linux Kernel, executed in different threads. This flaw allows a local attacker with normal user privileges to crash the system or leak internal kernel information. Linux_kernel 6.3
1999-02-26 CVE-1999-0381 super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root access. Debian_linux, Linux_kernel N/A
1999-08-23 CVE-1999-0720 The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users. Linux_kernel N/A
2000-05-01 CVE-2000-0344 The knfsd NFS server in Linux kernel 2.2.x allows remote attackers to cause a denial of service via a negative size value. Linux_kernel N/A
2000-06-09 CVE-2000-0506 The "capabilities" feature in Linux before 2.2.16 allows local users to cause a denial of service or gain privileges by setting the capabilities to prevent a setuid program from dropping privileges, aka the "Linux kernel setuid/setcap vulnerability." Linux_kernel N/A
2002-12-31 CVE-2002-1573 Unspecified vulnerability in the pcilynx ieee1394 firewire driver (pcilynx.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors, related to "wrap handling." Linux_kernel N/A
2002-12-31 CVE-2002-1572 Signed integer overflow in the bttv_read function in the bttv driver (bttv-driver.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors. Linux_kernel N/A
2002-12-31 CVE-2002-1571 The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers, which could lead to an information leak on processors that do not clear all relevant SSE registers. Linux_kernel N/A