CVE-2020-12659
- EPSS 0.14%
- Veröffentlicht 05.05.2020 07:15:11
- Zuletzt bearbeitet 21.11.2024 05:00:00
An issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) because of a lack of headroom validation.
CVE-2020-12465
- EPSS 0.17%
- Veröffentlicht 29.04.2020 19:15:12
- Zuletzt bearbeitet 21.11.2024 04:59:45
An array overflow was discovered in mt76_add_fragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10, aka CID-b102f0c522cf. An oversized packet with too many rx fragments can corrupt memory of adjacent pages.
CVE-2019-19966
- EPSS 0.14%
- Veröffentlicht 25.12.2019 04:15:12
- Zuletzt bearbeitet 21.11.2024 04:35:45
In the Linux kernel before 5.1.6, there is a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that will cause denial of service, aka CID-dea37a972655.
CVE-2019-19947
- EPSS 0.11%
- Veröffentlicht 24.12.2019 00:15:10
- Zuletzt bearbeitet 21.11.2024 04:35:43
In the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB device in the drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c driver, aka CID-da2311a6385c.
CVE-2019-19922
- EPSS 0.06%
- Veröffentlicht 22.12.2019 20:15:10
- Zuletzt bearbeitet 21.11.2024 04:35:40
kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows attackers to cause a denial of service against non-cpu-bound applications by generating a workload that triggers unwanted slice expira...