CVE-2023-20928
- EPSS 0.11%
- Veröffentlicht 26.01.2023 21:18:11
- Zuletzt bearbeitet 02.04.2025 15:15:53
In binder_vma_close of binder.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: And...
CVE-2023-0468
- EPSS 0.02%
- Veröffentlicht 26.01.2023 21:18:09
- Zuletzt bearbeitet 01.04.2025 15:15:57
A use-after-free flaw was found in io_uring/poll.c in io_poll_check_events in the io_uring subcomponent in the Linux Kernel due to a race condition of poll_refs. This flaw may cause a NULL pointer dereference.
CVE-2023-0469
- EPSS 0.02%
- Veröffentlicht 26.01.2023 21:18:09
- Zuletzt bearbeitet 01.04.2025 15:15:57
A use-after-free flaw was found in io_uring/filetable.c in io_install_fixed_file in the io_uring subcomponent in the Linux Kernel during call cleanup. This flaw may lead to a denial of service.
CVE-2023-0394
- EPSS 0.02%
- Veröffentlicht 26.01.2023 21:18:07
- Zuletzt bearbeitet 31.03.2025 15:15:38
A NULL pointer dereference flaw was found in rawv6_push_pending_frames in net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw causes the system to crash.
CVE-2022-47929
- EPSS 0.04%
- Veröffentlicht 17.01.2023 21:15:14
- Zuletzt bearbeitet 04.04.2025 18:15:43
In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service (system crash) via a crafted traffic control configuration that is set up with "tc qdisc" and...
CVE-2022-41858
- EPSS 0.01%
- Veröffentlicht 17.01.2023 18:15:11
- Zuletzt bearbeitet 07.04.2025 17:15:33
A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sl_tx_timeout in drivers/net/slip/slip.c. This issue could allow an attacker to crash the system or leak internal kernel inform...
CVE-2023-23559
- EPSS 0.03%
- Veröffentlicht 13.01.2023 01:15:10
- Zuletzt bearbeitet 05.05.2025 16:15:30
In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.
CVE-2022-3628
- EPSS 0.07%
- Veröffentlicht 12.01.2023 19:15:24
- Zuletzt bearbeitet 08.04.2025 15:15:45
A buffer overflow flaw was found in the Linux kernel Broadcom Full MAC Wi-Fi driver. This issue occurs when a user connects to a malicious USB device. This can allow a local user to crash the system or escalate their privileges.
CVE-2022-3977
- EPSS 0.11%
- Veröffentlicht 12.01.2023 19:15:24
- Zuletzt bearbeitet 08.04.2025 18:15:44
A use-after-free flaw was found in the Linux kernel MCTP (Management Component Transport Protocol) functionality. This issue occurs when a user simultaneously calls DROPTAG ioctl and socket close happens, which could allow a local user to crash the s...
CVE-2022-4842
- EPSS 0.02%
- Veröffentlicht 12.01.2023 19:15:24
- Zuletzt bearbeitet 08.04.2025 14:15:30
A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attr_punch_hole() was found. A local user could use this flaw to crash the system.