CVE-2023-0590
- EPSS 0.2%
- Veröffentlicht 23.03.2023 21:15:19
- Zuletzt bearbeitet 21.11.2024 07:37:27
A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem. This flaw leads to a denial of service issue. If patch ebda44da44f6 ("net: sched: fix race condition in qdisc_graft()") not applied yet, ...
CVE-2023-1513
- EPSS 0.23%
- Veröffentlicht 23.03.2023 21:15:19
- Zuletzt bearbeitet 25.02.2025 20:15:32
A flaw was found in KVM. When calling the KVM_GET_DEBUGREGS ioctl, on 32-bit systems, there might be some uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak.
CVE-2023-28772
- EPSS 0.71%
- Veröffentlicht 23.03.2023 15:15:12
- Zuletzt bearbeitet 05.05.2025 16:15:34
An issue was discovered in the Linux kernel before 5.13.3. lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow.
CVE-2022-4095
- EPSS 0.26%
- Veröffentlicht 22.03.2023 15:15:10
- Zuletzt bearbeitet 26.02.2025 17:15:13
A use-after-free flaw was found in Linux kernel before 5.19.2. This issue occurs in cmd_hdl_filter in drivers/staging/rtl8712/rtl8712_cmd.c, allowing an attacker to launch a local denial of service attack and gain escalation of privileges.
CVE-2022-3424
- EPSS 0.24%
- Veröffentlicht 06.03.2023 23:15:10
- Zuletzt bearbeitet 06.03.2025 21:15:12
A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first gru_file_unlocked_ioctl function is called by the user, where a fail pass occurs in the gru_check_chiplet_assignment function. This flaw allows a local user to ...
CVE-2023-1118
- EPSS 0.28%
- Veröffentlicht 02.03.2023 18:15:09
- Zuletzt bearbeitet 23.04.2025 17:16:24
A flaw use after free in the Linux kernel integrated infrared receiver/transceiver driver was found in the way user detaching rc device. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.
CVE-2023-20938
- EPSS 0.33%
- Veröffentlicht 28.02.2023 17:15:10
- Zuletzt bearbeitet 21.11.2024 07:41:51
In binder_transaction_buffer_release of binder.c, there is a possible use after free due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2023-26607
- EPSS 0.61%
- Veröffentlicht 26.02.2023 23:15:10
- Zuletzt bearbeitet 05.05.2025 16:15:31
In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c.
CVE-2023-0597
- EPSS 0.3%
- Veröffentlicht 23.02.2023 20:15:12
- Zuletzt bearbeitet 12.03.2025 20:15:13
A flaw possibility of memory leak in the Linux kernel cpu_entry_area mapping of X86 CPU data to memory was found in the way user can guess location of exception stack(s) or other important data. A local user could use this flaw to get access to some ...
- EPSS -
- Veröffentlicht 27.01.2023 23:15:08
- Zuletzt bearbeitet 07.11.2023 03:59:30
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2023. Notes: none.