CVE-2019-19036
- EPSS 1.84%
- Veröffentlicht 21.11.2019 02:15:23
- Zuletzt bearbeitet 21.11.2024 04:34:02
btrfs_root_node in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcu_dereference(root->node) can be zero.
CVE-2019-19039
- EPSS 0.7%
- Veröffentlicht 21.11.2019 02:15:23
- Zuletzt bearbeitet 21.11.2024 04:34:02
__btrfs_free_extent in fs/btrfs/extent-tree.c in the Linux kernel through 5.3.12 calls btrfs_print_leaf in a certain ENOENT case, which allows local users to obtain potentially sensitive information about register values via the dmesg program. NOTE: ...
CVE-2019-0146
- EPSS 0.29%
- Veröffentlicht 14.11.2019 19:15:12
- Zuletzt bearbeitet 21.11.2024 04:16:19
Resource leak in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of service via local access.
CVE-2019-16230
- EPSS 0.38%
- Veröffentlicht 11.09.2019 16:15:11
- Zuletzt bearbeitet 28.05.2026 19:16:31
drivers/gpu/drm/radeon/radeon_display.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. NOTE: A third-party software maintainer states that the work queue allocation is happening duri...
CVE-2018-7191
- EPSS 0.65%
- Veröffentlicht 17.05.2019 05:29:00
- Zuletzt bearbeitet 21.11.2024 04:11:45
In the tun subsystem in the Linux kernel before 4.13.14, dev_get_valid_name is not called before register_netdevice. This allows local users to cause a denial of service (NULL pointer dereference and panic) via an ioctl(TUNSETIFF) call with a dev nam...
CVE-2019-3900
- EPSS 4.35%
- Veröffentlicht 25.04.2019 15:29:00
- Zuletzt bearbeitet 21.11.2024 04:42:49
An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster than the other end can process them. A guest ...
CVE-2019-7308
- EPSS 0.54%
- Veröffentlicht 01.02.2019 22:29:00
- Zuletzt bearbeitet 21.11.2024 04:47:58
kernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds speculation on pointer arithmetic in various cases, including cases of different branches with different state or limits to sanitize, leading to side-channel a...
CVE-2018-16885
- EPSS 0.43%
- Veröffentlicht 03.01.2019 16:29:00
- Zuletzt bearbeitet 21.11.2024 03:53:31
A flaw was found in the Linux kernel that allows the userspace to call memcpy_fromiovecend() and similar functions with a zero offset and buffer length which causes the read beyond the buffer boundaries, in certain cases causing a memory access fault...
CVE-2018-17977
- EPSS 0.38%
- Veröffentlicht 08.10.2018 17:29:00
- Zuletzt bearbeitet 21.11.2024 03:55:19
The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets, which allows local users to cause a denial of service (memory consumption and system hang) by leveraging root access to e...
CVE-2018-7754
- EPSS 0.38%
- Veröffentlicht 10.08.2018 16:29:00
- Zuletzt bearbeitet 21.11.2024 04:12:40
The aoedisk_debugfs_show function in drivers/block/aoe/aoeblk.c in the Linux kernel through 4.16.4rc4 allows local users to obtain sensitive address information by reading "ffree: " lines in a debugfs file.