CVE-2022-0617
- EPSS 0.02%
- Veröffentlicht 16.02.2022 17:15:11
- Zuletzt bearbeitet 21.11.2024 06:39:02
A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udf_file_write_iter function for the malicious UDF image. A local user could use this flaw to crash the system. Actual from Linux ker...
CVE-2022-24958
- EPSS 0.05%
- Veröffentlicht 11.02.2022 06:15:06
- Zuletzt bearbeitet 21.11.2024 06:51:27
drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release.
CVE-2022-24959
- EPSS 0.06%
- Veröffentlicht 11.02.2022 06:15:06
- Zuletzt bearbeitet 21.11.2024 06:51:27
An issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in yam_siocdevprivate in drivers/net/hamradio/yam.c.
CVE-2022-0487
- EPSS 0.05%
- Veröffentlicht 04.02.2022 23:15:12
- Zuletzt bearbeitet 21.11.2024 06:38:45
A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove in drivers/memstick/host/rtsx_usb_ms.c in memstick in the Linux kernel. In this flaw, a local attacker with a user privilege may impact system Confidentiality. This flaw affects kerne...
CVE-2022-24448
- EPSS 0.02%
- Veröffentlicht 04.02.2022 20:15:08
- Zuletzt bearbeitet 21.11.2024 06:50:26
An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should occur, b...
CVE-2021-22600
- EPSS 0.18%
- Veröffentlicht 26.01.2022 14:15:08
- Zuletzt bearbeitet 24.10.2025 13:54:34
A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea2...
- EPSS 0.01%
- Veröffentlicht 18.01.2022 17:15:09
- Zuletzt bearbeitet 21.11.2024 06:36:52
A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition. This flaw allows a local user ...
CVE-2021-39633
- EPSS 0.06%
- Veröffentlicht 14.01.2022 20:15:11
- Zuletzt bearbeitet 21.11.2024 06:19:50
In gre_handle_offloads of ip_gre.c, there is a possible page fault due to an invalid memory access. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Produc...
CVE-2021-39634
- EPSS 0.03%
- Veröffentlicht 14.01.2022 20:15:11
- Zuletzt bearbeitet 21.11.2024 06:19:51
In fs/eventpoll.c, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID...
CVE-2021-28714
- EPSS 0.12%
- Veröffentlicht 06.01.2022 18:15:07
- Zuletzt bearbeitet 21.11.2024 06:00:12
Guest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Incoming data packets for a guest in the Linux...