CVE-2020-8694
- EPSS 0.45%
- Veröffentlicht 12.11.2020 18:15:16
- Zuletzt bearbeitet 21.11.2024 05:39:15
Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2020-27673
- EPSS 0.42%
- Veröffentlicht 22.10.2020 21:15:14
- Zuletzt bearbeitet 21.11.2024 05:21:38
An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. Guest OS users can cause a denial of service (host OS hang) via a high rate of events to dom0, aka CID-e99502f76271.
CVE-2020-27675
- EPSS 0.27%
- Veröffentlicht 22.10.2020 21:15:14
- Zuletzt bearbeitet 21.11.2024 05:21:38
An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. drivers/xen/events/events_base.c allows event-channel removal during the event-handling loop (a race condition). This can cause a use-after-free or NULL point...
CVE-2020-0423
- EPSS 0.51%
- Veröffentlicht 14.10.2020 14:15:17
- Zuletzt bearbeitet 21.11.2024 04:53:29
In binder_release_work of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploita...
CVE-2020-25645
- EPSS 2.43%
- Veröffentlicht 13.10.2020 20:15:12
- Zuletzt bearbeitet 21.11.2024 05:18:19
A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two e...
CVE-2020-25641
- EPSS 0.39%
- Veröffentlicht 06.10.2020 14:15:12
- Zuletzt bearbeitet 21.11.2024 05:18:18
A flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A zero-length biovec request issued by the block subsystem could cause the kernel to enter an infinite loop, causing a denial of service. This flaw allows a ...
CVE-2020-25643
- EPSS 3.29%
- Veröffentlicht 06.10.2020 14:15:12
- Zuletzt bearbeitet 21.11.2024 05:18:19
A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial...
CVE-2020-26088
- EPSS 0.4%
- Veröffentlicht 24.09.2020 15:15:15
- Zuletzt bearbeitet 21.11.2024 05:19:12
A missing CAP_NET_RAW check in NFC socket creation in net/nfc/rawsock.c in the Linux kernel before 5.8.2 could be used by local attackers to create raw sockets, bypassing security mechanisms, aka CID-26896f01467a.
CVE-2020-14390
- EPSS 0.34%
- Veröffentlicht 18.09.2020 18:15:16
- Zuletzt bearbeitet 21.11.2024 05:03:09
A flaw was found in the Linux kernel in versions before 5.9-rc6. When changing screen size, an out-of-bounds memory write can occur leading to memory corruption or a denial of service. Due to the nature of the flaw, privilege escalation cannot be ful...
CVE-2020-0430
- EPSS 0.18%
- Veröffentlicht 17.09.2020 19:15:13
- Zuletzt bearbeitet 21.11.2024 04:53:30
In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitati...