Access Control

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kernel's KVM hypervisor…CVE-2018-1087kernel · CVSS 8 · 0.7% likely

   CWE-250

2. runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.CVE-2016-2779Kernel · 0.4% likely

   CWE-264

3. It was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an internal keyring, such as '.dns_resolver' in RHEL-7 or '.builtin_trusted_keys' upstrea…CVE-2016-9604kernel · CVSS 4.4 · 0.3% likely

   CWE-732

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.