Access Control

Every one of the 261 is a mark on the map. Named now: 1 to 26, most at risk first.

1. crypto: algif_aead - Revert to operating out-of-placeCVE-2026-31431Linux · CVSS 7.8 · 98% likelycovered by CyberSIXT

   CWE-6691 article

2. A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a…CVE-2023-0386Linux · CVSS 7.8 · 7.9% likely

   CWE-282

3. The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file creation in the upper…CVE-2015-1328Linux · 38% likely

   CWE-264

4. The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended acces…CVE-2015-8660Linux · 22% likely

   CWE-264

5. The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<pid>/mem, which allows local users to ga…CVE-2012-0056Linux · 11% likely

   CWE-264

6. The eisa_eeprom_read function in the parisc isa-eeprom component (drivers/parisc/eisa_eeprom.c) in the Linux kernel before 2.6.31-rc6 allows local users to access restricted memor…CVE-2009-2846Linux · 8.2% likely

   CWE-264

7. In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalation because it mishandles nested user namespaces with more…CVE-2018-18955Linux · 7.7% likely

   CWE-863

8. The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges o…CVE-2016-4997Linux · 5.7% likely

   CWE-264

9. Memory leak in ICMP6 in Linux KernelCVE-2022-0742Linux · CVSS 9.1 · 5.0% likely

   CWE-275

10. ptrace: slightly saner 'get_dumpable()' logicCVE-2026-46333Linux · CVSS 7.1 · 4.3% likelycovered by CyberSIXT

    CWE-269

11. An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed wh…CVE-2022-2663Linux · 4.1% likely

    CWE-923

12. ip6_tables in netfilter in the Linux kernel before 2.6.16.31 allows remote attackers to (1) bypass a rule that disallows a protocol, via a packet with the protocol header not loca…CVE-2006-4572Linux · 3.9% likely

    CWE-264

13. The stack randomization feature in the Linux kernel before 3.19.1 on 64-bit platforms uses incorrect data types for the results of bitwise left-shift operations, which makes it ea…CVE-2015-1593Linux · 3.8% likely

    CWE-264

14. The IA32 system call emulation functionality in arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.36-rc4-git2 on the x86_64 platform does not zero extend the %eax register…CVE-2010-3301Linux · 3.7% likely

    CWE-269

15. nfs2acl.c in the Linux kernel 2.6.14.4 does not check for MAY_SATTR privilege before setting access controls (ACL) on files on exported NFS filesystems, which allows remote attack…CVE-2005-3623Linux · 3.4% likely

    CWE-862

16. The icmp_check_sysrq function in net/ipv4/icmp.c in the kernel.org projects/rt patches for the Linux kernel, as used in the kernel-rt package before 3.10.0-327.22.1 in Red Hat Ent…CVE-2016-3707Linux · 3.4% likely

    CWE-284

17. The capabilities implementation in the Linux kernel before 3.14.8 does not properly consider that namespaces are inapplicable to inodes, which allows local users to bypass intende…CVE-2014-4014Linux · 3.3% likely

    CWE-264

18. The do_exit function in kernel/exit.c in the Linux kernel before 2.6.36.2 does not properly handle a KERNEL_DS get_fs value, which allows local users to bypass intended access_ok…CVE-2010-4258Linux · 2.7% likely

    CWE-269

19. net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds write. This is related to nf_tables_offl…CVE-2022-25636Linux · 2.6% likely

    CWE-269

20. The rose_rt_ioctl function in rose_route.c for Radionet Open Source Environment (ROSE) in Linux 2.6 kernels before 2.6.12, and 2.4 before 2.4.29, does not properly verify the ndig…CVE-2005-3273Linux · 2.6% likely

    CWE-264

21. The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) in determining the memory access available to CPL3 code, which allows gues…CVE-2010-0298Linux · 2.4% likely

    CWE-264

22. The handle_dr function in arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 2.6.31.1 does not properly verify the Current Privilege Level (CPL) before accessing a…CVE-2009-3722Linux · 2.3% likely

    CWE-264

23. The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which allows local users to gain privileges by placing a custom AC…CVE-2010-4347Linux · 2.2% likely

    CWE-269

24. A missing authorization check in the fscrypt_process_policy function in fs/crypto/policy.c in the ext4 and f2fs filesystem encryption support in the Linux kernel before 4.7.4 allo…CVE-2016-10318Linux · 2.2% likely

    CWE-264

25. fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a di…CVE-2008-4210Linux · 2.2% likely

    CWE-264

26. The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socke…CVE-2014-4943Linux · 2.1% likely

    CWE-269

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.