Skip to content

Linux · weakness class

Information Disclosure

233 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
2

Every one of the 233 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unl…CVE-2010-2943Linux · 17% likely

    CWE-200

  2. net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessio…CVE-2016-5696Linux · 15% likely

    CWE-200

  3. The atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which allows remote attackers to obta…CVE-2016-2117Linux · 6.4% likely

    CWE-200

  4. The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obtain sensitiv…CVE-2016-5244Linux · 5.5% likely

    CWE-200

  5. A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for further use in traditional network attacks.CVE-2021-3773Linux · 5.3% likely

    CWE-200

  6. The llc_cmsg_rcv function in net/llc/af_llc.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows attackers to obtain sensitive information…CVE-2016-4485Linux · 4.7% likely

    CWE-200

  7. The ieee80211_fragment function in net/mac80211/tx.c in the Linux kernel before 3.13.5 does not properly maintain a certain tail pointer, which allows remote attackers to obtain s…CVE-2014-8709Linux · 4.5% likely

    CWE-200

  8. The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing of incoming L2CAP commands - ConfigRequest, and ConfigResponse messages. This info…CVE-2017-1000410Linux · 4.3% likely

    CWE-200

  9. The x25_negotiate_facilities function in net/x25/x25_facilities.c in the Linux kernel before 4.5.5 does not properly initialize a certain data structure, which allows attackers to…CVE-2016-4580Linux · 4.1% likely

    CWE-200

  10. The help function in net/netfilter/nf_nat_irc.c in the Linux kernel before 3.12.8 allows remote attackers to obtain sensitive information from kernel memory by establishing an IRC…CVE-2014-1690Linux · 3.9% likely

    CWE-200

  11. Interpretation conflict in drivers/md/dm-snap-persistent.c in the Linux kernel through 3.11.6 allows remote authenticated users to obtain sensitive information or modify data via…CVE-2013-4299Linux · 3.8% likely

    CWE-200

  12. The net_get_random_once implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors does not perform the intended slow-path…CVE-2014-7284Linux · 3.8% likely

    CWE-200

  13. The Linux kernel, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and determi…CVE-2010-4563Linux · 2.9% likely

    CWE-200

  14. The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.39 on the x86_64 platform allows remote attackers to obtain potentially sensitive information…CVE-2011-1173Linux · 2.6% likely

    CWE-200

  15. In the function sbusfb_ioctl_helper() in drivers/video/fbdev/sbuslib.c in the Linux kernel through 4.15, an integer signedness error allows arbitrary information leakage for the F…CVE-2018-6412Linux · 2.3% likely

    CWE-200

  16. Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote authenticated users to cause a denial of service (memory consumption) via invalid p…CVE-2008-3651Linux · 2.3% likely

    CWE-200

  17. The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information fro…CVE-2017-16994Linux · 2.1% likely

    CWE-200

  18. In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function show_floppy in drivers/…CVE-2018-7273Linux · 1.8% likely

    CWE-200

  19. The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows local users to obtain sensiti…CVE-2016-4486Linux · 1.7% likely

    CWE-200

  20. A flaw was found in the Linux kernels memory deduplication mechanism. Previous work has shown that memory deduplication can be attacked via a local exploitation mechanism. The sam…CVE-2021-3714Linux · 1.7% likely

    CWE-200

  21. The compat_get_timex function in kernel/compat.c in the Linux kernel before 4.16.9 allows local users to obtain sensitive information from kernel memory via adjtimex.CVE-2018-11508Linux · 1.7% likely

    CWE-200

  22. The tty_set_termios_ldisc function in drivers/tty/tty_ldisc.c in the Linux kernel before 4.5 allows local users to obtain sensitive information from kernel memory by reading a tty…CVE-2015-8964Linux · 1.5% likely

    CWE-200

  23. An information leak flaw was found in NFS over RDMA in the net/sunrpc/xprtrdma/rpc_rdma.c in the Linux Kernel. This flaw allows an attacker with normal user privileges to leak ker…CVE-2022-0812Linux · 1.5% likely

    CWE-200

  24. The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local users to obtain potentially sensitive information from kernel st…CVE-2010-4073Linux · 1.5% likely

    CWE-200

  25. arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and other products, does not initialize certain data structures, which allows…CVE-2015-8950Linux · 1.5% likely

    CWE-200

  26. Spectre v2 SMT mitigations problem in Linux kernelCVE-2023-1998Linux · CVSS 5.6 · 1.4% likely

    CWE-1303

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

Updated AboutDevelopersSign in