Skip to content

Linux · weakness class

File and Path Handling

10 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.

  1. In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or wr…CVE-2020-28374Linux · 6.6% likely

    CWE-22

  2. fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a subdirectory of a filesystem, allows remote attackers to traverse to other parts of the file…CVE-2021-3178Linux · 2.4% likely

    CWE-22

  3. An issue was discovered in fs/io_uring.c in the Linux kernel before 5.6. It unsafely handles the root directory during path lookups, and thus a process inside a mount namespace ca…CVE-2020-29373Linux · 0.5% likely

    CWE-22

  4. The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allow…CVE-2015-1350Linux · 0.5% likely

    CWE-552

  5. The mountpoint_last function in fs/namei.c in the Linux kernel before 3.15.8 does not properly maintain a certain reference count during attempts to use the umount system call in…CVE-2014-5045Linux · 0.5% likely

    CWE-59

  6. cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted direct…CVE-2007-4998Linux · 0.3% likely

    CWE-59

  7. Linux kernel 2.6, when using vservers, allows local users to access resources of other vservers via a symlink attack in /proc.CVE-2008-0163Linux · 0.3% likely

    CWE-59

  8. Squashfs: sanity check symbolic link sizeCVE-2024-46744Linux · 0.3% likely

    CWE-59

  9. firmware_loader: Block path traversalCVE-2024-47742Linux · CVSS 7.8 · 0.3% likely

    CWE-22

  10. SUNRPC: Fix a suspicious RCU usage warningCVE-2023-52623Linux · CVSS 7.8 · 0.3% likely

    CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

Updated AboutDevelopersSign in