kernel

Every one of the 395 is a mark on the map. Named now: 1 to 26, most at risk first.

1. A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux ke…CVE-2022-0847Linux · CVSS 7.8 · 93% likelycovered by CyberSIXT

   CWE-665Sea Turtle

2. Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature…CVE-2016-5195Linux · CVSS 7 · 84% likely

   CWE-362

3. In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows…CVE-2019-13272Linux · CVSS 7.8 · 52% likelycovered by CyberSIXT
4. The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a craf…CVE-2013-2094Linux · CVSS 8.4 · 48% likely

   CWE-189

5. The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers to read…CVE-2013-6282Linux · CVSS 8.8 · 40% likely

   CWE-20

6. The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain pri…CVE-2014-3153Linux · CVSS 7.8 · 37% likely
7. Use-after-free in Linux kernel's netfilter: nf_tables componentCVE-2024-1086Linux · CVSS 7.8 · 28% likely

   CWE-416

8. A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters…CVE-2022-0185Linux · CVSS 8.4 · 25% likely

   CWE-190

9. The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local user…CVE-2014-0196Linux · CVSS 5.5 · 20% likely

   CWE-362

10. The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addre…CVE-2010-3904Linux · CVSS 7.8 · 16% likely

    CWE-1284

11. Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (committed on April 14, 2015). This ke…CVE-2017-1000253Linux · CVSS 7.8 · 11% likely

    CWE-119

12. An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially a…CVE-2022-0995Linux · CVSS 7.8 · 8.9% likelycovered by CyberSIXT

    CWE-7875 articles

13. A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a…CVE-2023-0386Linux · CVSS 7.8 · 7.9% likely

    CWE-282

14. A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the…CVE-2022-0492Linux · CVSS 7.8 · 5.5% likelycovered by CyberSIXT

    CWE-287

15. Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows…CVE-2013-2596Linux · CVSS 7.8 · 3.2% likely

    CWE-190

16. A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes i…CVE-2022-0435Linux · 68% likely

    CWE-787

17. The Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packetsCVE-2018-5391Linux · 32% likely

    CWE-400

18. A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel. This issue could occur when a…CVE-2023-1380Linux · CVSS 7.1 · 16% likely

    CWE-125

19. Crash due to a null pointer dereference in the dn_nsp_send functionCVE-2023-3338Linux · CVSS 6.5 · 8.5% likely

    CWE-476

20. A flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file onto a process's memory containing command line arguments (or environment strings)…CVE-2018-1120Linux · CVSS 2.8 · 7.1% likely

    CWE-122

21. A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP…CVE-2021-20322Linux · 6.9% likely

    CWE-330

22. A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c might lead to memory corrupt…CVE-2019-10126Linux · CVSS 5.9 · 6.8% likely

    CWE-122

23. A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network.CVE-2019-3846Linux · CVSS 8 · 5.9% likely

    CWE-122

24. Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial of service (kernel memory corruption an…CVE-2009-1389Linux · 5.5% likely

    CWE-119

25. A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for further use in traditional network attacks.CVE-2021-3773Linux · 5.3% likely

    CWE-200

26. Linux Kernel IPv4 fib_semantics.c fib_nh_match out-of-boundsCVE-2022-3435Linux · CVSS 4.3 · 5.2% likely

    CWE-125

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.