Linux Kernel

Every one of the 1,922 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACECVE-2021-22555Linux · CVSS 8.3 · 79% likelycovered by CyberSIXT

   CWE-787

2. Use after free in SNDRV_CTL_IOCTL_ELEM in Linux KernelCVE-2023-0266Linux · CVSS 7.9 · 2.6% likely

   CWE-416

3. Integer overflow in TCP_SKB_CB(skb)->tcp_gso_segsCVE-2019-11477Linux · CVSS 7.5 · 99% likely

   CWE-190

4. SACK can cause extensive memory use via fragmented resend queueCVE-2019-11478Linux · CVSS 5.3 · 94% likely

   CWE-770

5. Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger…CVE-2019-11479Linux · CVSS 5.3 · 91% likely

   CWE-405

6. Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of…CVE-2018-5390Linux · 72% likely

   CWE-400

7. A bug affects the Linux kernel’s ksmbd NTLMv2 authentication and is known to crash the OS immediately in Linux-based systems.CVE-2023-0210Linux · 72% likely

   CWE-122

8. An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2misc.c has an out-of-bounds read and OOPS for SMB2_TREE_CONNECT.CVE-2022-47938Linux · CVSS 6.5 · 60% likely

   CWE-125

9. An issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16. The Transparent Inter-Process Communication (TIPC) functionality allows remote attackers to exploi…CVE-2021-43267Linux · 58% likely

   CWE-1284

10. The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-…CVE-2017-18017Linux · 53% likely

    CWE-416

11. An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c has a use-after-free and OOPS for SMB2_TREE_DISCONNECT.CVE-2022-47939Linux · CVSS 9.8 · 49% likely

    CWE-416

12. An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5. There is an integer signedness error, leading to a buffer overflow and remote code execution v…CVE-2023-44466Linux · 45% likely

    CWE-120

13. The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file creation in the upper…CVE-2015-1328Linux · 38% likely

    CWE-264

14. The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges via a recvmmsg system cal…CVE-2014-0038Linux · 35% likely

    CWE-20

15. The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory corruption) or possibly have unspecified…CVE-2017-16995Linux · 30% likely

    CWE-119

16. Linux kernel eBPF bitwise ops ALU32 bounds trackingCVE-2021-3490Linux · CVSS 7.8 · 27% likely

    CWE-787

17. The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or po…CVE-2016-3955Linux · 25% likely

    CWE-119

18. The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which allows remote attackers to cau…CVE-2017-5972Linux · 24% likely

    CWE-400

19. Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involvin…CVE-2016-7117Linux · 24% likely

    CWE-19

20. The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended acces…CVE-2015-8660Linux · 22% likely

    CWE-264

21. The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remote attackers to cause a denial of servic…CVE-2010-1173Linux · 21% likely

    CWE-20

22. Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE __ip_append_data() calls ip_ufo_append_data() to append. Ho…CVE-2017-1000112Linux · 21% likely

    CWE-362

23. The igmp_heard_query function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a denial of service (divide-by-zero error and panic) via IGMP pa…CVE-2012-0207Linux · 20% likely

    CWE-369

24. net/core/net_namespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of creation and cleanup of network namespaces, which makes it easier for remot…CVE-2011-2189Linux · 18% likely

    CWE-400

25. The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a d…CVE-2017-7308Linux · 18% likely

    CWE-681

26. The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unl…CVE-2010-2943Linux · 17% likely

    CWE-200

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.