kernel

Every one of the 14 is a mark on the map. Named now: 1 to 14, most at risk first.

1. An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use th…CVE-2018-14634The Linux Foundation · CVSS 7.8 · 15% likelycovered by CyberSIXT

   CWE-190

2. A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in the Linux kernel in a way an authentication request from an ISCSI initiator is proc…CVE-2018-14633The Linux Foundation · CVSS 7 · 8.7% likely

   CWE-121

3. A security flaw was found in the ip_frag_reasm() function in net/ipv4/ip_fragment.c in the Linux kernel from 4.19-rc1 to 4.19-rc3 inclusive, which can cause a later system crash i…CVE-2018-14641The Linux Foundation · CVSS 6.5 · 2.9% likely

   CWE-456

4. The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x…CVE-2019-3874The Linux Foundation · CVSS 5.3 · 1.8% likely

   CWE-400

5. A flaw was found in the Linux kernel's handle_rx() function in the [vhost_net] driver. A malicious virtual guest, under specific conditions, can trigger an out-of-bounds write in…CVE-2018-16880The Linux Foundation · CVSS 5.9 · 0.6% likely

   CWE-787

6. A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-…CVE-2019-3882The Linux Foundation · CVSS 4.7 · 0.5% likely

   CWE-770

7. A flaw was found in the Linux kernel in the function hid_debug_events_read() in drivers/hid/hid-debug.c file which may enter an infinite loop with certain parameters passed from a…CVE-2019-3819The Linux Foundation · CVSS 4.2 · 0.5% likely

   CWE-835

8. A flaw was found in the Linux kernel that allows the userspace to call memcpy_fromiovecend() and similar functions with a zero offset and buffer length which causes the read beyon…CVE-2018-16885The Linux Foundation · CVSS 4.7 · 0.4% likely

   CWE-125

9. A double-free can happen in idr_remove_all() in lib/idr.c in the Linux kernel 2.6 branch. An unprivileged local attacker can use this flaw for a privilege escalation or for a syst…CVE-2019-3896The Linux Foundation · CVSS 7 · 0.4% likely

   CWE-416

10. A use-after-free issue was found in the way the Linux kernel's KVM hypervisor processed posted interrupts when nested(=1) virtualization is enabled. In nested_get_vmcs12_pages(),…CVE-2018-16882The Linux Foundation · CVSS 6.1 · 0.4% likely

    CWE-416

11. A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access with nested(=1) virtualization enabled. In that, L1 guest could access L0's APIC…CVE-2019-3887The Linux Foundation · CVSS 6.7 · 0.4% likely

    CWE-863

12. A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single netlink message. The…CVE-2020-10751The Linux Foundation · CVSS 6.1 · 0.3% likely

    CWE-349

13. A race condition in perf_event_open() allows local attackers to leak sensitive data from setuid programs. As no relevant locks (in particular the cred_guard_mutex) are held during…CVE-2019-3901The Linux Foundation · CVSS 5.6 · 0.3% likely

    CWE-667

14. It was found that the net_dma code in tcp_recvmsg() in the 2.6.32 kernel as shipped in RHEL6 is thread-unsafe. So an unprivileged multi-threaded userspace application calling recv…CVE-2019-3837The Linux Foundation · CVSS 6.1 · 0.2% likely

    CWE-362

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.