Skip to content

CVEs

Every published CVE. Without a filter the list holds those exploited, with a public check, or likely to be exploited; pick a year and month or a vendor for the rest.

CVEs: Linux · File and Path Handling
CVEVendor · productExploitationCVSSEPSSPublished
CVE-2020-28374In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or wr…Linux · Linux KernelPossible–6.6%2021-01-13
CVE-2021-3178fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a subdirectory of a filesystem, allows remote attackers to traverse to other parts of the file…Linux · Linux KernelPossible–2.4%2021-01-19
CVE-2020-29373An issue was discovered in fs/io_uring.c in the Linux kernel before 5.6. It unsafely handles the root directory during path lookups, and thus a process inside a mount namespace ca…Linux · Linux KernelUnlikely–0.5%2020-11-28
CVE-2015-1350The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allow…Linux · Linux KernelUnlikely–0.5%2016-05-02
CVE-2014-5045The mountpoint_last function in fs/namei.c in the Linux kernel before 3.15.8 does not properly maintain a certain reference count during attempts to use the umount system call in…Linux · Linux KernelUnlikely–0.5%2014-08-01
CVE-2007-4998cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted direct…Linux · Linux KernelUnlikely–0.3%2008-01-31
CVE-2008-0163Linux kernel 2.6, when using vservers, allows local users to access resources of other vservers via a symlink attack in /proc.Linux · Linux KernelUnlikely–0.3%2008-02-12
CVE-2024-46744Squashfs: sanity check symbolic link sizeLinux · LinuxUnlikely–0.3%2024-09-18
CVE-2024-47742firmware_loader: Block path traversalLinux · LinuxUnlikely7.80.3%2024-10-21
CVE-2023-52623SUNRPC: Fix a suspicious RCU usage warningLinux · LinuxUnlikely7.80.3%2024-03-26

Exploitation: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. Data as of 2026-11-15.