= 6)

Cpe Name:cpe:/o:linux:linux_kernel:2.4.7

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2019-16995	772	DoS	2019-09-30	2019-10-04	7.8	None	Remote	Low	Not required	None	None	Complete
In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d.
2	CVE-2019-16994	772	DoS	2019-09-30	2019-10-04	7.8	None	Remote	Low	Not required	None	None	Complete
In the Linux kernel before 5.0, a memory leak exists in sit_init_net() in net/ipv6/sit.c when register_netdev() fails to register sitn->fb_tunnel_dev, which may cause denial of service, aka CID-07f12b26e21a.
3	CVE-2019-15927	125		2019-09-04	2019-09-24	7.2	None	Local	Low	Not required	Complete	Complete	Complete
An issue was discovered in the Linux kernel before 4.20.2. An out-of-bounds access exists in the function build_audio_procunit in the file sound/usb/mixer.c.
4	CVE-2019-15926	125		2019-09-04	2019-09-14	9.4	None	Remote	Low	Not required	Complete	None	Complete
An issue was discovered in the Linux kernel before 5.2.3. Out of bounds access exists in the functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx in the file drivers/net/wireless/ath/ath6kl/wmi.c.
5	CVE-2019-15925	125		2019-09-04	2019-10-04	7.2	None	Local	Low	Not required	Complete	Complete	Complete
An issue was discovered in the Linux kernel before 5.2.3. An out of bounds access exists in the function hclge_tm_schd_mode_vnet_base_cfg in the file drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c.
6	CVE-2019-15920	416		2019-09-04	2019-09-24	7.2	None	Local	Low	Not required	Complete	Complete	Complete
An issue was discovered in the Linux kernel before 5.0.10. SMB2_read in fs/cifs/smb2pdu.c has a use-after-free. NOTE: this was not fixed correctly in 5.0.10; see the 5.0.11 ChangeLog, which documents a memory leak.
7	CVE-2019-15919	416		2019-09-04	2019-09-24	7.2	None	Local	Low	Not required	Complete	Complete	Complete
An issue was discovered in the Linux kernel before 5.0.10. SMB2_write in fs/cifs/smb2pdu.c has a use-after-free.
8	CVE-2019-15918	125		2019-09-04	2019-10-04	7.2	None	Local	Low	Not required	Complete	Complete	Complete
An issue was discovered in the Linux kernel before 5.0.10. SMB2_negotiate in fs/cifs/smb2pdu.c has an out-of-bounds read because data structures are incompletely updated after a change from smb30 to smb21.
9	CVE-2019-15917	416		2019-09-04	2019-09-24	7.2	None	Local	Low	Not required	Complete	Complete	Complete
An issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when hci_uart_register_dev() fails in hci_uart_set_proto() in drivers/bluetooth/hci_ldisc.c.
10	CVE-2019-15916	119	DoS Overflow	2019-09-04	2019-10-04	7.8	None	Remote	Low	Not required	None	None	Complete
An issue was discovered in the Linux kernel before 5.0.1. There is a memory leak in register_queue_kobjects() in net/core/net-sysfs.c, which will cause denial of service.
11	CVE-2019-15807	399	DoS	2019-08-29	2019-09-14	7.8	None	Remote	Low	Not required	None	None	Complete
In the Linux kernel before 5.1.13, there is a memory leak in drivers/scsi/libsas/sas_expander.c when SAS expander discovery fails. This will cause a BUG and denial of service.
12	CVE-2019-15666	125	DoS	2019-08-27	2019-09-14	7.8	None	Remote	Low	Not required	None	None	Complete
An issue was discovered in the Linux kernel before 5.0.19. There is an out-of-bounds array access in __xfrm_policy_unlink, which will cause denial of service, because verify_newpolicy_info in net/xfrm/xfrm_user.c mishandles directory validation.
13	CVE-2019-15292	416		2019-08-21	2019-09-02	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
An issue was discovered in the Linux kernel before 5.0.9. There is a use-after-free in atalk_proc_exit, related to net/appletalk/atalk_proc.c, net/appletalk/ddp.c, and net/appletalk/sysctl_net_atalk.c.
14	CVE-2019-14816	120	DoS Exec Code Overflow	2019-09-20	2019-09-24	7.2	None	Local	Low	Not required	Complete	Complete	Complete
There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
15	CVE-2019-14814	120	DoS Exec Code Overflow	2019-09-20	2019-09-24	7.2	None	Local	Low	Not required	Complete	Complete	Complete
There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
16	CVE-2019-13272	264		2019-07-17	2019-07-25	7.2	None	Local	Low	Not required	Complete	Complete	Complete
In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). One contributing factor is an object lifetime issue (which can also cause a panic). Another contributing factor is incorrect marking of a ptrace relationship as privileged, which is exploitable through (for example) Polkit's pkexec helper with PTRACE_TRACEME. NOTE: SELinux deny_ptrace might be a usable workaround in some environments.
17	CVE-2019-12817	119	Overflow	2019-06-25	2019-06-28	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug where unrelated processes may be able to read/write to one another's virtual memory under certain conditions via an mmap above 512 TB. Only a subset of powerpc systems are affected.
18	CVE-2019-11815	362		2019-05-08	2019-06-07	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related to net namespace cleanup.
19	CVE-2019-11811	416		2019-05-07	2019-05-31	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
An issue was discovered in the Linux kernel before 5.0.4. There is a use-after-free upon attempted read access to /proc/ioports after the ipmi_si module is removed, related to drivers/char/ipmi/ipmi_si_intf.c, drivers/char/ipmi/ipmi_si_mem_io.c, and drivers/char/ipmi/ipmi_si_port_io.c.
20	CVE-2019-11810	476	DoS	2019-05-07	2019-06-07	7.8	None	Remote	Low	Not required	None	None	Complete
An issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur when megasas_create_frame_pool() fails in megasas_alloc_cmds() in drivers/scsi/megaraid/megaraid_sas_base.c. This causes a Denial of Service, related to a use-after-free.
21	CVE-2019-11599	362	DoS +Info	2019-04-29	2019-05-28	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c.
22	CVE-2019-11486	362		2019-04-23	2019-06-14	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
The Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel before 5.0.8 has multiple race conditions.
23	CVE-2019-11477	190	DoS Overflow	2019-06-18	2019-06-20	7.8	None	Remote	Low	Not required	None	None	Complete
Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff.
24	CVE-2019-9003	416	Exec Code	2019-02-22	2019-05-16	7.8	None	Remote	Low	Not required	None	None	Complete
In the Linux kernel before 4.20.5, attackers can trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for certain simultaneous execution of the code, as demonstrated by a "service ipmievd restart" loop.
25	CVE-2019-8956	416		2019-04-01	2019-06-14	7.2	None	Local	Low	Not required	Complete	Complete	Complete
In the Linux Kernel before versions 4.20.8 and 4.19.21 a use-after-free error in the "sctp_sendmsg()" function (net/sctp/socket.c) when handling SCTP_SENDALL flag can be exploited to corrupt memory.
26	CVE-2019-6974	362		2019-02-15	2019-09-20	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free.
27	CVE-2019-3900	400		2019-04-25	2019-05-17	6.8	None	Remote	Low	Single system	None	None	Complete
An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could use this flaw to stall the vhost_net kernel thread, resulting in a DoS scenario.
28	CVE-2018-20961	415	DoS	2019-08-07	2019-08-27	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
In the Linux kernel before 4.16.4, a double free vulnerability in the f_midi_set_alt function of drivers/usb/gadget/function/f_midi.c in the f_midi driver may allow attackers to cause a denial of service or possibly have unspecified other impact.
29	CVE-2018-20836	416		2019-05-07	2019-05-08	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free.
30	CVE-2018-20784	400	DoS	2019-02-22	2019-07-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows attackers to cause a denial of service (infinite loop in update_blocked_averages) or possibly have unspecified other impact by inducing a high load.
31	CVE-2018-20169	400		2018-12-17	2019-08-13	7.2	None	Local	Low	Not required	Complete	Complete	Complete
An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core/usb.c.
32	CVE-2018-16882	416	+Priv	2019-01-03	2019-10-09	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A use-after-free issue was found in the way the Linux kernel's KVM hypervisor processed posted interrupts when nested(=1) virtualization is enabled. In nested_get_vmcs12_pages(), in case of an error while processing posted interrupt address, it unmaps the 'pi_desc_page' without resetting 'pi_desc' descriptor address, which is later used in pi_test_and_clear_on(). A guest user/process could use this flaw to crash the host kernel resulting in DoS or potentially gain privileged access to a system. Kernel versions before 4.14.91 and before 4.19.13 are vulnerable.
33	CVE-2018-16276	20		2018-08-31	2019-01-15	7.2	None	Local	Low	Not required	Complete	Complete	Complete
An issue was discovered in yurex_read in drivers/usb/misc/yurex.c in the Linux kernel before 4.17.7. Local attackers could use user access read/writes with incorrect bounds checking in the yurex USB driver to crash the kernel or potentially escalate privileges.
34	CVE-2018-14619	20		2018-08-30	2019-10-09	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The "null skcipher" was being dropped when each af_alg_ctx was freed instead of when the aead_tfm was freed. This can cause the null skcipher to be freed while it is still in use leading to a local user being able to crash the system or possibly escalate privileges.
35	CVE-2018-13406	190	Overflow	2018-07-06	2018-08-29	7.2	None	Local	Low	Not required	Complete	Complete	Complete
An integer overflow in the uvesafb_setcmap function in drivers/video/fbdev/uvesafb.c in the Linux kernel before 4.17.4 could result in local attackers being able to crash the kernel or potentially elevate privileges because kmalloc_array is not used.
36	CVE-2018-10880	787	DoS	2018-07-25	2019-04-01	7.1	None	Remote	Medium	Not required	None	None	Complete
Linux kernel is vulnerable to a stack-out-of-bounds write in the ext4 filesystem code when mounting and writing to a crafted ext4 image in ext4_update_inline_data(). An attacker could use this to cause a system crash and a denial of service.
37	CVE-2018-10879	416	DoS	2018-07-26	2019-10-09	6.1	None	Local	Low	Not required	Partial	Partial	Complete
A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause a use-after-free in ext4_xattr_set_entry function and a denial of service or unspecified other impact may occur by renaming a file in a crafted ext4 filesystem image.
38	CVE-2018-10878	787	DoS	2018-07-26	2019-10-09	6.1	None	Local	Low	Not required	Partial	Partial	Complete
A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write and a denial of service or unspecified other impact is possible by mounting and operating a crafted ext4 filesystem image.
39	CVE-2018-10675	416	DoS	2018-05-02	2019-04-16	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted system calls.
40	CVE-2018-7480	415	DoS	2018-02-25	2018-05-23	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The blkcg_init_queue function in block/blk-cgroup.c in the Linux kernel before 4.11 allows local users to cause a denial of service (double free) or possibly have unspecified other impact by triggering a creation failure.
41	CVE-2018-6555	416	DoS	2018-09-04	2019-10-09	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The irda_setsockopt function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linux kernel before 4.17 allows local users to cause a denial of service (ias_object use-after-free and system crash) or possibly have unspecified other impact via an AF_IRDA socket.
42	CVE-2017-18595	415		2019-09-04	2019-10-10	7.2	None	Local	Low	Not required	Complete	Complete	Complete
An issue was discovered in the Linux kernel before 4.14.11. A double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c.
43	CVE-2017-18509	20	Exec Code	2019-08-13	2019-09-26	7.2	None	Local	Low	Not required	Complete	Complete	Complete
An issue was discovered in net/ipv6/ip6mr.c in the Linux kernel before 4.11. By setting a specific socket option, an attacker can control a pointer in kernel land and cause an inet_csk_listen_stop general protection fault, or potentially execute arbitrary code under certain circumstances. The issue can be triggered as root (e.g., inside a default LXC container or with the CAP_NET_ADMIN capability) or after namespace unsharing. This occurs because sk_type and protocol are not checked in the appropriate part of the ip6_mroute_* functions. NOTE: this affects Linux distributions that use 4.9.x longterm kernels before 4.9.187.
44	CVE-2017-18379	119	Overflow	2019-07-27	2019-10-02	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
In the Linux kernel before 4.14, an out of boundary access happened in drivers/nvme/target/fc.c.
45	CVE-2017-18218	416	DoS	2018-03-05	2018-05-02	7.2	None	Local	Low	Not required	Complete	Complete	Complete
In drivers/net/ethernet/hisilicon/hns/hns_enet.c in the Linux kernel before 4.13, local users can cause a denial of service (use-after-free and BUG) or possibly have unspecified other impact by leveraging differences in skb handling between hns_nic_net_xmit_hw and hns_nic_net_xmit.
46	CVE-2017-18202	416	DoS	2018-02-27	2018-09-26	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
The __oom_reap_task_mm function in mm/oom_kill.c in the Linux kernel before 4.14.4 mishandles gather operations, which allows attackers to cause a denial of service (TLB entry leak or use-after-free) or possibly have unspecified other impact by triggering a copy_to_user call within a certain time window.
47	CVE-2017-18174	415		2018-02-11	2018-12-21	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
In the Linux kernel before 4.7, the amd_gpio_remove function in drivers/pinctrl/pinctrl-amd.c calls the pinctrl_unregister function, leading to a double free.
48	CVE-2017-18079	476	DoS	2018-01-29	2019-01-19	7.2	None	Local	Low	Not required	Complete	Complete	Complete
drivers/input/serio/i8042.c in the Linux kernel before 4.12.4 allows attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact because the port->exists value can change after it is validated.
49	CVE-2017-18075	763	DoS	2018-01-24	2019-10-02	7.2	None	Local	Low	Not required	Complete	Complete	Complete
crypto/pcrypt.c in the Linux kernel before 4.14.13 mishandles freeing instances, allowing a local user able to access the AF_ALG-based AEAD interface (CONFIG_CRYPTO_USER_API_AEAD) and pcrypt (CONFIG_CRYPTO_PCRYPT) to cause a denial of service (kfree of an incorrect pointer) or possibly have unspecified other impact by executing a crafted sequence of system calls.
50	CVE-2017-17806	787	Overflow	2017-12-20	2019-10-02	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a local attacker able to use the AF_ALG-based hash interface (CONFIG_CRYPTO_USER_API_HASH) and the SHA-3 hash algorithm (CONFIG_CRYPTO_SHA3) to cause a kernel stack buffer overflow by executing a crafted sequence of system calls that encounter a missing SHA-3 initialization.

Total number of vulnerabilities : 123 Page : 1 (This Page)2 3