Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 22

Export CSV
CVE-2019-10125

kernel: use-after-free in aio_poll() in fs/aio.c

An issue was discovered in aio_poll() in fs/aio.c in the Linux kernel through 5.0.4. A file may be released by aio_poll_wake() if an expected event is triggered immediately (e.g., by the close of a pair of pipes) after the return of vfs_poll(), and this will cause a use-after-free.

CVSS 3.1 · 9.8 Critical EPSS 5.3% KEV · Not listed
Vendors
Linux Netapp
Products
Linux Kernel Active Iq Unified Manager Cn1610 and 4 more
CVE-2018-20669

kernel: missing access_ok() checks in i915_gem_execbuffer2_ioctl() results in priviledge escalation

An issue where a provided address with access_ok() is not checked was discovered in i915_gem_execbuffer2_ioctl in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Linux kernel through 4.19.13. A local attacker can craft a malicious IOCTL function call to overwrite arbitrary kernel memory, resulting in a Denial of Service or privilege escalation.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Netapp
Products
Ubuntu Linux Linux Kernel Cn1610 and 4 more