CVE-2019-19054

kernel: A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c allows attackers to cause a DoS

A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed

Vendors

Broadcom Canonical Fedoraproject and 3 more

Products

Brocade Fabric Operating System Firmware Ubuntu Linux Fedora and 16 more

CVE-2018-15473

openssh: User enumeration via malformed packets in authentication requests

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.

CVSS 3.1 · 5.9 Medium EPSS 98.7% KEV · Not listed

Vendors

Canonical Debian Netapp and 4 more

Products

Ubuntu Linux Debian Linux Aff Baseboard Management Controller and 22 more

CVE-2019-2215

kernel: Use-after-free in binder.c

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095

CVSS 3.1 · 7.8 High EPSS 72.1% KEV · Listed

Vendors

Canonical Debian Google and 2 more

Products

Ubuntu Linux Debian Linux Android and 142 more

CVE-2021-26708

kernel: race conditions caused by wrong locking in net/vmw_vsock/af_vsock.c

A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOCK implementation are caused by wrong locking in net/vmw_vsock/af_vsock.c. The race conditions were implicitly introduced in the commits that added VSOCK multi-transport support.

CVSS 3.1 · 7.0 High EPSS 1.6% KEV · Not listed

Vendors

Linux Netapp Redhat

Products

Linux Kernel 500f A250 and 10 more

CVE-2021-20322

kernel: new DNS Cache Poisoning Attack based on ICMP fragment needed packets replies

A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well.

CVSS 3.1 · 7.4 High EPSS 6.9% KEV · Not listed

Vendors

Debian Fedoraproject Linux and 3 more

Products

Debian Linux Fedora Linux Kernel and 31 more

CVE-2020-12659

kernel: xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write which could result in crash and data coruption

An issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) because of a lack of headroom validation.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Linux Netapp Redhat

Products

Linux Kernel Active Iq Unified Manager Aff Baseboard Management Controller and 6 more

CVE-2020-12465

kernel: buffer overflow in mt76_add_fragment function in drivers/net/wireless/mediatek/mt76/dma.c

An array overflow was discovered in mt76_add_fragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10, aka CID-b102f0c522cf. An oversized packet with too many rx fragments can corrupt memory of adjacent pages.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Linux Netapp Redhat

Products

Linux Kernel Active Iq Unified Manager Aff Baseboard Management Controller and 7 more

CVE-2019-19966

kernel: use-after-free in cpia2_exit in drivers/media/usb/cpia2/cpia2_v4l.c

In the Linux kernel before 5.1.6, there is a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that will cause denial of service, aka CID-dea37a972655.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Linux Netapp and 1 more

Products

Debian Linux Linux Kernel Active Iq Unified Manager and 10 more

CVE-2019-19947

kernel: uninitialized memory allocation in drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c leading to information leak

In the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB device in the drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c driver, aka CID-da2311a6385c.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux and 1 more

Products

Ubuntu Linux Debian Linux Linux Kernel and 10 more

CVE-2019-19922

kernel: when cpu.cfs_quota_us is used allows attackers to cause a denial of service against non-cpu-bound applications

kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows attackers to cause a denial of service against non-cpu-bound applications by generating a workload that triggers unwanted slice expiration, aka CID-de53fd7aedb1. (In other words, although this slice expiration would typically be seen with benign workloads, it is possible that an attacker could calculate how many stray requests are required to force an entire Kubernetes cluster into a low-performance state caused by slice expiration, and ensure that a DDoS attack sent that number of stray requests. An attack does not affect the stability of the kernel; it only causes mismanagement of application execution.)

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux and 3 more

Products

Ubuntu Linux Debian Linux Linux Kernel and 12 more

CVE-2019-19063

kernel: Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c allow for a DoS

Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption), aka CID-3f9361695113.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed

Vendors

Broadcom Canonical Fedoraproject and 5 more

Products

Brocade Fabric Operating System Firmware Ubuntu Linux Fedora and 19 more

CVE-2019-19061

kernel: A memory leak in the adis_update_scan_mode_burst() function in drivers/iio/imu/adis_buffer.c allows for a DoS

A memory leak in the adis_update_scan_mode_burst() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-9c0530e898f3.

CVSS 3.1 · 7.5 High EPSS 3.4% KEV · Not listed

Vendors

Broadcom Canonical Linux and 1 more

Products

Brocade Fabric Operating System Firmware Ubuntu Linux Linux Kernel and 14 more

CVE-2019-19060

kernel: A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c allows for a DoS

A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-ab612b1daf41.

CVSS 3.1 · 7.5 High EPSS 3.6% KEV · Not listed

Vendors

Broadcom Canonical Linux and 2 more

Products

Brocade Fabric Operating System Firmware Ubuntu Linux Linux Kernel and 15 more

CVE-2019-19057

kernel: Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c allows for a DoS

Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures, aka CID-d10dcb615c8e.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Broadcom Canonical Debian and 5 more

Products

Brocade Fabric Operating System Firmware Ubuntu Linux Debian Linux and 18 more

CVE-2019-19053

kernel: A memory leak in the rpmsg_eptdev_write_iter() function in drivers/rpmsg/rpmsg_char.c allows attackers to cause a DoS

A memory leak in the rpmsg_eptdev_write_iter() function in drivers/rpmsg/rpmsg_char.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering copy_from_iter_full() failures, aka CID-bbe692e349e2.

CVSS 3.1 · 7.5 High EPSS 3.3% KEV · Not listed

Vendors

Broadcom Canonical Linux and 1 more

Products

Brocade Fabric Operating System Firmware Ubuntu Linux Linux Kernel and 14 more

CVE-2019-19052

kernel: dos in gs_can_open() function in drivers/net/can/usb/gs_usb.c

A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-fb5be6a7b486.

CVSS 3.1 · 7.5 High EPSS 5.2% KEV · Not listed

Vendors

Broadcom Canonical Debian and 4 more

Products

Brocade Fabric Operating System Firmware Ubuntu Linux Debian Linux and 17 more

CVE-2019-19044

kernel: dos in v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c

Two memory leaks in the v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c in the Linux kernel before 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering kcalloc() or v3d_job_init() failures, aka CID-29cd13cfd762.

CVSS 3.1 · 7.5 High EPSS 4.0% KEV · Not listed

Vendors

Broadcom Canonical Linux and 1 more

Products

Brocade Fabric Operating System Firmware Ubuntu Linux Linux Kernel and 14 more