Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2022-25265

kernel: Executable Space Protection Bypass

In the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they were built in approximately 2003 (e.g., with GCC 3.2.2 and Linux kernel 2.4.20). This can cause execution of bytes located in supposedly non-executable regions of a file.

CVSS 3.1 · 7.8 High EPSS 1.1% KEV · Not listed
Vendors
Linux Netapp Redhat
Products
Linux Kernel Baseboard Management Controller Firmware H300e and 17 more
CVE-2021-26708

kernel: race conditions caused by wrong locking in net/vmw_vsock/af_vsock.c

A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOCK implementation are caused by wrong locking in net/vmw_vsock/af_vsock.c. The race conditions were implicitly introduced in the commits that added VSOCK multi-transport support.

CVSS 3.1 · 7.0 High EPSS 1.6% KEV · Not listed
Vendors
Linux Netapp Redhat
Products
Linux Kernel 500f A250 and 10 more
CVE-2019-15902

kernel: backporting error in ptrace_get_debugreg()

A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream "x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()" commit reintroduced the Spectre vulnerability that it aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered) code lines were swapped.

CVSS 3.1 · 5.6 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Linux Netapp and 1 more
Products
Debian Linux Linux Kernel Active Iq Performance Analytics Services and 4 more