KE
Operating System
Kernel
On CISA KEVExploited in the wildRansomware-linked
15,220
CVEs
34
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 279High 217Medium 4Low 0
Watch
Add Kernel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-42719 | 8.8 | Oct 13 | A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN… Affected: 5.2 before 5.4.219; 5.5 before 5.10.149; 5.11 before 5.15.74; 5.16 before 5.19.16; 6.0 before 6.0.2 |
| CVE-2022-1043 | 8.8 | Aug 29 | A flaw was found in the Linux kernel’s io_uring implementation Affected: 5.10.51 before 5.10.61; 5.11 before 5.13.13 |
| CVE-2022-0435 | 8.8 | Mar 25 | A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes… Affected: 4.8 before 4.9.301; 4.10 before 4.14.266; 4.15 before 4.19.229; 4.20 before 5.4.179; 5.5 before 5.10.100; 5.11 before 5.15.23; +5 more |
| CVE-2022-27223 | 8.8 | Mar 16 | In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and might be manipulated by the host for out-of-array access Affected: 3.18 before 4.9.304; 4.10 before 4.14.269; 4.15 before 4.19.232; 4.20 before 5.4.182; 5.5 before 5.10.103; 5.11 before 5.15.26; +1 more |
| CVE-2021-3656 | 8.8 | Mar 4 | A flaw was found in the KVM's AMD code for supporting SVM nested virtualization Affected: 4.13 before 4.14.245; 4.15 before 4.19.205; 4.20 before 5.4.142; 5.5 before 5.10.60; 5.11 before 5.13.12; 5.14; +6 more |
| CVE-2021-4093 | 8.8 | Feb 18 | A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State (SEV-ES) Affected: 5.11 before 5.14.16 |
| CVE-2021-4154 | 8.8 | Feb 4 | A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser Affected: 5.1 before 5.4.134; 5.5 before 5.10.52; 5.11 before 5.12.19; 5.13 before 5.13.4; 5.14 |
| CVE-2017-5123 | 8.8 | Nov 2 | Insufficient data validation in waitid allowed an user to escape sandboxes on Linux Affected: 4.13 before 4.13.7 |
| CVE-2021-3653 | 8.8 | Sep 29 | A flaw was found in the KVM's AMD code for supporting SVM nested virtualization Affected: 2.6.30 before 4.4.282; 4.5 before 4.9.281; 4.10 before 4.14.245; 4.15 before 4.19.205; 4.20 before 5.4.142; 5.5 before 5.10.60; +7 more |
| CVE-2021-3491 | 8.8 | Jun 4 | The io_uring subsystem in the Linux kernel allowed the MAX_RW_COUNT limit to be bypassed in the PROVIDE_BUFFERS operation, which led to negative values being usedin mem_rw when… Affected: 5.7 before 5.10.37; 5.11 before 5.11.21; 5.12 before 5.12.4 |
| CVE-2021-28660 | 8.8 | Mar 17 | rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the ->ssid[] array Affected: 3.12 before 4.4.262; 4.5 before 4.9.262; 4.10 before 4.14.226; 4.15 before 4.19.181; 4.20 before 5.4.106; 5.5 before 5.10.24; +1 more |
| CVE-2020-29569 | 8.8 | Dec 15 | An issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x Affected: 4.1.44 before 4.2; 4.4.80 before 4.4.254; 4.9.36 before 4.9.249; 4.11.9 before 4.12; 4.12 before 4.14.213; 4.15 before 4.19.164; +2 more |
| CVE-2020-12351 | 8.8 | Nov 23 | Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access Affected: 4.7.7 before 4.9.240; 4.10 before 4.14.202; 4.15 before 4.19.152; 4.20 before 5.4.72; 5.5 before 5.8.16; 5.9.0; +7 more |
| CVE-2019-15793 | 8.8 | Apr 24 | In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, several locations which shift ids translate user/group ids before performing… Affected: 5.0; 5.3 |
| CVE-2019-10220 | 8.8 | Nov 27 | Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists Affected: 2.6.12 before 3.16.81; 3.17 before 4.4.208; 4.5 before 4.9.208; 4.10 before 4.14.162; 4.15 before 4.19.93; 4.20 before 5.3.8 |
| CVE-2019-17666 | 8.8 | Oct 17 | rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bound check, leading to a buffer overflow Affected: before 3.16.77; 3.17 before 4.4.199; 4.5 before 4.9.199; 4.10 before 4.14.152; 4.15 before 4.19.82; 4.20 before 5.2; +1 more |
| CVE-2019-14821 | 8.8 | Sep 19 | An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation Affected: 2.6.27 through 3.15.10; 3.16 before 3.16.74; 4.4 before 4.4.194; 4.9 before 4.9.194; 4.14 before 4.14.146; 4.19 before 4.19.75; +3 more |
The 500 most important CVEs for this product (exploited first, then by severity)