Vulnerabilities for Linux kernel (Linux) - CXSECURITY.COM

Vulnerabilities for 'Linux kernel'

2022-05-16

CVE-2022-1679

CWE-416

2022-05-12

CVE-2022-30594

CWE-276

The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag.

2022-05-05

CVE-2022-1516

CWE-416

2022-05-02

CVE-2022-29968

CWE-909

An issue was discovered in the Linux kernel through 5.17.5. io_rw_init_file in fs/io_uring.c lacks initialization of kiocb->private.

2022-04-18

CVE-2011-4917

NVD-CWE-noinfo

In the Linux kernel through 3.1 there is an information disclosure issue via /proc/stat.

2022-04-13

CVE-2022-1280

CWE-416

A use-after-free vulnerability was found in drm_lease_held in drivers/gpu/drm/drm_lease.c in the Linux kernel due to a race problem. This flaw allows a local user privilege attacker to cause a denial of service (DoS) or a kernel information leak.

CVE-2022-29156

CWE-415

drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrs_clt_dev_release.

2022-04-11

CVE-2022-28893

CWE-416

The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring that sockets are in the intended state.

2022-04-08

CVE-2022-28796

CWE-416

jbd2_journal_wait_updates in fs/jbd2/transaction.c in the Linux kernel before 5.17.1 has a use-after-free caused by a transaction_t race condition.

2022-04-03

CVE-2022-28388

CWE-415

usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a double free.

Copyright 2022, cxsecurity.com