Linux Kernel - 20117 CVEs (Page 143/168)

About “Linux Kernel”

A curated feed of “Linux Kernel”-related CVEs appears below. We currently track 20117 CVEs for this tag (all time). In the last 365 days, 6176 were published. Average CVSS is 6.4 (all time; 6.4 over 365d), and 35% are rated High/Critical (all time). Top CWEs (last 365 days): CWE-476 - NULL Pointer Dereference, CWE-401 - Missing Release of Memory after Effective Lifetime, CWE-416 - Use After Free.

In our taxonomy this topic maps to a MODERATE impact class. Issues here typically affect operating system packages or kernels. Plan reboots or service restarts and coordinate rollouts across fleets. Use the filters below to sort by CVSS, risk and CWE. Each detail page highlights vendor advisories and mitigation tips.

CVEs tagged with this topic. Filters apply to the whole list (loaded from JSON).

CVSS ≥ 0.0

2016-02-10

High

CVE-2016-0972

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe…

CVSS: 8.8 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2016-0971

Heap-based buffer overflow in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK…

CVSS: 8.8 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2016-0970

CVSS: 8.8 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2016-0969

CVSS: 8.8 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2016-0968

CVSS: 8.8 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2016-0967

CVSS: 8.8 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2016-0966

CVSS: 8.8 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2016-0965

CVSS: 8.8 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2016-0964

CVSS: 8.8 CWE: CWE-787 - Out-of-bounds Write View on NVD

2016-02-08

High

CVE-2016-0728

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which allows local users to gain privileges or…

CVSS: 7.8 CWE: N/A View on NVD

Medium

CVE-2016-0723

Race condition in the tty_ioctl function in drivers/tty/tty_io.c in the Linux kernel through 4.4.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (…

CVSS: 6.8 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

Critical

CVE-2015-8787

The nf_nat_redirect_ipv4 function in net/netfilter/nf_nat_redirect.c in the Linux kernel before 4.4 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or…

CVSS: 9.8 CWE: CWE-476 - NULL Pointer Dereference View on NVD

Medium

CVE-2015-8785

The fuse_fill_write_pages function in fs/fuse/file.c in the Linux kernel before 4.4 allows local users to cause a denial of service (infinite loop) via a writev system call that triggers a zero lengt…

CVSS: 6.2 CWE: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop') View on NVD

Medium

CVE-2015-8767

net/sctp/sm_sideeffect.c in the Linux kernel before 4.3 does not properly manage the relationship between a lock and a socket, which allows local users to cause a denial of service (deadlock) via a c…

CVSS: 6.2 CWE: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') View on NVD

High

CVE-2015-8709

kernel/ptrace.c in the Linux kernel through 4.4.1 mishandles uid and gid mappings, which allows local users to gain privileges by establishing a user namespace, waiting for a root process to enter th…

CVSS: 7.0 CWE: CWE-264 View on NVD

Medium

CVE-2015-8575

The sco_sock_bind function in net/bluetooth/sco.c in the Linux kernel before 4.3.4 does not verify an address length, which allows local users to obtain sensitive information from kernel memory and b…

CVSS: 4.0 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

High

CVE-2015-8539

The KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (BUG) via crafted keyctl commands that negatively instantiate a key, related to se…

CVSS: 7.8 CWE: CWE-269 - Improper Privilege Management View on NVD

Medium

CVE-2015-7566

The clie_5_attach function in drivers/usb/serial/visor.c in the Linux kernel through 4.4.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system cras…

CVSS: 4.6 CWE: N/A View on NVD

Medium

CVE-2015-7550

The keyctl_read_key function in security/keys/keyctl.c in the Linux kernel before 4.3.4 does not properly use a semaphore, which allows local users to cause a denial of service (NULL pointer derefere…

CVSS: 5.5 CWE: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') View on NVD

Medium

CVE-2015-7513

arch/x86/kvm/x86.c in the Linux kernel before 4.4 does not reset the PIT counter values during state restoration, which allows guest OS users to cause a denial of service (divide-by-zero error and ho…

CVSS: 6.5 CWE: CWE-369 - Divide By Zero View on NVD

Medium

CVE-2013-4312

The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by sending each descriptor over a UNIX socket before closing it, r…

CVSS: 6.2 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

2016-01-30

High

CVE-2016-1145

Directory traversal vulnerability in WebManager in NEC EXPRESSCLUSTER X through 3.3 11.31 on Windows and through 3.3 3.3.1-1 on Linux and Solaris allows remote attackers to read arbitrary files via u…

CVSS: 7.5 CWE: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') View on NVD

2016-01-08

High

CVE-2015-7362

Fortinet FortiClient Linux SSLVPN before build 2313, when installed on Linux in a home directory that is world readable and executable, allows local users to gain privileges via the helper/subroc set…

CVSS: 7.8 CWE: CWE-264 View on NVD

2015-12-28

High

CVE-2015-8651

Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20…

CVSS: 8.8 CWE: CWE-190 - Integer Overflow or Wraparound View on NVD

High

CVE-2015-8650

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR S…

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2015-8649

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2015-8648

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2015-8647

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2015-8646

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2015-8645

Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe…

CVSS: 8.8 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

High

CVE-2015-8644

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2015-8643

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2015-8642

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2015-8641

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2015-8640

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2015-8639

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2015-8638

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2015-8636

CVSS: 8.8 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

High

CVE-2015-8635

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2015-8634

CVSS: 8.8 CWE: N/A View on NVD

High

CVE-2015-8460

CVSS: 8.8 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2015-8459

CVSS: 10.0 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Medium

CVE-2015-8660

The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and m…

CVSS: 6.7 CWE: CWE-264 View on NVD

Low

CVE-2015-8569

The (1) pptp_bind and (2) pptp_connect functions in drivers/net/ppp/pptp.c in the Linux kernel through 4.3.3 do not verify an address length, which allows local users to obtain sensitive information…

CVSS: 2.3 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

High

CVE-2015-8543

The networking implementation in the Linux kernel through 4.3.3, as used in Android and other products, does not validate protocol identifiers for certain protocol families, which allows local users…

CVSS: 7.0 CWE: N/A View on NVD

Medium

CVE-2015-8374

fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-truncation information from a file via a clone action.

CVSS: 4.0 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

Medium

CVE-2015-7990

Race condition in the rds_sendmsg function in net/rds/sendmsg.c in the Linux kernel before 4.3.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibl…

CVSS: 5.8 CWE: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') View on NVD

Low

CVE-2015-7885

The dgnc_mgmt_ioctl function in drivers/staging/dgnc/dgnc_mgmt.c in the Linux kernel through 4.3.3 does not initialize a certain structure member, which allows local users to obtain sensitive informa…

CVSS: 2.3 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

Low

CVE-2015-7884

The vivid_fb_ioctl function in drivers/media/platform/vivid/vivid-osd.c in the Linux kernel through 4.3.3 does not initialize a certain structure member, which allows local users to obtain sensitive…

CVSS: 2.3 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

Medium

CVE-2015-7509

fs/ext4/namei.c in the Linux kernel before 3.7 allows physically proximate attackers to cause a denial of service (system crash) via a crafted no-journal filesystem, a related issue to CVE-2013-2015.

CVSS: 4.4 CWE: CWE-20 - Improper Input Validation View on NVD

Medium

CVE-2013-7446

Use-after-free vulnerability in net/unix/af_unix.c in the Linux kernel before 4.3.3 allows local users to bypass intended AF_UNIX socket permissions or cause a denial of service (panic) via crafted e…

CVSS: 5.3 CWE: N/A View on NVD

2015-12-16

Medium

CVE-2015-7217

The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the TGA decoder, which allows remote attackers to cause a denial of service (heap-based buffer…

CVSS: 4.3 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Medium

CVE-2015-7216

The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the JasPer decoder, which allows remote attackers to cause a denial of service or possibly hav…

CVSS: 6.8 CWE: CWE-20 - Improper Input Validation View on NVD

2015-12-13

Medium

CVE-2015-6413

Cisco TelePresence Video Communication Server (VCS) Expressway X8.6 allows remote authenticated users to bypass intended read-only restrictions and upload Tandberg Linux Package (TLP) files by visiti…

CVSS: 4.0 CWE: CWE-264 View on NVD

2015-12-10

Critical

CVE-2015-8457

Stack-based buffer overflow in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SD…

CVSS: 10.0 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2015-8456

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe…

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-8455

CVSS: 10.0 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2015-8454

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR S…

CVSS: 10.0 CWE: N/A View on NVD

Medium

CVE-2015-8453

CVSS: 4.3 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

Critical

CVE-2015-8452

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8451

CVSS: 10.0 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2015-8450

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-8449

Use-after-free vulnerability in the MovieClip object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, A…

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-8448

Use-after-free vulnerability in the DisplacementMapFilter object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554…

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-8447

Use-after-free vulnerability in the Color object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe…

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-8446

Heap-based buffer overflow in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK…

CVSS: 9.3 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2015-8445

Integer overflow in the Shader filter implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before…

CVSS: 9.3 CWE: CWE-189 View on NVD

Critical

CVE-2015-8444

CVSS: 10.0 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2015-8443

CVSS: 10.0 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2015-8442

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-8441

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8440

CVSS: 10.0 CWE: CWE-264 View on NVD

Critical

CVE-2015-8439

The SharedObject object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, A…

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-8438

CVSS: 9.3 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2015-8437

Use-after-free vulnerability in the Selection object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, A…

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-8436

Use-after-free vulnerability in the PrintJob object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Ad…

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2015-8435

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8434

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8433

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8432

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8431

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8430

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8429

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8428

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8427

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8426

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8425

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8424

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8423

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8422

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8421

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8420

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8419

CVSS: 10.0 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2015-8418

CVSS: 10.0 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2015-8417

CVSS: 10.0 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2015-8416

CVSS: 10.0 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2015-8415

Buffer overflow in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.…

CVSS: 10.0 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2015-8414

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8413

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8412

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8411

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8410

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8409

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8408

CVSS: 10.0 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2015-8407

CVSS: 10.0 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2015-8406

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8405

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8404

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8403

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8402

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8401

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8071

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8070

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8069

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8068

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8067

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8066

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8065

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8064

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2015-8063

CVSS: 10.0 CWE: N/A View on NVD