Vulnerabilities > Linux > Linux Kernel > 2.1.67

DATE CVE VULNERABILITY TITLE RISK
2024-01-23 CVE-2023-51043 Use After Free vulnerability in Linux Kernel
In the Linux kernel before 6.4.5, drivers/gpu/drm/drm_atomic.c has a use-after-free during a race condition between a nonblocking atomic commit and a driver unload.
local
high complexity
linux CWE-416
7.0
2024-01-23 CVE-2024-22705 Out-of-bounds Read vulnerability in Linux Kernel
An issue was discovered in ksmbd in the Linux kernel before 6.6.10.
local
low complexity
linux CWE-125
7.8
2024-01-23 CVE-2024-23848 Use After Free vulnerability in Linux Kernel
In the Linux kernel through 6.7.1, there is a use-after-free in cec_queue_msg_fh, related to drivers/media/cec/core/cec-adap.c and drivers/media/cec/core/cec-api.c.
local
low complexity
linux CWE-416
5.5
2024-01-23 CVE-2024-23849 Off-by-one Error vulnerability in Linux Kernel
In rds_recv_track_latency in net/rds/af_rds.c in the Linux kernel through 6.7.1, there is an off-by-one error for an RDS_MSG_RX_DGRAM_TRACE_MAX comparison, resulting in out-of-bounds access.
local
low complexity
linux CWE-193
5.5
2024-01-23 CVE-2024-23850 Unspecified vulnerability in Linux Kernel
In btrfs_get_root_ref in fs/btrfs/disk-io.c in the Linux kernel through 6.7.1, there can be an assertion failure and crash because a subvolume can be read out too soon after its root item is inserted upon subvolume creation.
local
low complexity
linux
5.5
2024-01-23 CVE-2024-23851 Unspecified vulnerability in Linux Kernel
copy_params in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than INT_MAX bytes, and crash, because of a missing param_kernel->data_size check.
local
low complexity
linux
5.5
2024-01-21 CVE-2023-6531 Race Condition vulnerability in multiple products
A use-after-free flaw was found in the Linux Kernel due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic() on the socket that the SKB is queued on.
local
high complexity
linux redhat CWE-362
7.0
2024-01-18 CVE-2024-0607 A flaw was found in the Netfilter subsystem in the Linux kernel.
local
low complexity
linux fedoraproject redhat
6.6
2024-01-17 CVE-2024-0639 Improper Locking vulnerability in multiple products
A denial of service vulnerability due to a deadlock was found in sctp_auto_asconf_init in net/sctp/socket.c in the Linux kernel’s SCTP subsystem.
local
low complexity
linux redhat CWE-667
5.5
2024-01-17 CVE-2024-0641 Improper Locking vulnerability in multiple products
A denial of service vulnerability was found in tipc_crypto_key_revoke in net/tipc/crypto.c in the Linux kernel’s TIPC subsystem.
local
low complexity
linux redhat CWE-667
5.5