Vulnerabilities > Linux > Linux Kernel > 3.9.1
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-04-14 | CVE-2023-2008 | Improper Validation of Array Index vulnerability in Linux Kernel A flaw was found in the Linux kernel's udmabuf device driver. | 7.8 |
| 2023-04-12 | CVE-2023-1990 | Use After Free vulnerability in Linux Kernel A use-after-free flaw was found in ndlc_remove in drivers/nfc/st-nci/ndlc.c in the Linux Kernel. | 4.7 |
| 2023-04-12 | CVE-2023-1829 | Use After Free vulnerability in Linux Kernel A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later lead to double freeing the structure. A local attacker user can use this vulnerability to elevate its privileges to root. We recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28. | 7.8 |
| 2023-04-11 | CVE-2023-1989 | Use After Free vulnerability in multiple products A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel. | 7.0 |
| 2023-04-10 | CVE-2023-30456 | Unspecified vulnerability in Linux Kernel An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. | 6.5 |
| 2023-04-05 | CVE-2023-1582 | Race Condition vulnerability in Linux Kernel A race problem was found in fs/proc/task_mmu.c in the memory management sub-component in the Linux kernel. | 4.7 |
| 2023-04-05 | CVE-2023-1855 | Use After Free vulnerability in multiple products A use-after-free flaw was found in xgene_hwmon_remove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver (xgene-hwmon). | 6.3 |
| 2023-04-03 | CVE-2023-1611 | Use After Free vulnerability in multiple products A use-after-free flaw was found in btrfs_search_slot in fs/btrfs/ctree.c in btrfs in the Linux Kernel.This flaw allows an attacker to crash the system and possibly cause a kernel information lea | 6.3 |
| 2023-03-30 | CVE-2023-1670 | Use After Free vulnerability in Linux Kernel A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA (PC-card) Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system. | 7.8 |
| 2023-03-27 | CVE-2023-1077 | Type Confusion vulnerability in multiple products In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition would lead to a type confused entry with the list head,which would then be used as a type confused sched_rt_entity,causing memory corruption. | 7.0 |