Vulnerabilities > Linux > Linux Kernel > 4.14.42

DATE CVE VULNERABILITY TITLE RISK
2023-03-27 CVE-2023-1380 Out-of-bounds Read vulnerability in multiple products
A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel.
local
low complexity
redhat linux netapp debian canonical CWE-125
7.1
2023-03-23 CVE-2023-0590 Use After Free vulnerability in Linux Kernel
A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem.
local
high complexity
linux CWE-416
4.7
2023-03-23 CVE-2023-28772 Classic Buffer Overflow vulnerability in Linux Kernel
An issue was discovered in the Linux kernel before 5.13.3.
local
low complexity
linux CWE-120
6.7
2023-03-22 CVE-2022-4095 Use After Free vulnerability in Linux Kernel
A use-after-free flaw was found in Linux kernel before 5.19.2.
local
low complexity
linux CWE-416
7.8
2023-03-22 CVE-2023-1281 Use After Free vulnerability in Linux Kernel
Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcf_exts_exec()' is called with the destroyed tcf_ext. A local attacker user can use this vulnerability to elevate its privileges to root. This issue affects Linux Kernel: from 4.14 before git commit ee059170b1f7e94e55fa6cadee544e176a6e59c2.
local
low complexity
linux CWE-416
7.8
2023-03-19 CVE-2022-48423 Out-of-bounds Write vulnerability in Linux Kernel
In the Linux kernel before 6.1.3, fs/ntfs3/record.c does not validate resident attribute names.
local
low complexity
linux CWE-787
7.8
2023-03-16 CVE-2023-1390 Unspecified vulnerability in Linux Kernel
A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module.
network
low complexity
linux
7.5
2023-03-16 CVE-2023-28466 NULL Pointer Dereference vulnerability in multiple products
do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference).
local
high complexity
linux netapp debian CWE-476
7.0
2023-03-08 CVE-2023-0030 Use After Free vulnerability in Linux Kernel
A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a memory overflow that causes the nvkm_vma_tail function to fail.
local
low complexity
linux CWE-416
7.8
2023-03-06 CVE-2022-3424 Use After Free vulnerability in multiple products
A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first gru_file_unlocked_ioctl function is called by the user, where a fail pass occurs in the gru_check_chiplet_assignment function.
local
low complexity
linux redhat CWE-416
7.8