Vulnerabilities > Linux > Linux Kernel > 4.19.262

DATE CVE VULNERABILITY TITLE RISK
2023-04-25 CVE-2023-0045 Externally Controlled Reference to a Resource in Another Sphere vulnerability in multiple products
The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall.
network
low complexity
linux debian netapp CWE-610
7.5
2023-04-24 CVE-2023-2007 Improper Locking vulnerability in multiple products
The specific flaw exists within the DPT I2O Controller driver.
local
low complexity
linux debian netapp CWE-667
7.8
2023-04-19 CVE-2023-1382 NULL Pointer Dereference vulnerability in Linux Kernel
A data race flaw was found in the Linux kernel, between where con is allocated and con->sock is set.
local
high complexity
linux CWE-476
4.7
2023-04-19 CVE-2023-2166 NULL Pointer Dereference vulnerability in Linux Kernel
A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux.
local
low complexity
linux CWE-476
5.5
2023-04-14 CVE-2023-2008 Improper Validation of Array Index vulnerability in Linux Kernel
A flaw was found in the Linux kernel's udmabuf device driver.
local
low complexity
linux CWE-129
7.8
2023-04-12 CVE-2023-1990 Use After Free vulnerability in Linux Kernel
A use-after-free flaw was found in ndlc_remove in drivers/nfc/st-nci/ndlc.c in the Linux Kernel.
local
high complexity
linux CWE-416
4.7
2023-04-12 CVE-2023-1829 Use After Free vulnerability in Linux Kernel
A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later lead to double freeing the structure. A local attacker user can use this vulnerability to elevate its privileges to root. We recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28.
local
low complexity
linux CWE-416
7.8
2023-04-11 CVE-2023-1989 Use After Free vulnerability in multiple products
A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel.
local
high complexity
linux netapp debian CWE-416
7.0
2023-04-10 CVE-2023-30456 Unspecified vulnerability in Linux Kernel
An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8.
local
low complexity
linux
6.5
2023-04-05 CVE-2023-1582 Race Condition vulnerability in Linux Kernel
A race problem was found in fs/proc/task_mmu.c in the memory management sub-component in the Linux kernel.
local
high complexity
linux CWE-362
4.7