Vulnerabilities > Linux > Linux Kernel > 4.4.153

DATE CVE VULNERABILITY TITLE RISK
2023-03-30 CVE-2023-1670 Use After Free vulnerability in Linux Kernel
A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA (PC-card) Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system.
local
low complexity
linux CWE-416
7.8
2023-03-27 CVE-2023-1077 Type Confusion vulnerability in multiple products
In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition would lead to a type confused entry with the list head,which would then be used as a type confused sched_rt_entity,causing memory corruption.
local
high complexity
linux debian netapp CWE-843
7.0
2023-03-27 CVE-2023-1079 Use After Free vulnerability in Linux Kernel
A flaw was found in the Linux kernel.
low complexity
linux CWE-416
6.8
2023-03-27 CVE-2023-1380 Out-of-bounds Read vulnerability in multiple products
A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel.
local
low complexity
redhat linux netapp debian canonical CWE-125
7.1
2023-03-27 CVE-2023-28866 Out-of-bounds Read vulnerability in Linux Kernel
In the Linux kernel through 6.2.8, net/bluetooth/hci_sync.c allows out-of-bounds access because amp_init1[] and amp_init2[] are supposed to have an intentionally invalid element, but do not.
network
low complexity
linux CWE-125
5.3
2023-03-24 CVE-2020-36691 Uncontrolled Recursion vulnerability in Linux Kernel
An issue was discovered in the Linux kernel before 5.8.
local
low complexity
linux CWE-674
5.5
2023-03-23 CVE-2023-0590 Use After Free vulnerability in Linux Kernel
A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem.
local
high complexity
linux CWE-416
4.7
2023-03-23 CVE-2023-1249 Use After Free vulnerability in Linux Kernel
A use-after-free flaw was found in the Linux kernel’s core dump subsystem.
local
low complexity
linux CWE-416
5.5
2023-03-23 CVE-2023-1513 Improper Initialization vulnerability in multiple products
A flaw was found in KVM.
local
low complexity
linux fedoraproject redhat CWE-665
3.3
2023-03-23 CVE-2023-28772 Classic Buffer Overflow vulnerability in Linux Kernel
An issue was discovered in the Linux kernel before 5.13.3.
local
low complexity
linux CWE-120
6.7