Vulnerabilities > Linux > Linux Kernel > 5.10.228
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-09-18 | CVE-2024-46742 | NULL Pointer Dereference vulnerability in Linux Kernel In the Linux kernel, the following vulnerability has been resolved: smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open() null-ptr-deref will occur when (req_op_level == SMB2_OPLOCK_LEVEL_LEASE) and parse_lease_state() return NULL. Fix this by check if 'lease_ctx_info' is NULL. Additionally, remove the redundant parentheses in parse_durable_handle_context(). | 5.5 |
| 2024-09-18 | CVE-2024-46774 | Out-of-bounds Write vulnerability in Linux Kernel In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() Smatch warns: arch/powerpc/kernel/rtas.c:1932 __do_sys_rtas() warn: potential spectre issue 'args.args' [r] (local cap) The 'nargs' and 'nret' locals come directly from a user-supplied buffer and are used as indexes into a small stack-based array and as inputs to copy_to_user() after they are subject to bounds checks. Use array_index_nospec() after the bounds checks to clamp these values for speculative execution. | 7.1 |
| 2024-05-01 | CVE-2024-26982 | Out-of-bounds Read vulnerability in Linux Kernel In the Linux kernel, the following vulnerability has been resolved: Squashfs: check the inode number is not the invalid value of zero Syskiller has produced an out of bounds access in fill_meta_index(). That out of bounds access is ultimately caused because the inode has an inode number with the invalid value of zero, which was not checked. The reason this causes the out of bounds access is due to following sequence of events: 1. | 7.1 |
| 2024-04-03 | CVE-2024-26759 | Out-of-bounds Write vulnerability in Linux Kernel In the Linux kernel, the following vulnerability has been resolved: mm/swap: fix race when skipping swapcache When skipping swapcache for SWP_SYNCHRONOUS_IO, if two or more threads swapin the same entry at the same time, they get different pages (A, B). | 5.5 |
| 2023-06-12 | CVE-2023-3159 | Use After Free vulnerability in Linux Kernel A use after free issue was discovered in driver/firewire in outbound_phy_packet_callback in the Linux Kernel. | 6.7 |
| 2023-05-08 | CVE-2023-2513 | Use After Free vulnerability in multiple products A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the extra inode size for extended attributes. | 6.7 |
| 2023-04-20 | CVE-2023-2194 | Out-of-bounds Write vulnerability in multiple products An out-of-bounds write vulnerability was found in the Linux kernel's SLIMpro I2C device driver. | 6.7 |
| 2022-12-14 | CVE-2022-3104 | Unspecified vulnerability in Linux Kernel An issue was discovered in the Linux kernel through 5.16-rc6. | 5.5 |
| 2022-12-14 | CVE-2022-3105 | Unspecified vulnerability in Linux Kernel An issue was discovered in the Linux kernel through 5.16-rc6. | 5.5 |
| 2022-12-14 | CVE-2022-3106 | NULL Pointer Dereference vulnerability in Linux Kernel An issue was discovered in the Linux kernel through 5.16-rc6. | 5.5 |