Vulnerabilities > Linux > Linux Kernel > 5.15.136
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-04-19 | CVE-2023-2162 | Use After Free vulnerability in Linux Kernel A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-component in the Linux Kernel. | 5.5 |
| 2023-04-16 | CVE-2023-30772 | Use After Free vulnerability in Linux Kernel The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/power/supply/da9150-charger.c if a physically proximate attacker unplugs a device. | 6.4 |
| 2023-04-14 | CVE-2023-2008 | Improper Validation of Array Index vulnerability in Linux Kernel A flaw was found in the Linux kernel's udmabuf device driver. | 7.8 |
| 2023-04-12 | CVE-2023-1990 | Use After Free vulnerability in Linux Kernel A use-after-free flaw was found in ndlc_remove in drivers/nfc/st-nci/ndlc.c in the Linux Kernel. | 4.7 |
| 2023-04-12 | CVE-2023-1872 | Use After Free vulnerability in multiple products A use-after-free vulnerability in the Linux Kernel io_uring system can be exploited to achieve local privilege escalation. The io_file_get_fixed function lacks the presence of ctx->uring_lock which can lead to a Use-After-Free vulnerability due a race condition with fixed files getting unregistered. We recommend upgrading past commit da24142b1ef9fd5d36b76e36bab328a5b27523e8. | 7.0 |
| 2023-04-10 | CVE-2023-30456 | Unspecified vulnerability in Linux Kernel An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. | 6.5 |
| 2023-04-05 | CVE-2023-1855 | Use After Free vulnerability in multiple products A use-after-free flaw was found in xgene_hwmon_remove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver (xgene-hwmon). | 6.3 |
| 2023-03-27 | CVE-2023-1079 | Use After Free vulnerability in Linux Kernel A flaw was found in the Linux kernel. | 6.8 |
| 2023-03-27 | CVE-2023-28866 | Out-of-bounds Read vulnerability in Linux Kernel In the Linux kernel through 6.2.8, net/bluetooth/hci_sync.c allows out-of-bounds access because amp_init1[] and amp_init2[] are supposed to have an intentionally invalid element, but do not. | 5.3 |
| 2023-03-23 | CVE-2023-0590 | Use After Free vulnerability in Linux Kernel A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem. | 4.7 |