Vulnerabilities > Linux > Linux Kernel > 5.15.20
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-05-01 | CVE-2023-2235 | Use After Free vulnerability in Linux Kernel A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation. The perf_group_detach function did not check the event's siblings' attach_state before calling add_event_to_groups(), but remove_on_exec made it possible to call list_del_event() on before detaching from their group, making it possible to use a dangling pointer causing a use-after-free vulnerability. We recommend upgrading past commit fd0815f632c24878e325821943edccc7fde947a2. | 7.8 |
| 2023-04-28 | CVE-2023-31436 | Out-of-bounds Write vulnerability in Linux Kernel qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX. | 7.8 |
| 2023-04-26 | CVE-2023-0458 | NULL Pointer Dereference vulnerability in multiple products A speculative pointer dereference problem exists in the Linux Kernel on the do_prlimit() function. | 4.7 |
| 2023-04-25 | CVE-2023-0045 | Externally Controlled Reference to a Resource in Another Sphere vulnerability in multiple products The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. | 7.5 |
| 2023-04-24 | CVE-2023-2007 | Improper Locking vulnerability in multiple products The specific flaw exists within the DPT I2O Controller driver. | 7.8 |
| 2023-04-24 | CVE-2023-2006 | Race Condition vulnerability in multiple products A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. | 7.0 |
| 2023-04-24 | CVE-2023-2019 | A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. | 4.4 |
| 2023-04-21 | CVE-2023-1998 | Information Exposure Through Discrepancy vulnerability in multiple products The Linux kernel allows userspace processes to enable mitigations by calling prctl with PR_SET_SPECULATION_CTRL which disables the speculation feature as well as by using seccomp. | 5.6 |
| 2023-04-20 | CVE-2023-2177 | NULL Pointer Dereference vulnerability in Linux Kernel A null pointer dereference issue was found in the sctp network protocol in net/sctp/stream_sched.c in Linux Kernel. | 5.5 |
| 2023-04-20 | CVE-2023-2194 | Out-of-bounds Write vulnerability in multiple products An out-of-bounds write vulnerability was found in the Linux kernel's SLIMpro I2C device driver. | 6.7 |