Vulnerabilities > Linux > Linux Kernel > 5.19.5
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-03-27 | CVE-2023-1078 | Type Confusion vulnerability in Linux Kernel A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol. | 7.8 |
| 2023-03-27 | CVE-2023-1079 | Use After Free vulnerability in Linux Kernel A flaw was found in the Linux kernel. | 6.8 |
| 2023-03-24 | CVE-2023-1583 | NULL Pointer Dereference vulnerability in Linux Kernel A NULL pointer dereference was found in io_file_bitmap_get in io_uring/filetable.c in the io_uring sub-component in the Linux Kernel. | 5.5 |
| 2023-03-23 | CVE-2023-0590 | Use After Free vulnerability in Linux Kernel A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem. | 4.7 |
| 2023-03-22 | CVE-2023-0386 | Unspecified vulnerability in Linux Kernel A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. | 7.8 |
| 2023-03-22 | CVE-2022-4095 | Use After Free vulnerability in Linux Kernel A use-after-free flaw was found in Linux kernel before 5.19.2. | 7.8 |
| 2023-03-22 | CVE-2023-1281 | Use After Free vulnerability in Linux Kernel Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcf_exts_exec()' is called with the destroyed tcf_ext. A local attacker user can use this vulnerability to elevate its privileges to root. This issue affects Linux Kernel: from 4.14 before git commit ee059170b1f7e94e55fa6cadee544e176a6e59c2. | 7.8 |
| 2023-03-19 | CVE-2022-48423 | Out-of-bounds Write vulnerability in Linux Kernel In the Linux kernel before 6.1.3, fs/ntfs3/record.c does not validate resident attribute names. | 7.8 |
| 2023-03-19 | CVE-2022-48424 | Unspecified vulnerability in Linux Kernel In the Linux kernel before 6.1.3, fs/ntfs3/inode.c does not validate the attribute name offset. | 7.8 |
| 2023-03-19 | CVE-2022-48425 | Release of Invalid Pointer or Reference vulnerability in Linux Kernel In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs. | 7.8 |