Vulnerabilities > Linux > Linux Kernel > 6.0.18

DATE CVE VULNERABILITY TITLE RISK
2023-01-12 CVE-2023-23454 Type Confusion vulnerability in multiple products
cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (slab-out-of-bounds read) because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results).
local
low complexity
linux debian CWE-843
5.5
2023-01-12 CVE-2023-23455 Type Confusion vulnerability in multiple products
atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results).
local
low complexity
linux debian CWE-843
5.5
2023-01-10 CVE-2022-4379 Use After Free vulnerability in multiple products
A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel.
network
low complexity
linux fedoraproject CWE-416
7.5
2023-01-09 CVE-2022-2196 Insecure Default Initialization of Resource vulnerability in multiple products
A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines or IBPB after running L2 due to KVM (L0) advertising eIBRS support to L1.
local
low complexity
linux debian CWE-1188
8.8
2022-11-30 CVE-2022-45869 Race Condition vulnerability in Linux Kernel
A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial of service (host OS crash or host OS memory corruption) when nested virtualisation and the TDP MMU are enabled.
local
low complexity
linux CWE-362
5.5
2022-11-27 CVE-2022-45919 Use After Free vulnerability in multiple products
An issue was discovered in the Linux kernel through 6.0.10.
local
high complexity
linux netapp CWE-416
7.0
2022-11-25 CVE-2022-45886 Use After Free vulnerability in multiple products
An issue was discovered in the Linux kernel through 6.0.9.
local
high complexity
linux netapp CWE-416
7.0
2022-10-19 CVE-2022-3606 Improper Resource Shutdown or Release vulnerability in Linux Kernel
A vulnerability was found in Linux Kernel.
local
low complexity
linux CWE-404
5.5
2022-10-18 CVE-2022-3594 Improper Resource Shutdown or Release vulnerability in multiple products
A vulnerability was found in Linux Kernel.
network
low complexity
linux debian CWE-404
5.3
2022-10-18 CVE-2022-3595 Double Free vulnerability in Linux Kernel
A vulnerability was found in Linux Kernel.
local
low complexity
linux CWE-415
5.5