Vulnerabilities > Linux > High

DATE CVE VULNERABILITY TITLE RISK
2021-07-07 CVE-2021-22555 Out-of-bounds Write vulnerability in multiple products
A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c.
local
low complexity
linux brocade netapp CWE-787
7.8
2021-07-07 CVE-2021-35039 Improper Verification of Cryptographic Signature vulnerability in multiple products
kernel/module.c in the Linux kernel before 5.12.14 mishandles Signature Verification, aka CID-0c18f29aae7c.
local
low complexity
linux debian CWE-347
7.8
2021-07-02 CVE-2021-36143 NULL Pointer Dereference vulnerability in Linux Acrn
ACRN before 2.5 has a hw/pci/virtio/virtio.c vq_endchains NULL Pointer Dereference.
network
low complexity
linux CWE-476
7.5
2021-07-02 CVE-2021-36144 Use After Free vulnerability in Linux Acrn
The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/*.c.
network
low complexity
linux CWE-416
7.5
2021-07-02 CVE-2021-36145 Use After Free vulnerability in Linux Acrn
The Device Model in ACRN through 2.5 has a devicemodel/core/mem.c use-after-free for a freed rb_entry.
network
low complexity
linux CWE-416
7.5
2021-07-02 CVE-2021-36146 NULL Pointer Dereference vulnerability in Linux Acrn
ACRN before 2.5 has a devicemodel/hw/pci/xhci.c NULL Pointer Dereference for a trb pointer.
network
low complexity
linux CWE-476
7.5
2021-07-02 CVE-2021-36147 NULL Pointer Dereference vulnerability in Linux Acrn
An issue was discovered in ACRN before 2.5.
network
low complexity
linux CWE-476
7.5
2021-07-02 CVE-2021-36148 Classic Buffer Overflow vulnerability in Linux Acrn
An issue was discovered in ACRN before 2.5.
local
low complexity
linux CWE-120
7.8
2021-06-29 CVE-2021-28691 Use After Free vulnerability in multiple products
Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to disable the interface and terminate the receive kernel thread associated with queue 0 in response to the frontend sending a malformed packet.
local
low complexity
linux netapp CWE-416
7.8
2021-06-22 CVE-2010-2525 Unspecified vulnerability in Linux Kernel 2.6.33
A flaw was discovered in gfs2 file system’s handling of acls (access control lists).
local
low complexity
linux
7.8