Vulnerabilities > Linux > High

DATE CVE VULNERABILITY TITLE RISK
2017-04-07 CVE-2017-0454 Unspecified vulnerability in Linux Kernel 3.10/3.18
An elevation of privilege vulnerability in the Qualcomm audio driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
high complexity
linux
7.0
2017-04-05 CVE-2017-0339 Unspecified vulnerability in Linux Kernel 3.10
An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
high complexity
linux
7.0
2017-04-05 CVE-2017-0332 Out-of-bounds Write vulnerability in Linux Kernel 3.10
An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
high complexity
linux CWE-787
7.0
2017-04-05 CVE-2017-0329 Unspecified vulnerability in Linux Kernel 3.18
An elevation of privilege vulnerability in the NVIDIA boot and power management processor driver could enable a local malicious application to execute arbitrary code within the context of the boot and power management processor.
local
high complexity
linux
7.0
2017-04-05 CVE-2017-0327 Classic Buffer Overflow vulnerability in Linux Kernel 3.10
An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
high complexity
linux CWE-120
7.0
2017-04-05 CVE-2017-0325 Out-of-bounds Write vulnerability in Linux Kernel 3.10/3.18
An elevation of privilege vulnerability in the NVIDIA I2C HID driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
high complexity
linux CWE-787
7.0
2017-04-04 CVE-2016-5870 NULL Pointer Dereference vulnerability in Linux Kernel
The msm_ipc_router_close function in net/ipc_router/ipc_router_socket.c in the ipc_router component for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact by triggering failure of an accept system call for an AF_MSM_IPC socket.
local
low complexity
linux CWE-476
7.8
2017-04-04 CVE-2014-9922 Permissions, Privileges, and Access Controls vulnerability in multiple products
The eCryptfs subsystem in the Linux kernel before 3.18 allows local users to gain privileges via a large filesystem stack that includes an overlayfs layer, related to fs/ecryptfs/main.c and fs/overlayfs/super.c.
local
low complexity
linux google CWE-264
7.8
2017-03-31 CVE-2017-7374 Use After Free vulnerability in Linux Kernel
Use-after-free vulnerability in fs/crypto/ in the Linux kernel before 4.10.7 allows local users to cause a denial of service (NULL pointer dereference) or possibly gain privileges by revoking keyring keys being used for ext4, f2fs, or ubifs encryption, causing cryptographic transform objects to be freed prematurely.
local
low complexity
linux CWE-416
7.8
2017-03-31 CVE-2017-2647 NULL Pointer Dereference vulnerability in Linux Kernel
The KEYS subsystem in the Linux kernel before 3.18 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving a NULL value for a certain match field, related to the keyring_search_iterator function in keyring.c.
local
low complexity
linux CWE-476
7.8