Vulnerabilities > Linux > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-11-16 CVE-2023-6176 NULL Pointer Dereference vulnerability in multiple products
A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality.
local
high complexity
linux redhat CWE-476
4.7
2023-11-09 CVE-2023-39198 Use After Free vulnerability in multiple products
A race condition was found in the QXL driver in the Linux kernel.
local
high complexity
linux fedoraproject redhat CWE-416
6.4
2023-11-09 CVE-2023-6039 Use After Free vulnerability in Linux Kernel
A use-after-free flaw was found in lan78xx_disconnect in drivers/net/usb/lan78xx.c in the network sub-component, net/usb/lan78xx in the Linux Kernel.
local
low complexity
linux CWE-416
5.5
2023-11-06 CVE-2023-5090 Improper Handling of Exceptional Conditions vulnerability in multiple products
A flaw was found in KVM.
local
low complexity
linux redhat CWE-755
5.5
2023-11-03 CVE-2023-47233 Use After Free vulnerability in Linux Kernel
The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the USB by hotplug) code.
low complexity
linux CWE-416
4.3
2023-11-01 CVE-2023-1192 Use After Free vulnerability in multiple products
A use-after-free flaw was found in smb2_is_status_io_timeout() in CIFS in the Linux Kernel.
network
low complexity
linux redhat CWE-416
6.5
2023-11-01 CVE-2023-1193 Use After Free vulnerability in Linux Kernel
A use-after-free flaw was found in setup_async_work in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel.
network
low complexity
linux CWE-416
6.5
2023-11-01 CVE-2023-3397 Race Condition vulnerability in Linux Kernel
A race condition occurred between the functions lmLogClose and txEnd in JFS, in the Linux Kernel, executed in different threads.
local
high complexity
linux CWE-362
6.3
2023-10-29 CVE-2023-46862 NULL Pointer Dereference vulnerability in Linux Kernel
An issue was discovered in the Linux kernel through 6.5.9.
local
high complexity
linux CWE-476
4.7
2023-10-16 CVE-2023-40791 extract_user_to_sg in lib/scatterlist.c in the Linux kernel before 6.4.12 fails to unpin pages in a certain situation, as demonstrated by a WARNING for try_grab_page.
local
high complexity
linux netapp
6.3