Linux Kernel Kernel vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Linux Kernel Kernel: 3 record(s), with affected versions and fixes.
CVE-2021-22600
High · 7.0
KEV High · 61 Public exploit CWE-415 Jan 26, 2022
Linux Kernel Privilege Escalation Vulnerability
A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755
CVE-2020-10781
Medium · 5.5
CWE-732 Sep 16, 2020
Incorrect Permission Assignment for Critical Resource in Linux Linux Kernel
A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the /sys/class/zram-control/hot_add file can create ZRAM device nodes in the /dev/ directory. This read allocates kernel memory and is not accounted for a user that triggers the creation of that ZRAM device. With this vulnerability, continually reading the device may consume a large amount of system memory and cause the Out-of-Memory (OOM) killer to activate and terminate random userspace processes, possibly making the system inoperable.
CVE-2020-14304
Medium · 4.4
CWE-460 Sep 15, 2020
A memory disclosure flaw was found in the Linux kernel's ethernet drivers, in the way it…
A memory disclosure flaw was found in the Linux kernel's ethernet drivers, in the way it read data from the EEPROM of the device. This flaw allows a local user to read uninitialized values from the kernel memory. The highest threat from this vulnerability is to confidentiality.