Vulnerabilidades do Linux Kernel Kernel
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Linux Kernel Kernel: 3 registro(s), com versões afetadas e correções.
CVE-2021-22600
Alta · 7.0
KEV Alta · 61 Exploit público CWE-415 26/01/2022
Linux Kernel Privilege Escalation Vulnerability
A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755
CVE-2020-10781
Média · 5.5
CWE-732 16/09/2020
Incorrect Permission Assignment for Critical Resource em Linux Linux Kernel
A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the /sys/class/zram-control/hot_add file can create ZRAM device nodes in the /dev/ directory. This read allocates kernel memory and is not accounted for a user that triggers the creation of that ZRAM device. With this vulnerability, continually reading the device may consume a large amount of system memory and cause the Out-of-Memory (OOM) killer to activate and terminate random userspace processes, possibly making the system inoperable.
CVE-2020-14304
Média · 4.4
CWE-460 15/09/2020
A memory disclosure flaw was found in the Linux kernel's ethernet drivers, in the way it…
A memory disclosure flaw was found in the Linux kernel's ethernet drivers, in the way it read data from the EEPROM of the device. This flaw allows a local user to read uninitialized values from the kernel memory. The highest threat from this vulnerability is to confidentiality.