The Linux Foundation vulnerabilities

CVEs per yearBy the year they were published

1. 20183
2. 201915
3. 20201

Known exploitedNewest addition to KEV first

• CVE-2018-14634

  An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged)…

  The Linux Foundation · kernel

  ExploitedHigh7.8

Newest CVEs

• CVE-2020-10751

  A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single…

  The Linux Foundation · kernel

  Medium6.1
• CVE-2019-1010234

  The Linux Foundation ONOS 1.15.0 and ealier is affected by: Improper Input Validation. The impact is: The attacker can remotely execute any commands by sending…

  The Linux Foundation · ONOS

  Critical9.8
• CVE-2019-1010245

  The Linux Foundation ONOS SDN Controller 1.15 and earlier versions is affected by: Improper Input Validation. The impact is: A remote attacker can execute…

  The Linux Foundation · ONOS SDN Controller

  Critical9.8
• CVE-2019-1010249

  The Linux Foundation ONOS 2.0.0 and earlier is affected by: Integer Overflow. The impact is: A network administrator (or attacker) can install unintended flow…

  The Linux Foundation · ONOS

  Medium4.9
• CVE-2019-1010250

  The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator (or attacker) can install unintended…

  The Linux Foundation · ONOS

  Medium4.9
• CVE-2019-1010252

  The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator (or attacker) can install unintended…

  The Linux Foundation · ONOS

  Medium4.9
• CVE-2019-3896

  A double-free can happen in idr_remove_all() in lib/idr.c in the Linux kernel 2.6 branch. An unprivileged local attacker can use this flaw for a privilege…

  The Linux Foundation · kernel

  High7.0
• CVE-2019-3882

  A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio…

  The Linux Foundation · kernel

  Medium4.7
• CVE-2019-3901

  A race condition in perf_event_open() allows local attackers to leak sensitive data from setuid programs. As no relevant locks (in particular the…

  The Linux Foundation · kernel

  Medium5.6
• CVE-2019-3837

  It was found that the net_dma code in tcp_recvmsg() in the 2.6.32 kernel as shipped in RHEL6 is thread-unsafe. So an unprivileged multi-threaded userspace…

  The Linux Foundation · kernel

  Medium6.1