The Linux Foundation kernel vulnerabilities

CVEs per yearBy the year they were published

1. 20183
2. 20198
3. 20201

Known exploitedNewest addition to KEV first

• CVE-2018-14634

  An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged)…

  The Linux Foundation · kernel

  ExploitedHigh7.8

Newest CVEs

• CVE-2020-10751

  A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single…

  The Linux Foundation · kernel

  Medium6.1
• CVE-2019-3896

  A double-free can happen in idr_remove_all() in lib/idr.c in the Linux kernel 2.6 branch. An unprivileged local attacker can use this flaw for a privilege…

  The Linux Foundation · kernel

  High7.0
• CVE-2019-3882

  A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio…

  The Linux Foundation · kernel

  Medium4.7
• CVE-2019-3901

  A race condition in perf_event_open() allows local attackers to leak sensitive data from setuid programs. As no relevant locks (in particular the…

  The Linux Foundation · kernel

  Medium5.6
• CVE-2019-3837

  It was found that the net_dma code in tcp_recvmsg() in the 2.6.32 kernel as shipped in RHEL6 is thread-unsafe. So an unprivileged multi-threaded userspace…

  The Linux Foundation · kernel

  Medium6.1
• CVE-2019-3887

  A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access with nested(=1) virtualization enabled. In that, L1 guest…

  The Linux Foundation · Kernel

  Medium6.7
• CVE-2019-3874

  The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service…

  The Linux Foundation · kernel

  Medium5.3
• CVE-2018-16880

  A flaw was found in the Linux kernel's handle_rx() function in the [vhost_net] driver. A malicious virtual guest, under specific conditions, can trigger an…

  The Linux Foundation · kernel

  Medium5.9
• CVE-2018-16885

  A flaw was found in the Linux kernel that allows the userspace to call memcpy_fromiovecend() and similar functions with a zero offset and buffer length which…

  The Linux Foundation · kernel

  Medium4.7
• CVE-2018-14634

  An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged)…

  The Linux Foundation · kernel

  ExploitedHigh7.8