Vulnerabilidades en The Linux Kernel Organization
7 resultadosAnálisis Vexday
The Linux Kernel Organization apresenta 7 vulnerabilidades catalogadas, com apenas 1 em ataque ativo (KEV), nenhuma crítica por CVSS. O risco atual é limitado: nenhuma vulnerabilidade foi publicada nos últimos 90 dias, e a fraqueza dominante (CWE-416, use-after-free) afeta um pequeno número de exposições. O panorama sugere uma situação controlada sem pressão imediata de remedição.
CVE-2022-2586MEDIUMIt was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that EPSS 10.5%KEVCVE-2022-2588MEDIUMIt was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeEPSS 5.9%CVE-2022-2602MEDIUMio_uring UAF, Unix SCM garbage collectionEPSS 1.4%CVE-2022-2585MEDIUMIt was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-afEPSS 1.3%CVE-2023-6040HIGHAn out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family)EPSS 0.3%CVE-2021-3600HIGHIt was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when perfoEPSS 0.3%CVE-2023-1032MEDIUMThe Linux kernel io_uring IORING_OP_SOCKET operation contained a double free in function __sys_socket_file() in file net/socket.c. This issuEPSS 0.3%