← Back

Linux Kernel

linux_kernel

Vendor: Linux • 14,504 CVEs

CVEs (14,504)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Linux
1Linux Kernel
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
2.1 LOW· v2
ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKET_MR_PROMISC, which could allow attackers to sniff the...Show more
ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKET_MR_PROMISC, which could allow attackers to sniff the network without detection, as demonstrated using libpcap.Show less
1Linux
1Linux Kernel
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
2.1 LOW· v2
Linux kernel 2.4.1 through 2.4.19 sets root's NR_RESERVED_FILES limit to 10 files, which allows local users to cause a denial of service (resource exhaustion) by opening 10 setuid binaries.
1Linux
1Linux Kernel
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the pcilynx ieee1394 firewire driver (pcilynx.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors, related to "wrap handling."
1Linux
1Linux Kernel
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
10.0 HIGH· v2
Signed integer overflow in the bttv_read function in the bttv driver (bttv-driver.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors.
1Linux
1Linux Kernel
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
2.1 LOW· v2
The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers, which could lead to an information leak on processors that do not clear all relevant SSE registers.
1Linux
1Linux Kernel
Apr 16, 2026
Dec 23, 2002
N/A· v4
N/A· v3
2.1 LOW· v2
Linux kernel 2.2.x allows local users to cause a denial of service (crash) by using the mmap() function with a PROT_READ parameter to access non-readable memory pages through the /proc/pid/mem interface.
2Linux
Trustix
2Linux Kernel
Secure Linux
Apr 16, 2026
Dec 11, 2002
N/A· v4
N/A· v3
2.1 LOW· v2
The Linux kernel 2.4.20 and earlier, and 2.5.x, when running on x86 systems, allows local users to cause a denial of service (hang) via the emulation mode, which does not properly clear TF and NT EFLAGs.
1Linux
1Linux Kernel
Apr 16, 2026
Aug 12, 2002
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, which could allow remote attackers to determine that a target system is running Linux.
1Linux
1Linux Kernel
Apr 16, 2026
Aug 12, 2002
N/A· v4
N/A· v3
2.1 LOW· v2
The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on...Show more
The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories.Show less
1Linux
1Linux Kernel
Apr 16, 2026
Aug 12, 2002
N/A· v4
N/A· v3
3.6 LOW· v2
The iBCS routines in arch/i386/kernel/traps.c for Linux kernels 2.4.18 and earlier on x86 systems allow local users to kill arbitrary processes via a a binary compatibility interface (lcall).
1Linux
1Linux Kernel
Apr 16, 2026
Jul 26, 2002
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Network Address Translation (NAT) capability for Netfilter ("iptables") 1.2.6a and earlier leaks translated IP addresses in ICMP error messages.
1Linux
1Linux Kernel
Apr 16, 2026
Jul 3, 2002
N/A· v4
N/A· v3
2.1 LOW· v2
The encrypted loop device in Linux kernel 2.4.10 and earlier does not authenticate the entity that is encrypting data, which allows local users to modify encrypted data without knowing the key.
1Linux
1Linux Kernel
Apr 16, 2026
Mar 8, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
IRC connection tracking helper module in the netfilter subsystem for Linux 2.4.18-pre9 and earlier does not properly set the mask for conntrack expectations for incoming DCC connections, which could allow remote attacker...Show more
IRC connection tracking helper module in the netfilter subsystem for Linux 2.4.18-pre9 and earlier does not properly set the mask for conntrack expectations for incoming DCC connections, which could allow remote attackers to bypass intended firewall restrictions.Show less
1Linux
1Linux Kernel
Apr 16, 2026
Jan 31, 2002
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Linux kernel, and possibly other operating systems, allows remote attackers to read portions of memory via a series of fragmented ICMP packets that generate an ICMP TTL Exceeded response, which includes portions of the m...Show more
Linux kernel, and possibly other operating systems, allows remote attackers to read portions of memory via a series of fragmented ICMP packets that generate an ICMP TTL Exceeded response, which includes portions of the memory in the response packet.Show less
1Linux
1Linux Kernel
Apr 16, 2026
Dec 31, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
The MAC module in Netfilter in Linux kernel 2.4.1 through 2.4.11, when configured to filter based on MAC addresses, allows remote attackers to bypass packet filters via small packets.
1Linux
1Linux Kernel
Apr 16, 2026
Dec 31, 2001
N/A· v4
N/A· v3
2.1 LOW· v2
Linux kernel 2.2.19 enables CAP_SYS_RESOURCE for setuid processes, which allows local users to exceed disk quota restrictions during execution of setuid programs.
3Caldera
LinuxSuse
7Linux Kernel
OpenlinuxOpenlinux Edesktop+4 more
Apr 16, 2026
Dec 6, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie.
2Linux
Suse
2Linux Kernel
Suse Linux
Apr 16, 2026
Nov 21, 2001
N/A· v4
N/A· v3
2.1 LOW· v2
Linux kernel before 2.4.11pre3 in multiple Linux distributions allows local users to cause a denial of service (crash) by starting the core vmlinux kernel, possibly related to poor error checking during ELF loading.
1Linux
1Linux Kernel
Apr 16, 2026
Oct 18, 2001
N/A· v4
N/A· v3
7.2 HIGH· v2
ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or setgid program that itself calls an unprivileged program, such as newgrp.
1Linux
1Linux Kernel
Apr 16, 2026
Oct 18, 2001
N/A· v4
N/A· v3
2.1 LOW· v2
Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial of service via a series of deeply nested symlinks, which causes the kernel to spend extra time when trying to access the l...Show more
Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial of service via a series of deeply nested symlinks, which causes the kernel to spend extra time when trying to access the link.Show less