Linux

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-22555 3Brocade LinuxNetapp 21Aff 500f Firmware Aff A250 FirmwareAff A400 Firmware+18 more Jun 17, 2026 Jul 7, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space
CVE-2021-35039 2Debian Linux 2Debian Linux Linux Kernel Jun 17, 2026 Jul 7, 2021 N/A· v4 7.8 HIGH· v3 6.9 MEDIUM· v2 kernel/module.c in the Linux kernel before 5.12.14 mishandles Signature Verification, aka CID-0c18f29aae7c. Without CONFIG_MODULE_SIG, verification that a kernel module is signed, for loading via init_module, does not oc...Show more kernel/module.c in the Linux kernel before 5.12.14 mishandles Signature Verification, aka CID-0c18f29aae7c. Without CONFIG_MODULE_SIG, verification that a kernel module is signed, for loading via init_module, does not occur for a module.sig_enforce=1 command-line argument.Show less
CVE-2021-36148 1Linux 1Acrn Jun 17, 2026 Jul 2, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in ACRN before 2.5. dmar_free_irte in hypervisor/arch/x86/vtd.c allows an irte_alloc_bitmap buffer overflow.
CVE-2021-36147 1Linux 1Acrn Jun 17, 2026 Jul 2, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in ACRN before 2.5. It allows a devicemodel/hw/pci/virtio/virtio_net.c virtio_net_ping_rxq NULL pointer dereference for vq->used.
CVE-2021-36146 1Linux 1Acrn Jun 17, 2026 Jul 2, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 ACRN before 2.5 has a devicemodel/hw/pci/xhci.c NULL Pointer Dereference for a trb pointer.
CVE-2021-36145 1Linux 1Acrn Jun 17, 2026 Jul 2, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The Device Model in ACRN through 2.5 has a devicemodel/core/mem.c use-after-free for a freed rb_entry.
CVE-2021-36144 1Linux 1Acrn Jun 17, 2026 Jul 2, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/*.c.
CVE-2021-36143 1Linux 1Acrn Jun 17, 2026 Jul 2, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 ACRN before 2.5 has a hw/pci/virtio/virtio.c vq_endchains NULL Pointer Dereference.
CVE-2021-28691 2Linux Netapp 11Cloud Backup H300e FirmwareH300s Firmware+8 more Aug 26, 2026 Jun 29, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to disable the interface and terminate the receive kernel thread associated with queue 0 in response to...Show more Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to disable the interface and terminate the receive kernel thread associated with queue 0 in response to the frontend sending a malformed packet. Such kernel thread termination will lead to a use-after-free in Linux netback when the backend is destroyed, as the kernel thread associated with queue 0 will have already exited and thus the call to kthread_stop will be performed against a stale pointer.Show less
CVE-2020-28097 2Linux Netapp 10Cloud Backup H300e FirmwareH300s Firmware+7 more Oct 8, 2026 Jun 24, 2021 N/A· v4 5.9 MEDIUM· v3 3.6 LOW· v2 The vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback. There is a vgacon_scrolldelta out-of-bounds read, aka CID-973c096f6a85.
CVE-2021-33624 2Debian Linux 2Debian Linux Linux Kernel Oct 8, 2026 Jun 23, 2021 N/A· v4 4.7 MEDIUM· v3 4.7 MEDIUM· v2 In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted (e.g., because of type confusion) and consequently an unprivileged BPF program can read arbitrary memory locations via a side-chan...Show more In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted (e.g., because of type confusion) and consequently an unprivileged BPF program can read arbitrary memory locations via a side-channel attack, aka CID-9183671af6db.Show less
CVE-2010-2525 1Linux 1Linux Kernel Nov 21, 2024 Jun 22, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 A flaw was discovered in gfs2 file system’s handling of acls (access control lists). An unprivileged local attacker could exploit this flaw to gain access or execute any file stored in the gfs2 file system.
CVE-2021-32078 1Linux 1Linux Kernel Jun 17, 2026 Jun 17, 2021 N/A· v4 7.1 HIGH· v3 6.6 MEDIUM· v2 An Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux kernel through 5.12.11 because of the lack of a check for a value that shouldn't be negative, e.g., access to element -2 of an...Show more An Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux kernel through 5.12.11 because of the lack of a check for a value that shouldn't be negative, e.g., access to element -2 of an array, aka CID-298a58e165e4.Show less
CVE-2021-34693 2Debian Linux 2Debian Linux Linux Kernel Oct 8, 2026 Jun 14, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized.
CVE-2021-3564 3Debian FedoraprojectLinux 3Debian Linux FedoraLinux Kernel Jun 17, 2026 Jun 8, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user attach malicious HCI TTY Bluetooth device. A local user could use this flaw to crash the system. This...Show more A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user attach malicious HCI TTY Bluetooth device. A local user could use this flaw to crash the system. This flaw affects all the Linux kernel versions starting from 3.13.Show less
CVE-2020-36387 2Linux Netapp 9H300e Firmware H300s FirmwareH410c Firmware+6 more Jun 17, 2026 Jun 7, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 An issue was discovered in the Linux kernel before 5.8.2. fs/io_uring.c has a use-after-free related to io_async_task_func and ctx reference holding, aka CID-6d816e088c35.
CVE-2020-36386 1Linux 1Linux Kernel Jun 17, 2026 Jun 7, 2021 N/A· v4 7.1 HIGH· v3 5.6 MEDIUM· v2 An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hci_event.c has a slab out-of-bounds read in hci_extended_inquiry_result_evt, aka CID-51c19bf3d5cf.
CVE-2019-25045 2Linux Netapp 22Aff 8300 Firmware Aff 8700 FirmwareAff A400 Firmware+19 more Jun 17, 2026 Jun 7, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 An issue was discovered in the Linux kernel before 5.0.19. The XFRM subsystem has a use-after-free, related to an xfrm_state_fini panic, aka CID-dbb2483b2a46.
CVE-2018-25015 2Linux Netapp 9H300e Firmware H300s FirmwareH410c Firmware+6 more Nov 21, 2024 Jun 7, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 An issue was discovered in the Linux kernel before 4.14.16. There is a use-after-free in net/sctp/socket.c for a held lock after a peel off, aka CID-a0ff660058b8.
CVE-2020-36385 3Linux NetappStarwindsoftware 11H300e Firmware H300s FirmwareH410c Firmware+8 more Jun 17, 2026 Jun 7, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use-after-free because the ctx is reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called, aka...Show more An issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use-after-free because the ctx is reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called, aka CID-f5449e74802c.Show less

Previous 1...616617618...753 Next