← Back

Linux

linux

13,697 CVEs • 18 products

Products (18)

Click to collapse
Toggle
Tizen
tizen
Kernel
kernel
Acrn
acrn
Util Linux
util-linux
Mac80211
mac80211
Audit
audit
Systemd
systemd
Dhcp6c
dhcp6c
Parduslinux
parduslinux
Linux
linux

CVEs (13,697)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Linux
Mandrakesoft
4Linux Kernel
Mandrake LinuxMandrake Linux Corporate Server+1 more
Apr 16, 2026
Aug 27, 2003
N/A· v4
N/A· v3
1.2 LOW· v2
A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service (crash).
1Linux
1Linux Kernel
Apr 16, 2026
Aug 27, 2003
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The connection tracking core of Netfilter for Linux 2.4.20, with CONFIG_IP_NF_CONNTRACK enabled or the ip_conntrack module loaded, allows remote attackers to cause a denial of service (resource consumption) due to an inc...Show more
The connection tracking core of Netfilter for Linux 2.4.20, with CONFIG_IP_NF_CONNTRACK enabled or the ip_conntrack module loaded, allows remote attackers to cause a denial of service (resource consumption) due to an inconsistency with Linux 2.4.20's support of linked lists, which causes Netfilter to fail to identify connections with an UNCONFIRMED status and use large timeouts.Show less
1Linux
1Linux Kernel
Apr 16, 2026
Aug 18, 2003
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The kernel strncpy function in Linux 2.4 and 2.5 does not %NUL pad the buffer on architectures other than x86, as opposed to the expected behavior of strncpy as implemented in libc, which could lead to information leaks.
1Linux
1Linux Kernel
Apr 16, 2026
Aug 7, 2003
N/A· v4
N/A· v3
2.1 LOW· v2
The /proc filesystem in Linux allows local users to obtain sensitive information by opening various entries in /proc/self before executing a setuid program, which causes the program to fail to change the ownership and pe...Show more
The /proc filesystem in Linux allows local users to obtain sensitive information by opening various entries in /proc/self before executing a setuid program, which causes the program to fail to change the ownership and permissions of those entries.Show less
1Linux
1Linux Kernel
Apr 16, 2026
Aug 7, 2003
N/A· v4
N/A· v3
2.1 LOW· v2
The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the calling process, which allows local users to gain read access to restricted file descriptors.
1Linux
1Linux Kernel
Apr 16, 2026
Jul 25, 2003
N/A· v4
N/A· v3
2.1 LOW· v2
Integer signedness error in the Linux Socket Filter implementation (filter.c) in Linux 2.4.3-pre3 to 2.4.22-pre10 allows attackers to cause a denial of service (crash).
1Linux
1Linux Kernel
Apr 16, 2026
Jul 24, 2003
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The Linux 2.0 kernel IP stack does not properly calculate the size of an ICMP citation, which causes it to include portions of unauthorized memory in ICMP error responses.
1Linux
1Linux Kernel
Apr 16, 2026
Jun 16, 2003
N/A· v4
N/A· v3
3.6 LOW· v2
The ioperm system call in Linux kernel 2.4.20 and earlier does not properly restrict privileges, which allows local users to gain read or write access to certain I/O ports.
1Linux
1Linux Kernel
Apr 16, 2026
May 27, 2003
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The route cache implementation in Linux 2.4, and the Netfilter IP conntrack module, allows remote attackers to cause a denial of service (CPU consumption) via packets with forged source addresses that cause a large numbe...Show more
The route cache implementation in Linux 2.4, and the Netfilter IP conntrack module, allows remote attackers to cause a denial of service (CPU consumption) via packets with forged source addresses that cause a large number of hash table collisions.Show less
1Linux
1Linux Kernel
Apr 16, 2026
Mar 31, 2003
N/A· v4
N/A· v3
7.2 HIGH· v2
The kernel module loader in Linux kernel 2.2.x before 2.2.25, and 2.4.x before 2.4.21, allows local users to gain root privileges by using ptrace to attach to a child process that is spawned by the kernel.
1Linux
1Linux Kernel
Apr 16, 2026
Feb 19, 2003
N/A· v4
N/A· v3
3.6 LOW· v2
Linux kernel 2.4.10 through 2.4.21-pre4 does not properly handle the O_DIRECT feature, which allows local attackers with write privileges to read portions of previously deleted files, or cause file system corruption.
4Freebsd
LinuxMicrosoft+1 more
5Freebsd
Linux KernelNetbsd+2 more
Apr 16, 2026
Jan 17, 2003
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as d...Show more
Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.Show less
1Linux
1Linux Kernel
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
2.1 LOW· v2
The experimental IP packet queuing feature in Netfilter / IPTables in Linux kernel 2.4 up to 2.4.19 and 2.5 up to 2.5.31, when a privileged process exits and network traffic is not being queued, may allow a later process...Show more
The experimental IP packet queuing feature in Netfilter / IPTables in Linux kernel 2.4 up to 2.4.19 and 2.5 up to 2.5.31, when a privileged process exits and network traffic is not being queued, may allow a later process with the same Process ID (PID) to access certain network traffic that would otherwise be restricted.Show less
1Linux
1Linux Kernel
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
2.1 LOW· v2
ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKET_MR_PROMISC, which could allow attackers to sniff the...Show more
ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKET_MR_PROMISC, which could allow attackers to sniff the network without detection, as demonstrated using libpcap.Show less
1Linux
1Linux Kernel
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
2.1 LOW· v2
Linux kernel 2.4.1 through 2.4.19 sets root's NR_RESERVED_FILES limit to 10 files, which allows local users to cause a denial of service (resource exhaustion) by opening 10 setuid binaries.
1Linux
1Linux Kernel
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the pcilynx ieee1394 firewire driver (pcilynx.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors, related to "wrap handling."
1Linux
1Linux Kernel
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
10.0 HIGH· v2
Signed integer overflow in the bttv_read function in the bttv driver (bttv-driver.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors.
1Linux
1Linux Kernel
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
2.1 LOW· v2
The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers, which could lead to an information leak on processors that do not clear all relevant SSE registers.
1Linux
1Linux Kernel
Apr 16, 2026
Dec 23, 2002
N/A· v4
N/A· v3
2.1 LOW· v2
Linux kernel 2.2.x allows local users to cause a denial of service (crash) by using the mmap() function with a PROT_READ parameter to access non-readable memory pages through the /proc/pid/mem interface.
2Linux
Trustix
2Linux Kernel
Secure Linux
Apr 16, 2026
Dec 11, 2002
N/A· v4
N/A· v3
2.1 LOW· v2
The Linux kernel 2.4.20 and earlier, and 2.5.x, when running on x86 systems, allows local users to cause a denial of service (hang) via the emulation mode, which does not properly clear TF and NT EFLAGs.