5.17 RC3 * * : Security Vulnerabilities

Cpe Name:cpe:2.3:o:linux:linux_kernel:5.17:rc3:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2022-27666	787	Overflow	2022-03-23	2022-07-04	4.6	None	Local	Low	Not required	Partial	Partial	Partial
A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat.
2	CVE-2022-1353		+Priv +Info	2022-04-29	2022-07-04	3.6	None	Local	Low	Not required	Partial	None	Partial
A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information.
3	CVE-2022-1048	362		2022-04-29	2022-07-04	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or similar race condition happens inside ALSA PCM for other ioctls. This flaw allows a local user to crash or potentially escalate their privileges on the system.
4	CVE-2022-1011	416	+Priv	2022-03-18	2022-07-25	4.6	None	Local	Low	Not required	Partial	Partial	Partial
A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.
5	CVE-2022-0995	787	DoS +Priv	2022-03-25	2022-04-29	6.6	None	Local	Low	Not required	Complete	None	Complete
An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.
6	CVE-2022-0854	401		2022-03-23	2022-07-04	2.1	None	Local	Low	Not required	Partial	None	None
A memory leak flaw was found in the Linux kernel’s DMA subsystem, in the way a user calls DMA_FROM_DEVICE. This flaw allows a local user to read random memory from the kernel space.
7	CVE-2022-0742	401		2022-03-18	2022-06-22	7.8	None	Remote	Low	Not required	None	None	Complete
Memory leak in icmp6 implementation in Linux Kernel 5.13+ allows a remote attacker to DoS a host by making it go out-of-memory via icmp6 packets of type 130 or 131. We recommend upgrading past commit 2d3916f3189172d5c69d33065c3c21119fe539fc.
8	CVE-2022-0646	416		2022-02-18	2022-05-11	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A flaw use after free in the Linux kernel Management Component Transport Protocol (MCTP) subsystem was found in the way user triggers cancel_work_sync after the unregister_netdev during removing device. A local user could use this flaw to crash the system or escalate their privileges on the system. It is actual from Linux Kernel 5.17-rc1 (when mctp-serial.c introduced) till 5.17-rc5.
9	CVE-2022-0516			2022-03-10	2022-03-31	4.6	None	Local	Low	Not required	Partial	Partial	Partial
A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel. This flaw allows a local attacker with a normal user privilege to obtain unauthorized memory write access. This flaw affects Linux kernel versions prior to 5.17-rc4.
10	CVE-2022-0494	200	+Info	2022-03-25	2022-07-04	4.9	None	Local	Low	Not required	Complete	None	None
A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege (CAP_SYS_ADMIN or CAP_SYS_RAWIO) to create issues with confidentiality.
11	CVE-2022-0435	787	Overflow	2022-03-25	2022-06-02	9.0	None	Remote	Low	???	Complete	Complete	Complete
A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network.
12	CVE-2021-3743	125	+Info	2022-03-04	2022-07-25	3.6	None	Local	Low	Not required	Partial	None	Partial
An out-of-bounds (OOB) memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel. A missing sanity check allows a local attacker to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.

Total number of vulnerabilities : 12 Page : 1 (This Page)