kernel-firmware vulnerabilities (Red Hat)
524 vulnerabilities.
kernel-firmwareRed HatThe tcp_disconnect function in net/ipv4/tcp.c in the Linux kernel before 4.12 allows local users...5.5 Mediumkernel-firmwareRed HatLinux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a...7.0 Highkernel-firmwareRed HatLinux kernel: heap out-of-bounds in AF_PACKET sockets. This new issue is analogous to previously...7.8 Highkernel-firmwareRed HatThe brcmf_cfg80211_mgmt_tx function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211...7.8 Highkernel-firmwareRed HatThe ip6_find_1stfragopt function in net/ipv6/output_core.c in the Linux kernel through 4.12.3...5.5 Mediumkernel-firmwareRed HatThe mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL...7.8 Highkernel-firmwareRed HatThe Linux Kernel running on AMD64 systems will sometimes map the contents of PIE executable, the...7.8 Highkernel-firmwareRed HatThe offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMIT_STACK is set...7.8 Highkernel-firmwareRed HatAn issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack...7.4 Highkernel-firmwareRed HatThe tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel through 4.11.1...7.8 Highkernel-firmwareRed HatThe dccp_v6_request_recv_sock function in net/dccp/ipv6.c in the Linux kernel through 4.11.1...7.8 Highkernel-firmwareRed HatThe sctp_v6_create_accept_sk function in net/sctp/ipv6.c in the Linux kernel through 4.11.1...7.8 Highkernel-firmwareRed HatThe IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that...7.8 Highkernel-firmwareRed HatThe inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel through 4...7.8 Highkernel-firmwareRed HatThe NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain...9.8 Criticalkernel-firmwareRed HatThe NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote...7.5 Highkernel-firmwareRed HatThe mm subsystem in the Linux kernel through 3.2 does not properly enforce the...7.8 Highkernel-firmwareRed HatIncorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c in the...5.5 Mediumkernel-firmwareRed HatThe ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in...5.5 Mediumkernel-firmwareRed HatThe KEYS subsystem in the Linux kernel before 3.18 allows local users to gain privileges or cause...7.8 Highkernel-firmwareRed HatThe packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does...7.8 Highkernel-firmwareRed HatRace condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to...7.0 Highkernel-firmwareRed HatThe tcp_splice_read function in net/ipv4/tcp.c in the Linux kernel before 4.9.11 allows remote...7.5 Highkernel-firmwareRed HatThe dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11...7.8 Highkernel-firmwareRed HatRace condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to...7.0 Highkernel-firmwareRed HatThe simple_set_acl function in fs/posix_acl.c in the Linux kernel before 4.9.6 preserves the...4.4 Mediumkernel-firmwareRed HatAn issue was discovered in the IPv6 protocol specification, related to ICMP Packet Too Big (PTB)...8.6 Highkernel-firmwareRed HatThe sg implementation in the Linux kernel through 4.9 does not properly restrict write operations...7.0 Highkernel-firmwareRed HatAn elevation of privilege vulnerability in the kernel networking subsystem could enable a local...7.0 Highkernel-firmwareRed HatThe blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 4.8.14 does not...7.8 Highkernel-firmwareRed HatThe sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8 lacks chunk...9.8 Criticalkernel-firmwareRed HatThe mpi_powm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure...5.5 Mediumkernel-firmwareRed HatUse-after-free vulnerability in the disk_seqf_stop function in block/genhd.c in the Linux kernel...7.8 Highkernel-firmwareRed HatRace condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to...7.0 Highkernel-firmwareRed HatThe filesystem implementation in the Linux kernel through 4.8.2 preserves the setgid bit during a...4.4 Mediumkernel-firmwareRed HatThe proc_keys_show function in security/keys/proc.c in the Linux kernel through 4.8.2, when the...6.2 Mediumkernel-firmwareRed HatUse-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel...9.8 Criticalkernel-firmwareRed HatThe tcp_check_send_head function in include/net/tcp.h in the Linux kernel before 4.7.5 does not...5.5 Mediumkernel-firmwareRed HatRace condition in the ioctl_send_fib function in drivers/scsi/aacraid/commctrl.c in the Linux...5.1 Mediumkernel-firmwareRed HatRace condition in the audit_log_single_execve_arg function in kernel/auditsc.c in the Linux...4.7 Mediumkernel-firmwareRed HatThe IPv6 stack in the Linux kernel before 4.3.3 mishandles options data, which allows local users...7.3 Highkernel-firmwareRed Hatnet/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of...4.8 Mediumkernel-firmwareRed HatMultiple heap-based buffer overflows in the hiddev_ioctl_usage function in drivers/hid/usbhid...7.8 Highkernel-firmwareRed HatThe key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does...5.5 Mediumkernel-firmwareRed HatThe IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel...7.1 Highkernel-firmwareRed HatThe ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3...7.8 Highkernel-firmwareRed HatThe InfiniBand (aka IB) stack in the Linux kernel before 4.5.3 incorrectly relies on the write...7.8 Highkernel-firmwareRed HatInteger overflow in fs/aio.c in the Linux kernel before 3.4.1 allows local users to cause a...7.8 Highkernel-firmwareRed HatInteger overflow in the aio_setup_single_vector function in fs/aio.c in the Linux kernel 4.0...7.8 Highkernel-firmwareRed HatThe fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of...7.8 High- Show moreLoading…