linux-snapdragon vulnerabilities (Ubuntu)
1,104 vulnerabilities.
linux-snapdragonUbuntuJonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This...5.3 Mediumlinux-snapdragonUbuntuSACK can cause extensive memory use via fragmented resend queue5.3 Mediumlinux-snapdragonUbuntuInteger overflow in TCP_SKB_CB(skb)->tcp_gso_segs7.5 Highlinux-snapdragonUbuntuA flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies...5.9 Mediumlinux-snapdragonUbuntuAn issue was discovered in the Linux kernel before 5.0. The function __mdiobus_register() in...5.5 Mediumlinux-snapdragonUbuntuAn issue was discovered in the Linux kernel before 4.20.15. The nfc_llcp_build_tlv function in...7.5 Highlinux-snapdragonUbuntuInsufficient access control in the Intel(R) PROSet/Wireless WiFi Software driver before version...7.4 Highlinux-snapdragonUbuntuIn uvc_parse_standard_control of uvc_driver.c, there is a possible out-of-bound read due to...5.5 Mediumlinux-snapdragonUbuntuA flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in...8.0 Highlinux-snapdragonUbuntuAn issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c in...4.1 Mediumlinux-snapdragonUbuntuAn issue was discovered in the efi subsystem in the Linux kernel through 5.1.5....5.5 Mediumlinux-snapdragonUbuntuIn the tun subsystem in the Linux kernel before 4.13.14, dev_get_valid_name is not called before...5.5 Mediumlinux-snapdragonUbuntuInsufficient input validation in Kernel Mode Driver in Intel(R) i915 Graphics for Linux before...7.8 Highlinux-snapdragonUbuntufs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in...5.5 Mediumlinux-snapdragonUbuntuMicroarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some...5.6 Mediumlinux-snapdragonUbuntuMicroarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors...5.6 Mediumlinux-snapdragonUbuntuMicroarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing...5.6 Mediumlinux-snapdragonUbuntuMicroarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors...5.6 Mediumlinux-snapdragonUbuntuThe do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c in the Linux kernel before 5.0.15...3.3 Lowlinux-snapdragonUbuntuIn the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due...7.8 Highlinux-snapdragonUbuntuAn issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8....8.1 Highlinux-snapdragonUbuntuAn issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur...7.5 Highlinux-snapdragonUbuntuAn issue was discovered in the Linux kernel before 4.20. There is a race condition in...8.1 Highlinux-snapdragonUbuntuThe print_binder_transaction_ilocked function in drivers/android/binder.c in the Linux kernel 4...5.5 Mediumlinux-snapdragonUbuntuThe print_binder_ref_olocked function in drivers/android/binder.c in the Linux kernel 4.14.90...5.5 Mediumlinux-snapdragonUbuntuThe coredump implementation in the Linux kernel before 5.0.10 does not use locking or other...7.0 Highlinux-snapdragonUbuntuAn infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and...6.3 Mediumlinux-snapdragonUbuntuA flaw was found in the Linux kernel's vfio interface implementation that permits violation of...4.7 Mediumlinux-snapdragonUbuntuThe Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel before 5.0...7.0 Highlinux-snapdragonUbuntuThe Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant...7.8 Highlinux-snapdragonUbuntuA race condition in perf_event_open() allows local attackers to leak sensitive data from setuid...5.6 Mediumlinux-snapdragonUbuntuBroadcom brcmfmac driver is vulnerable to a frame validation bypass7.9 Highlinux-snapdragonUbuntuBroadcom brcmfmac driver is vulnerable to a heap buffer overflow7.9 Highlinux-snapdragonUbuntu** DISPUTED ** The Linux kernel through 5.0.7, when CONFIG_IA32_AOUT is enabled and ia32_aout is...2.5 Lowlinux-snapdragonUbuntuThe Linux kernel before 4.8 allows local users to bypass ASLR on setuid programs (such as /bin/su...4.7 Mediumlinux-snapdragonUbuntuIn em28xx_unregister_dvb of em28xx-dvb.c, there is a possible use after free issue. This could...7.8 Highlinux-snapdragonUbuntuThe SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem....5.3 Mediumlinux-snapdragonUbuntuAn issue where a provided address with access_ok() is not checked was discovered in...7.8 Highlinux-snapdragonUbuntuIn the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap...5.5 Mediumlinux-snapdragonUbuntuThe permissions on /proc/iomem were world-readable. This could lead to local information...5.5 Mediumlinux-snapdragonUbuntuIn the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows...9.8 Criticallinux-snapdragonUbuntuThe KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.5.5 Mediumlinux-snapdragonUbuntuThe KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.7.8 Highlinux-snapdragonUbuntuIn the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles...8.1 Highlinux-snapdragonUbuntuIn the Linux kernel before 4.9.3, fs/xfs/xfs_aops.c allows local users to cause a denial of...4.7 Mediumlinux-snapdragonUbuntuIn change_port_settings in drivers/usb/serial/io_ti.c in the Linux kernel before 4.11.3, local...5.5 Mediumlinux-snapdragonUbuntuA flaw was found in the Linux kernel in the function hid_debug_events_read() in drivers/hid/hid...4.2 Mediumlinux-snapdragonUbuntuA heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux...6.5 Mediumlinux-snapdragonUbuntuA heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel...6.5 Mediumlinux-snapdragonUbuntuIn PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because...6.7 Medium- Show moreLoading…