Vulnerabilities (CVE)

Filtered by vendor Linux Subscribe
Total 15150 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2002-0499 1 Linux 1 Linux Kernel 2025-04-03 2.1 LOW N/A
The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories.
CVE-1999-0401 1 Linux 1 Linux Kernel 2025-04-03 3.7 LOW N/A
A race condition in Linux 2.2.1 allows local users to read arbitrary memory from /proc files.
CVE-2005-1263 1 Linux 1 Linux Kernel 2025-04-03 7.2 HIGH N/A
The elf_core_dump function in binfmt_elf.c for Linux kernel 2.x.x to 2.2.27-rc2, 2.4.x to 2.4.31-pre1, and 2.6.x to 2.6.12-rc4 allows local users to execute arbitrary code via an ELF binary that, in certain conditions involving the create_elf_tables function, causes a negative length argument to pass a signed integer comparison, leading to a buffer overflow.
CVE-2003-0984 1 Linux 1 Linux Kernel 2025-04-03 4.6 MEDIUM N/A
Real time clock (RTC) routines in Linux kernel 2.4.23 and earlier do not properly initialize their structures, which could leak kernel data to user space.
CVE-2002-2254 1 Linux 1 Linux Kernel 2025-04-03 2.1 LOW N/A
The experimental IP packet queuing feature in Netfilter / IPTables in Linux kernel 2.4 up to 2.4.19 and 2.5 up to 2.5.31, when a privileged process exits and network traffic is not being queued, may allow a later process with the same Process ID (PID) to access certain network traffic that would otherwise be restricted.
CVE-2004-0077 4 Linux, Netwosix, Redhat and 1 more 7 Linux Kernel, Netwosix Linux, Bigmem Kernel and 4 more 2025-04-03 7.2 HIGH N/A
The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.
CVE-2004-1137 2 Linux, Ubuntu 2 Linux Kernel, Ubuntu Linux 2025-04-03 10.0 HIGH N/A
Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers to cause a denial of service or execute arbitrary code via (1) the ip_mc_source function, which decrements a counter to -1, or (2) the igmp_marksources function, which does not properly validate IGMP message parameters and performs an out-of-bounds read.
CVE-2003-0127 1 Linux 1 Linux Kernel 2025-04-03 7.2 HIGH N/A
The kernel module loader in Linux kernel 2.2.x before 2.2.25, and 2.4.x before 2.4.21, allows local users to gain root privileges by using ptrace to attach to a child process that is spawned by the kernel.
CVE-2002-0570 1 Linux 1 Linux Kernel 2025-04-03 2.1 LOW N/A
The encrypted loop device in Linux kernel 2.4.10 and earlier does not authenticate the entity that is encrypting data, which allows local users to modify encrypted data without knowing the key.
CVE-2005-1041 1 Linux 1 Linux Kernel 2025-04-03 2.1 LOW N/A
The fib_seq_start function in fib_hash.c in Linux kernel allows local users to cause a denial of service (system crash) via /proc/net/route.
CVE-1999-0720 1 Linux 1 Linux Kernel 2025-04-03 4.6 MEDIUM N/A
The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users.
CVE-2004-1017 1 Linux 1 Linux Kernel 2025-04-03 10.0 HIGH N/A
Multiple "overflows" in the io_edgeport driver for Linux kernel 2.4.x have unknown impact and unknown attack vectors.
CVE-2006-1523 1 Linux 1 Linux Kernel 2025-04-03 10.0 HIGH N/A
The __group_complete_signal function in the RCU signal handling (signal.c) in Linux kernel 2.6.16, and possibly other versions, has unknown impact and attack vectors related to improper use of BUG_ON.
CVE-2006-0555 1 Linux 1 Linux Kernel 2025-04-03 2.1 LOW N/A
The Linux Kernel before 2.6.15.5 allows local users to cause a denial of service (NFS client panic) via unknown attack vectors related to the use of O_DIRECT (direct I/O).
CVE-2003-0961 1 Linux 1 Linux Kernel 2025-04-03 7.2 HIGH N/A
Integer overflow in the do_brk function for the brk system call in Linux kernel 2.4.22 and earlier allows local users to gain root privileges.
CVE-2005-3806 1 Linux 1 Linux Kernel 2025-04-03 6.6 MEDIUM N/A
The IPv6 flow label handling code (ip6_flowlabel.c) in Linux kernels 2.4 up to 2.4.32 and 2.6 before 2.6.14 modifies the wrong variable in certain circumstances, which allows local users to corrupt kernel memory or cause a denial of service (crash) by triggering a free of non-allocated memory.
CVE-2005-0756 1 Linux 1 Linux Kernel 2025-04-03 2.1 LOW N/A
ptrace in Linux kernel 2.6.8.1 does not properly verify addresses on the amd64 platform, which allows local users to cause a denial of service (kernel crash).
CVE-2006-0039 1 Linux 1 Linux Kernel 2025-04-03 4.7 MEDIUM N/A
Race condition in the do_add_counters function in netfilter for Linux kernel 2.6.16 allows local users with CAP_NET_ADMIN capabilities to read kernel memory by triggering the race condition in a way that produces a size value that is inconsistent with allocated memory, which leads to a buffer over-read in IPT_ENTRY_ITERATE.
CVE-2002-0046 1 Linux 1 Linux Kernel 2025-04-03 5.0 MEDIUM N/A
Linux kernel, and possibly other operating systems, allows remote attackers to read portions of memory via a series of fragmented ICMP packets that generate an ICMP TTL Exceeded response, which includes portions of the memory in the response packet.
CVE-2004-0658 1 Linux 1 Linux Kernel 2025-04-03 7.2 HIGH N/A
Integer overflow in the hpsb_alloc_packet function (incorrectly reported as alloc_hpsb_packet) in IEEE 1394 (Firewire) driver 2.4 and 2.6 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via the functions (1) raw1394_write, (2) state_connected, (3) handle_remote_request, or (4) hpsb_make_writebpacket.