The Linux Foundation

19 CVEs across 4 The Linux Foundation products. Browse The Linux Foundation vulnerabilities, severities, and proof-of-concept exploits.

The Linux Foundation products with known CVEs

ProductCVEs
Kernel12
Onos4
Kernel:2
Onos Sdn Controller1
The Linux Foundation CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2020-10751Medium6.12020-05-26A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single…
CVE-2019-1010234Critical9.82019-07-22The Linux Foundation ONOS 1.15.0 and ealier is affected by: Improper Input Validation. The impact is: The attacker can remotely execute any commands by sending…
CVE-2019-1010245Critical9.82019-07-19The Linux Foundation ONOS SDN Controller 1.15 and earlier versions is affected by: Improper Input Validation. The impact is: A remote attacker can execute arbi…
CVE-2019-1010252Medium4.92019-07-18The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator (or attacker) can install unintended…
CVE-2019-1010250Medium4.92019-07-18The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator (or attacker) can install unintended…
CVE-2019-1010249Medium4.92019-07-18The Linux Foundation ONOS 2.0.0 and earlier is affected by: Integer Overflow. The impact is: A network administrator (or attacker) can install unintended flow…
CVE-2019-3896High7.02019-06-19A double-free can happen in idr_remove_all() in lib/idr.c in the Linux kernel 2.6 branch. An unprivileged local attacker can use this flaw for a privilege esca…
CVE-2019-3882Medium5.52019-04-24A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio d…
CVE-2019-3901Medium4.72019-04-22A race condition in perf_event_open() allows local attackers to leak sensitive data from setuid programs. As no relevant locks (in particular the cred_guard_mu…
CVE-2019-3837Medium6.12019-04-11It was found that the net_dma code in tcp_recvmsg() in the 2.6.32 kernel as shipped in RHEL6 is thread-unsafe. So an unprivileged multi-threaded userspace appl…
CVE-2019-3887Medium5.62019-04-09A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access with nested(=1) virtualization enabled. In that, L1 guest cou…
CVE-2019-3874Medium6.52019-03-25The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service at…
CVE-2018-16880High7.02019-01-29A flaw was found in the Linux kernel's handle_rx() function in the [vhost_net] driver. A malicious virtual guest, under specific conditions, can trigger an out…
CVE-2019-3819Medium4.42019-01-25A flaw was found in the Linux kernel in the function hid_debug_events_read() in drivers/hid/hid-debug.c file which may enter an infinite loop with certain para…
CVE-2018-16885Medium4.72019-01-03A flaw was found in the Linux kernel that allows the userspace to call memcpy_fromiovecend() and similar functions with a zero offset and buffer length which c…
CVE-2018-16882High8.82019-01-03A use-after-free issue was found in the way the Linux kernel's KVM hypervisor processed posted interrupts when nested(=1) virtualization is enabled. In nested_…
CVE-2018-14634High7.82018-09-25An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged)…
CVE-2018-14633High7.02018-09-25A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in the Linux kernel in a way an authentication request from an ISC…
CVE-2018-14641Medium6.52018-09-18A security flaw was found in the ip_frag_reasm() function in net/ipv4/ip_fragment.c in the Linux kernel from 4.19-rc1 to 4.19-rc3 inclusive, which can cause a…