CyberSecBulletin

The Linux Kernel Organization vulnerabilities

We track 3 vulnerabilities in The Linux Kernel Organization products. 3 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on January 12, 2024.

3vulnerabilities
0critical
3high
1exploited
7.8average CVSS score

Latest The Linux Kernel Organization vulnerabilities

  • 7.8 High severity

    linux: Out-of-bounds Read

    CVE-2023-6040The Linux Kernel Organization

    An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family); While creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) value

  • 7.8 High severity

    linux: Double Free

    CVE-2022-2588The Linux Kernel OrganizationEPSS 5.87%

    It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.

  • 7.8 High severity

    Linux Kernel Use-After-Free Exploited

    CVE-2022-2586The Linux Kernel OrganizationEPSS 10.2%

    It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.