Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

7.8

HIGH

CVE-2016-2853

The aufs module for the Linux kernel 3.x and 4.x does not properly restrict the mount namespace, which allows local users to gain privileges by mounting an aufs filesystem on top of a FUSE filesystem, and then executing a crafted setuid program....

Affected Products : linux_kernel
Published: May. 02, 2016

Modified: Apr. 12, 2025
4.9

MEDIUM

CVE-2016-2188

The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device desc...

Affected Products : linux_kernel ubuntu_linux suse_linux_enterprise_desktop suse_linux_enterprise_server suse_linux_enterprise_software_development_kit suse_linux_enterprise_real_time_extension suse_linux_enterprise_debuginfo suse_linux_enterprise_live_patching suse_linux_enterprise_module_for_public_cloud suse_linux_enterprise_workstation_extension
Published: May. 02, 2016

Modified: Apr. 12, 2025
4.9

MEDIUM

CVE-2016-2187

The gtco_probe function in drivers/input/tablet/gtco.c in the Linux kernel through 4.5.2 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descripto...

Affected Products : linux_kernel ubuntu_linux suse_linux_enterprise_server suse_linux_enterprise_software_development_kit suse_linux_enterprise_debuginfo
Published: May. 02, 2016

Modified: Apr. 12, 2025
4.9

MEDIUM

CVE-2016-2186

The powermate_probe function in drivers/input/misc/powermate.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device de...

Affected Products : linux_kernel ubuntu_linux suse_linux_enterprise_desktop suse_linux_enterprise_server suse_linux_enterprise_software_development_kit suse_linux_enterprise_real_time_extension suse_linux_enterprise_debuginfo suse_linux_enterprise_live_patching suse_linux_enterprise_module_for_public_cloud suse_linux_enterprise_workstation_extension
Published: May. 02, 2016

Modified: Apr. 12, 2025
4.9

MEDIUM

CVE-2016-2185

The ati_remote2_probe function in drivers/input/misc/ati_remote2.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB devic...

Affected Products : linux_kernel ubuntu_linux suse_linux_enterprise_desktop suse_linux_enterprise_server suse_linux_enterprise_software_development_kit suse_linux_enterprise_real_time_extension suse_linux_enterprise_debuginfo suse_linux_enterprise_live_patching suse_linux_enterprise_module_for_public_cloud suse_linux_enterprise_workstation_extension
Published: May. 02, 2016

Modified: Apr. 12, 2025
7.5

HIGH

CVE-2016-2117

The atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which allows remote attackers to obtain sensitive information from kernel memory by reading packet data....

Affected Products : linux_kernel ubuntu_linux vm_server
Published: May. 02, 2016

Modified: Apr. 12, 2025
7.8

HIGH

CVE-2016-2070

The tcp_cwnd_reduction function in net/ipv4/tcp_input.c in the Linux kernel before 4.3.5 allows remote attackers to cause a denial of service (divide-by-zero error and system crash) via crafted TCP traffic....

Affected Products : linux_kernel
Published: May. 02, 2016

Modified: Apr. 12, 2025
4.7

MEDIUM

CVE-2016-2053

The asn1_ber_decoder function in lib/asn1_decoder.c in the Linux kernel before 4.3 allows attackers to cause a denial of service (panic) via an ASN.1 BER file that lacks a public key, leading to mishandling by the public_key_verify_signature function in c...

Affected Products : linux_kernel
Published: May. 02, 2016

Modified: Apr. 12, 2025
7.8

HIGH

CVE-2016-1576

The overlayfs implementation in the Linux kernel through 4.5.2 does not properly restrict the mount namespace, which allows local users to gain privileges by mounting an overlayfs filesystem on top of a FUSE filesystem, and then executing a crafted setuid...

Affected Products : linux_kernel ubuntu_linux ubuntu_core ubuntu_touch
Published: May. 02, 2016

Modified: Apr. 12, 2025
7.8

HIGH

CVE-2016-1575

The overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory....

Affected Products : linux_kernel ubuntu_linux ubuntu_core ubuntu_touch
Published: May. 02, 2016

Modified: Apr. 12, 2025
5.1

MEDIUM

CVE-2015-8839

Multiple race conditions in the ext4 filesystem implementation in the Linux kernel before 4.5 allow local users to cause a denial of service (disk corruption) by writing to a page that is associated with a different user's file after unsynchronized hole p...

Affected Products : linux_kernel ubuntu_linux
Published: May. 02, 2016

Modified: Apr. 12, 2025
7.8

HIGH

CVE-2015-8830

Integer overflow in the aio_setup_single_vector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause a denial of service or possibly have unspecified other impact via a large AIO iovec. NOTE: this vulnerability exists because of a CVE...

Affected Products : linux_kernel
Published: May. 02, 2016

Modified: Apr. 12, 2025
7.5

HIGH

CVE-2015-8746

fs/nfs/nfs4proc.c in the NFS client in the Linux kernel before 4.2.2 does not properly initialize memory for migration recovery operations, which allows remote NFS servers to cause a denial of service (NULL pointer dereference and panic) via crafted netwo...

Affected Products : linux_kernel
Published: May. 02, 2016

Modified: Apr. 12, 2025
4.9

MEDIUM

CVE-2015-8324

The ext4 implementation in the Linux kernel before 2.6.34 does not properly track the initialization of certain data structures, which allows physically proximate attackers to cause a denial of service (NULL pointer dereference and panic) via a crafted US...

Affected Products : linux_kernel
Published: May. 02, 2016

Modified: Apr. 12, 2025
7.8

HIGH

CVE-2015-8019

The skb_copy_and_csum_datagram_iovec function in net/core/datagram.c in the Linux kernel 3.14.54 and 3.18.22 does not accept a length argument, which allows local users to cause a denial of service (memory corruption) or possibly have unspecified other im...

Affected Products : linux_kernel
Published: May. 02, 2016

Modified: Apr. 12, 2025
5.5

MEDIUM

CVE-2015-4178

The fs_pin implementation in the Linux kernel before 4.0.5 does not ensure the internal consistency of a certain list data structure, which allows local users to cause a denial of service (system crash) by leveraging user-namespace root access for an MNT_...

Affected Products : linux_kernel
Published: May. 02, 2016

Modified: Apr. 12, 2025
5.5

MEDIUM

CVE-2015-4177

The collect_mounts function in fs/namespace.c in the Linux kernel before 4.0.5 does not properly consider that it may execute after a path has been unmounted, which allows local users to cause a denial of service (system crash) by leveraging user-namespac...

Affected Products : linux_kernel
Published: May. 02, 2016

Modified: Apr. 12, 2025
5.5

MEDIUM

CVE-2015-4176

fs/namespace.c in the Linux kernel before 4.0.2 does not properly support mount connectivity, which allows local users to read arbitrary files by leveraging user-namespace root access for deletion of a file or directory....

Affected Products : linux_kernel
Published: May. 02, 2016

Modified: Apr. 12, 2025
4.7

MEDIUM

CVE-2015-4170

Race condition in the ldsem_cmpxchg function in drivers/tty/tty_ldsem.c in the Linux kernel before 3.13-rc4-next-20131218 allows local users to cause a denial of service (ldsem_down_read and ldsem_down_write deadlock) by establishing a new tty thread duri...

Affected Products : linux_kernel enterprise_linux_server_eus enterprise_linux_compute_node_eus enterprise_linux_for_ibm_z_systems_eus enterprise_linux_for_power_big_endian_eus enterprise_linux_for_power_little_endian_eus
Published: May. 02, 2016

Modified: Apr. 12, 2025
7.8

HIGH

CVE-2015-2686

net/socket.c in the Linux kernel 3.19 before 3.19.3 does not validate certain range data for (1) sendto and (2) recvfrom system calls, which allows local users to gain privileges by leveraging a subsystem that uses the copy_from_iter function in the iov_i...

Affected Products : linux_kernel
Published: May. 02, 2016

Modified: Apr. 12, 2025

Showing 20 of 292797 Results

Browse by Apps

Latest CVE Feed

7.8

4.9

4.9

4.9

4.9

7.5

7.8

4.7

7.8

7.8

5.1

7.8

7.5

4.9

7.8

5.5

5.5

5.5

4.7

7.8

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable