p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de linux-raspi2 · Página 25

Vulnerabilidades publicadas para linux-raspi2 en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.

Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 740

  1. CVE-2019-19227

    Media · CVSS 5.5EPSS 0,64%Corrección disponible

    CVE-2019-19227

    In the AppleTalk subsystem in the Linux kernel before 5.1, there is a potential NULL pointer dereference because register_snap_client may return NULL. This will lead to denial of service in net/appletalk/aarp.c and net/appletalk/ddp.c, as demonstrated by unregister_snap_client, aka CID-9804501fa122.

    • Actualiza a 4.15.0-1055.59
    Publicación Actualización
  2. CVE-2019-19039

    Media · CVSS 5.5EPSS 0,7%Corrección disponible

    CVE-2019-19039

    __btrfs_free_extent in fs/btrfs/extent-tree.c in the Linux kernel through 5.3.12 calls btrfs_print_leaf in a certain ENOENT case, which allows local users to obtain potentially sensitive information about register values via the dmesg program. NOTE: The BTRFS development team disputes this issues as not being a vulnerability because “1) The kernel provide facilities to restrict access to dmesg - dmesg_restrict=1 sysctl option. So it's really up to the system administrator to judge whether dmesg access shall be disallowed or not. 2) WARN/WARN_ON are widely used macros in the linux kernel. If this CVE is considered valid this would mean there a

    • Actualiza a 4.15.0-1065.69
    Publicación Actualización
  3. CVE-2019-19083

    Media · CVSS 4.7EPSS 0,5%Corrección disponible

    CVE-2019-19083

    Memory leaks in *clock_source_create() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel before 5.3.8 allow attackers to cause a denial of service (memory consumption). This affects the dce112_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce112/dce112_resource.c, the dce100_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce100/dce100_resource.c, the dcn10_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dcn10/dcn10_resource.c, the dcn20_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dcn20/dcn20_resource.c, the dce120_clock_source_create() function in driv

    • Actualiza a 4.15.0-1053.57
    Publicación Actualización
  4. CVE-2019-19082

    Media · CVSS 4.7EPSS 0,38%Corrección disponible

    CVE-2019-19082

    Memory leaks in *create_resource_pool() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption). This affects the dce120_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce120/dce120_resource.c, the dce110_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce110/dce110_resource.c, the dce100_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce100/dce100_resource.c, the dcn10_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dcn10/dcn10_resource.c, and the dce112_create_resource_pool() f

    • Actualiza a 4.15.0-1055.59
    Publicación Actualización
  5. CVE-2019-19078

    Alta · CVSS 7.5EPSS 6,62%Corrección disponible

    CVE-2019-19078

    A memory leak in the ath10k_usb_hif_tx_sg() function in drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-b8d17e7d93d2.

    • Actualiza a 4.15.0-1055.59
    Publicación Actualización
  6. CVE-2019-19075

    Alta · CVSS 7.5EPSS 4,04%Corrección disponible

    CVE-2019-19075

    A memory leak in the ca8210_probe() function in drivers/net/ieee802154/ca8210.c in the Linux kernel before 5.3.8 allows attackers to cause a denial of service (memory consumption) by triggering ca8210_get_platform_data() failures, aka CID-6402939ec86e.

    • Actualiza a 4.15.0-1052.56
    Publicación Actualización
  7. CVE-2019-19073

    Media · CVSS 4EPSS 0,53%Corrección disponible

    CVE-2019-19073

    Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering wait_for_completion_timeout() failures. This affects the htc_config_pipe_credits() function, the htc_setup_complete() function, and the htc_connect_service() function, aka CID-853acf7caf10.

    • Actualiza a 4.15.0-1071.75
    Publicación Actualización
  8. CVE-2019-19071

    Alta · CVSS 7.5EPSS 3,84%Corrección disponible

    CVE-2019-19071

    A memory leak in the rsi_send_beacon() function in drivers/net/wireless/rsi/rsi_91x_mgmt.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering rsi_prepare_beacon() failures, aka CID-d563131ef23c.

    • Actualiza a 4.15.0-1055.59
    Publicación Actualización
  9. CVE-2019-19068

    Media · CVSS 4.6EPSS 0,45%Corrección disponible

    CVE-2019-19068

    A memory leak in the rtl8xxxu_submit_int_urb() function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-a2cdd07488e6.

    • Actualiza a 4.15.0-1057.61
    Publicación Actualización
  10. CVE-2019-19067

    Media · CVSS 4.4EPSS 0,47%Corrección disponible

    CVE-2019-19067

    Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c in the Linux kernel before 5.3.8 allow attackers to cause a denial of service (memory consumption) by triggering mfd_add_hotplug_devices() or pm_genpd_add_device() failures, aka CID-57be09c6e874. NOTE: third parties dispute the relevance of this because the attacker must already have privileges for module loading

    • Actualiza a 4.15.0-1071.75
    Publicación Actualización
  11. CVE-2019-19066

    Media · CVSS 4.7EPSS 0,45%Corrección disponible

    CVE-2019-19066

    A memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering bfa_port_get_stats() failures, aka CID-0e62395da2bd.

    • Actualiza a 4.15.0-1057.61
    Publicación Actualización
  12. CVE-2019-19065

    Media · CVSS 4.7EPSS 0,49%Corrección disponible

    CVE-2019-19065

    A memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering rhashtable_init() failures, aka CID-34b3be18a04e. NOTE: This has been disputed as not a vulnerability because "rhashtable_init() can only fail if it is passed invalid values in the second parameter's struct, but when invoked from sdma_init() that is a pointer to a static const struct, so an attacker could only trigger failure if they could corrupt kernel memory (in which case a small memory leak is not a significant problem).

    • Actualiza a 4.15.0-1052.56
    Publicación Actualización
  13. CVE-2019-19062

    Media · CVSS 4.7EPSS 0,63%Corrección disponible

    CVE-2019-19062

    A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures, aka CID-ffdde5932042.

    • Actualiza a 4.15.0-1055.59
    Publicación Actualización

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →