Search CVE reports
1141 – 1150 of 1377 results
The MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to obtain sensitive information from kernel stack memory via...
126 affected packages
linux-gke, linux-aws-fips, linux-azure-fips, linux-gcp-fips, linux-nvidia-bos...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| linux-gke | Vulnerable | Not affected | Not affected | Ignored | Not in release |
| linux-aws-fips | Not in release | Vulnerable | Not affected | Not affected | Not affected |
| linux-azure-fips | Not in release | Vulnerable | Not affected | Not affected | Not affected |
| linux-gcp-fips | Not in release | Vulnerable | Not affected | Not affected | Not affected |
| linux-nvidia-bos | Vulnerable | Not in release | Not in release | Not in release | Not in release |
| linux-nvidia-7.0 | Not in release | Vulnerable | Not in release | Not in release | Not in release |
| linux-hwe-7.0 | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-oem-7.0 | Not affected | Not in release | Not in release | Not in release | Not in release |
| linux | Not affected | Not affected | Not affected | Not affected | Not affected |
| linux-armadaxp | — | — | — | — | Not in release |
| linux-aws | Not affected | Not affected | Not affected | Not affected | Not affected |
| linux-aws-5.15 | Not in release | Not in release | Not in release | Not affected | Not in release |
| linux-aws-5.4 | Not in release | Not in release | Not in release | Not in release | Not affected |
| linux-aws-6.14 | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-aws-6.17 | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-aws-6.8 | Not in release | Not in release | Not affected | Not in release | Not in release |
| linux-aws-hwe | Not in release | Not in release | Not in release | Not in release | Not in release |
| linux-azure | Not affected | Not affected | Not affected | Not affected | Not affected |
| linux-azure-4.15 | Not in release | Not in release | Not in release | Not in release | Not affected |
| linux-azure-5.15 | Not in release | Not in release | Not in release | Not affected | Not in release |
| linux-azure-5.4 | Not in release | Not in release | Not in release | Not in release | Not affected |
| linux-azure-6.11 | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-azure-6.14 | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-azure-6.17 | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-azure-6.8 | Not in release | Not in release | Not affected | Not in release | Not in release |
| linux-azure-edge | Not in release | Not in release | Not in release | Not in release | Not affected |
| linux-azure-fde | Not affected | Not affected | Not affected | Ignored | Not in release |
| linux-azure-fde-5.15 | Not in release | Not in release | Not in release | Not affected | Not in release |
| linux-azure-fde-6.14 | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-azure-fde-6.17 | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-azure-fde-6.8 | Not in release | Not in release | Not affected | Not in release | Not in release |
| linux-azure-nvidia | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-azure-nvidia-6.14 | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-bluefield | Not in release | Not in release | Not in release | Not affected | Not in release |
| linux-ec2 | — | — | — | — | Not in release |
| linux-euclid | — | — | — | — | Not in release |
| linux-fips | Not in release | Vulnerable | Not affected | Not affected | Not affected |
| linux-flo | — | — | — | — | Not in release |
| linux-fsl-imx51 | — | — | — | — | Not in release |
| linux-gcp | Not affected | Not affected | Not affected | Not affected | Not affected |
| linux-gcp-4.15 | Not in release | Not in release | Not in release | Not in release | Not affected |
| linux-gcp-5.15 | Not in release | Not in release | Not in release | Not affected | Not in release |
| linux-gcp-5.4 | Not in release | Not in release | Not in release | Not in release | Not affected |
| linux-gcp-6.11 | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-gcp-6.14 | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-gcp-6.17 | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-gcp-6.8 | Not in release | Not in release | Not affected | Not in release | Not in release |
| linux-gcp-edge | — | — | — | — | Not affected |
| linux-gkeop | Not in release | Not affected | Not affected | Ignored | Not in release |
| linux-gkeop-5.15 | Not in release | Not in release | Not in release | Ignored | Not in release |
| linux-goldfish | — | — | — | — | Not in release |
| linux-grouper | — | — | — | — | Not in release |
| linux-hwe | Not in release | Not in release | Not in release | Not in release | Not affected |
| linux-hwe-5.15 | Not in release | Not in release | Not in release | Not affected | Not in release |
| linux-hwe-5.4 | Not in release | Not in release | Not in release | Not in release | Not affected |
| linux-hwe-6.11 | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-hwe-6.14 | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-hwe-6.17 | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-hwe-6.8 | Not in release | Not in release | Not affected | Not in release | Not in release |
| linux-hwe-edge | Not in release | Not in release | Not in release | Not in release | Not affected |
| linux-ibm | Vulnerable | Not affected | Not affected | Not affected | Not in release |
| linux-ibm-5.15 | Not in release | Not in release | Not in release | Not affected | Not in release |
| linux-ibm-5.4 | Not in release | Not in release | Not in release | Not in release | Not affected |
| linux-ibm-6.8 | Not in release | Not in release | Not affected | Not in release | Not in release |
| linux-intel | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-intel-iot-realtime | Not in release | Not in release | Not affected | Not in release | Not in release |
| linux-intel-iotg | Not in release | Not in release | Not affected | Not in release | Not in release |
| linux-intel-iotg-5.15 | Not in release | Not in release | Not in release | Not affected | Not in release |
| linux-iot | Not in release | Not in release | Not in release | Not affected | Not in release |
| linux-kvm | Not in release | Not in release | Not affected | Not affected | Not affected |
| linux-linaro-omap | — | — | — | — | Not in release |
| linux-linaro-shared | — | — | — | — | Not in release |
| linux-linaro-vexpress | — | — | — | — | Not in release |
| linux-lowlatency | Not in release | Not affected | Not affected | Not in release | Not in release |
| linux-lowlatency-hwe-5.15 | Not in release | Not in release | Not in release | Not affected | Not in release |
| linux-lowlatency-hwe-6.11 | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-lowlatency-hwe-6.8 | Not in release | Not in release | Not affected | Not in release | Not in release |
| linux-lts-quantal | — | — | — | — | Not in release |
| linux-lts-raring | — | — | — | — | Not in release |
| linux-lts-trusty | — | — | — | — | Not in release |
| linux-lts-utopic | — | — | — | — | Not in release |
| linux-lts-vivid | — | — | — | — | Not in release |
| linux-lts-wily | — | — | — | — | Not in release |
| linux-lts-xenial | Not in release | Not in release | Not in release | Not in release | Not in release |
| linux-maguro | — | — | — | — | Not in release |
| linux-mako | — | — | — | — | Not in release |
| linux-manta | — | — | — | — | Not in release |
| linux-mvl-dove | — | — | — | — | Not in release |
| linux-nvidia | Vulnerable | Not affected | Not affected | Not in release | Not in release |
| linux-nvidia-6.11 | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-nvidia-6.17 | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-nvidia-6.8 | Not in release | Not in release | Not affected | Not in release | Not in release |
| linux-nvidia-bos-7.0 | Not in release | Not in release | Not in release | Not in release | Not in release |
| linux-nvidia-lowlatency | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-nvidia-tegra | Not in release | Not affected | Not affected | Not in release | Not in release |
| linux-nvidia-tegra-5.15 | Not in release | Not in release | Not in release | Not affected | Not in release |
| linux-nvidia-tegra-igx | Not in release | Not in release | Not affected | Not in release | Not in release |
| linux-oem | Not in release | Not in release | Not in release | Not in release | Not affected |
| linux-oem-6.11 | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-oem-6.14 | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-oem-6.17 | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-oem-6.8 | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-oracle | Not affected | Not affected | Not affected | Not affected | Not affected |
| linux-oracle-5.15 | Not in release | Not in release | Not in release | Not affected | Not in release |
| linux-oracle-5.4 | Not in release | Not in release | Not in release | Not in release | Not affected |
| linux-oracle-6.14 | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-oracle-6.17 | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-oracle-6.8 | Not in release | Not in release | Not affected | Not in release | Not in release |
| linux-qcm-msm | — | — | — | — | Not in release |
| linux-raspi | Not affected | Not affected | Not affected | Not affected | Not in release |
| linux-raspi-5.4 | Not in release | Not in release | Not in release | Not in release | Not affected |
| linux-raspi-realtime | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-raspi2 | Not in release | Not in release | Not in release | Ignored | Not affected |
| linux-realtime | Not affected | Not affected | Not affected | Not in release | Not in release |
| linux-realtime-6.14 | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-realtime-6.17 | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-realtime-6.8 | Not in release | Not in release | Not affected | Not in release | Not in release |
| linux-riscv | Not affected | Not affected | Ignored | Ignored | Not in release |
| linux-riscv-5.15 | Not in release | Not in release | Not in release | Not affected | Not in release |
| linux-riscv-6.14 | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-riscv-6.17 | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-riscv-6.8 | Not in release | Not in release | Not affected | Not in release | Not in release |
| linux-snapdragon | Not in release | Not in release | Not in release | Not in release | Not affected |
| linux-ti-omap4 | — | — | — | — | Not in release |
| linux-xilinx | Not in release | Not affected | Not in release | Not in release | Not in release |
| linux-xilinx-zynqmp | Not in release | Not in release | Not affected | Not affected | Not in release |
Multiple stack-based buffer overflows in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to gain privileges via...
37 affected packages
linux, linux-armadaxp, linux-aws, linux-aws-hwe, linux-azure...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| linux | — | — | — | — | Not affected |
| linux-armadaxp | — | — | — | — | Not in release |
| linux-aws | — | — | — | — | Not affected |
| linux-aws-hwe | — | — | — | — | Not in release |
| linux-azure | — | — | — | — | Not affected |
| linux-azure-edge | — | — | — | — | Not affected |
| linux-ec2 | — | — | — | — | Not in release |
| linux-euclid | — | — | — | — | Not in release |
| linux-flo | — | — | — | — | Not in release |
| linux-fsl-imx51 | — | — | — | — | Not in release |
| linux-gcp | — | — | — | — | Not affected |
| linux-gcp-edge | — | — | — | — | Not affected |
| linux-gke | — | — | — | — | Not in release |
| linux-goldfish | — | — | — | — | Not in release |
| linux-grouper | — | — | — | — | Not in release |
| linux-hwe | — | — | — | — | Not affected |
| linux-hwe-edge | — | — | — | — | Not affected |
| linux-kvm | — | — | — | — | Not affected |
| linux-linaro-omap | — | — | — | — | Not in release |
| linux-linaro-shared | — | — | — | — | Not in release |
| linux-linaro-vexpress | — | — | — | — | Not in release |
| linux-lts-quantal | — | — | — | — | Not in release |
| linux-lts-raring | — | — | — | — | Not in release |
| linux-lts-trusty | — | — | — | — | Not in release |
| linux-lts-utopic | — | — | — | — | Not in release |
| linux-lts-vivid | — | — | — | — | Not in release |
| linux-lts-wily | — | — | — | — | Not in release |
| linux-lts-xenial | — | — | — | — | Not in release |
| linux-maguro | — | — | — | — | Not in release |
| linux-mako | — | — | — | — | Not in release |
| linux-manta | — | — | — | — | Not in release |
| linux-mvl-dove | — | — | — | — | Not in release |
| linux-oem | — | — | — | — | Not affected |
| linux-qcm-msm | — | — | — | — | Not in release |
| linux-raspi2 | — | — | — | — | Not affected |
| linux-snapdragon | — | — | — | — | Not affected |
| linux-ti-omap4 | — | — | — | — | Not in release |
Some fixes available 3 of 14
The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges via a recvmmsg system call with a crafted timeout pointer parameter.
18 affected packages
linux, linux-armadaxp, linux-ec2, linux-fsl-imx51, linux-goldfish...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| linux | — | — | — | — | — |
| linux-armadaxp | — | — | — | — | — |
| linux-ec2 | — | — | — | — | — |
| linux-fsl-imx51 | — | — | — | — | — |
| linux-goldfish | — | — | — | — | — |
| linux-grouper | — | — | — | — | — |
| linux-linaro-omap | — | — | — | — | — |
| linux-linaro-shared | — | — | — | — | — |
| linux-linaro-vexpress | — | — | — | — | — |
| linux-lts-quantal | — | — | — | — | — |
| linux-lts-raring | — | — | — | — | — |
| linux-lts-saucy | — | — | — | — | — |
| linux-maguro | — | — | — | — | — |
| linux-mako | — | — | — | — | — |
| linux-manta | — | — | — | — | — |
| linux-mvl-dove | — | — | — | — | — |
| linux-qcm-msm | — | — | — | — | — |
| linux-ti-omap4 | — | — | — | — | — |
The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not disable external entity resolution, which allows remote attackers to read arbitrary files, cause a denial of...
1 affected package
libspring-java
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libspring-java | — | — | — | — | Not affected |
The Spring MVC in Spring Framework before 3.2.4 and 4.0.0.M1 through 4.0.0.M2 does not disable external entity resolution for the StAX XMLInputFactory, which allows context-dependent attackers to read arbitrary files, cause a...
1 affected package
libspring-java
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libspring-java | — | — | — | — | Not affected |
The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB marshaller, does not disable entity resolution, which allows context-dependent attackers to read arbitrary files, cause a denial of service,...
1 affected package
libspring-java
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libspring-java | — | — | — | — | — |
Some fixes available 13 of 48
The yam_ioctl function in drivers/net/hamradio/yam.c in the Linux kernel before 3.12.8 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory by leveraging the...
30 affected packages
linux, linux-armadaxp, linux-aws, linux-ec2, linux-flo...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| linux | — | — | — | — | — |
| linux-armadaxp | — | — | — | — | — |
| linux-aws | — | — | — | — | — |
| linux-ec2 | — | — | — | — | — |
| linux-flo | — | — | — | — | — |
| linux-fsl-imx51 | — | — | — | — | — |
| linux-gke | — | — | — | — | — |
| linux-goldfish | — | — | — | — | — |
| linux-grouper | — | — | — | — | — |
| linux-hwe | — | — | — | — | — |
| linux-hwe-edge | — | — | — | — | — |
| linux-linaro-omap | — | — | — | — | — |
| linux-linaro-shared | — | — | — | — | — |
| linux-linaro-vexpress | — | — | — | — | — |
| linux-lts-quantal | — | — | — | — | — |
| linux-lts-raring | — | — | — | — | — |
| linux-lts-saucy | — | — | — | — | — |
| linux-lts-trusty | — | — | — | — | — |
| linux-lts-utopic | — | — | — | — | — |
| linux-lts-vivid | — | — | — | — | — |
| linux-lts-wily | — | — | — | — | — |
| linux-lts-xenial | — | — | — | — | — |
| linux-maguro | — | — | — | — | — |
| linux-mako | — | — | — | — | — |
| linux-manta | — | — | — | — | — |
| linux-mvl-dove | — | — | — | — | — |
| linux-qcm-msm | — | — | — | — | — |
| linux-raspi2 | — | — | — | — | — |
| linux-snapdragon | — | — | — | — | — |
| linux-ti-omap4 | — | — | — | — | — |
Some fixes available 14 of 48
The wanxl_ioctl function in drivers/net/wan/wanxl.c in the Linux kernel before 3.11.7 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via an ioctl call.
30 affected packages
linux, linux-armadaxp, linux-aws, linux-ec2, linux-flo...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| linux | — | — | — | — | — |
| linux-armadaxp | — | — | — | — | — |
| linux-aws | — | — | — | — | — |
| linux-ec2 | — | — | — | — | — |
| linux-flo | — | — | — | — | — |
| linux-fsl-imx51 | — | — | — | — | — |
| linux-gke | — | — | — | — | — |
| linux-goldfish | — | — | — | — | — |
| linux-grouper | — | — | — | — | — |
| linux-hwe | — | — | — | — | — |
| linux-hwe-edge | — | — | — | — | — |
| linux-linaro-omap | — | — | — | — | — |
| linux-linaro-shared | — | — | — | — | — |
| linux-linaro-vexpress | — | — | — | — | — |
| linux-lts-quantal | — | — | — | — | — |
| linux-lts-raring | — | — | — | — | — |
| linux-lts-saucy | — | — | — | — | — |
| linux-lts-trusty | — | — | — | — | — |
| linux-lts-utopic | — | — | — | — | — |
| linux-lts-vivid | — | — | — | — | — |
| linux-lts-wily | — | — | — | — | — |
| linux-lts-xenial | — | — | — | — | — |
| linux-maguro | — | — | — | — | — |
| linux-mako | — | — | — | — | — |
| linux-manta | — | — | — | — | — |
| linux-mvl-dove | — | — | — | — | — |
| linux-qcm-msm | — | — | — | — | — |
| linux-raspi2 | — | — | — | — | — |
| linux-snapdragon | — | — | — | — | — |
| linux-ti-omap4 | — | — | — | — | — |
Some fixes available 11 of 48
The fst_get_iface function in drivers/net/wan/farsync.c in the Linux kernel before 3.11.7 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory...
30 affected packages
linux, linux-armadaxp, linux-aws, linux-ec2, linux-flo...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| linux | — | — | — | — | — |
| linux-armadaxp | — | — | — | — | — |
| linux-aws | — | — | — | — | — |
| linux-ec2 | — | — | — | — | — |
| linux-flo | — | — | — | — | — |
| linux-fsl-imx51 | — | — | — | — | — |
| linux-gke | — | — | — | — | — |
| linux-goldfish | — | — | — | — | — |
| linux-grouper | — | — | — | — | — |
| linux-hwe | — | — | — | — | — |
| linux-hwe-edge | — | — | — | — | — |
| linux-linaro-omap | — | — | — | — | — |
| linux-linaro-shared | — | — | — | — | — |
| linux-linaro-vexpress | — | — | — | — | — |
| linux-lts-quantal | — | — | — | — | — |
| linux-lts-raring | — | — | — | — | — |
| linux-lts-saucy | — | — | — | — | — |
| linux-lts-trusty | — | — | — | — | — |
| linux-lts-utopic | — | — | — | — | — |
| linux-lts-vivid | — | — | — | — | — |
| linux-lts-wily | — | — | — | — | — |
| linux-lts-xenial | — | — | — | — | — |
| linux-maguro | — | — | — | — | — |
| linux-mako | — | — | — | — | — |
| linux-manta | — | — | — | — | — |
| linux-mvl-dove | — | — | — | — | — |
| linux-qcm-msm | — | — | — | — | — |
| linux-raspi2 | — | — | — | — | — |
| linux-snapdragon | — | — | — | — | — |
| linux-ti-omap4 | — | — | — | — | — |
Some fixes available 13 of 48
The restore_fpu_checking function in arch/x86/include/asm/fpu-internal.h in the Linux kernel before 3.12.8 on the AMD K7 and K8 platforms does not clear pending exceptions before proceeding to an EMMS instruction, which allows...
30 affected packages
linux, linux-armadaxp, linux-aws, linux-ec2, linux-flo...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| linux | — | — | — | — | — |
| linux-armadaxp | — | — | — | — | — |
| linux-aws | — | — | — | — | — |
| linux-ec2 | — | — | — | — | — |
| linux-flo | — | — | — | — | — |
| linux-fsl-imx51 | — | — | — | — | — |
| linux-gke | — | — | — | — | — |
| linux-goldfish | — | — | — | — | — |
| linux-grouper | — | — | — | — | — |
| linux-hwe | — | — | — | — | — |
| linux-hwe-edge | — | — | — | — | — |
| linux-linaro-omap | — | — | — | — | — |
| linux-linaro-shared | — | — | — | — | — |
| linux-linaro-vexpress | — | — | — | — | — |
| linux-lts-quantal | — | — | — | — | — |
| linux-lts-raring | — | — | — | — | — |
| linux-lts-saucy | — | — | — | — | — |
| linux-lts-trusty | — | — | — | — | — |
| linux-lts-utopic | — | — | — | — | — |
| linux-lts-vivid | — | — | — | — | — |
| linux-lts-wily | — | — | — | — | — |
| linux-lts-xenial | — | — | — | — | — |
| linux-maguro | — | — | — | — | — |
| linux-mako | — | — | — | — | — |
| linux-manta | — | — | — | — | — |
| linux-mvl-dove | — | — | — | — | — |
| linux-qcm-msm | — | — | — | — | — |
| linux-raspi2 | — | — | — | — | — |
| linux-snapdragon | — | — | — | — | — |
| linux-ti-omap4 | — | — | — | — | — |