# kernel.

Every CVE that names kernel among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Kernel: race condition leads to use after free during vma lock in lock_vma_under_rcu](https://agentprime.io/advisories/CVE-2024-1312.md)
  `CVE-2024-1312` · CVE record: kernel and 4 more · CVSS 5.1 Medium · Not analysed yet · Published 8 Feb 2024 · Tags: Memory corruption
- [Kernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerability](https://agentprime.io/advisories/CVE-2023-6200.md)
  `CVE-2023-6200` · CVE record: kernel and 4 more · CVSS 7.5 High · Not analysed yet · Published 28 Jan 2024 · Tags: Race condition
- [Kernel: io_uring out of boundary memory access in \_\_io_uaddr_map()](https://agentprime.io/advisories/CVE-2023-6560.md)
  `CVE-2023-6560` · CVE record: kernel and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Dec 2023 · Tags: CWE-823
- [Kernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.c](https://agentprime.io/advisories/CVE-2023-5972.md)
  `CVE-2023-5972` · CVE record: kernel and 4 more · CVSS 7.0 High · Not analysed yet · Published 23 Nov 2023 · Tags: Memory corruption
- [Kernel: nvme: memory corruption via unprivileged user passthrough](https://agentprime.io/advisories/CVE-2023-6238.md)
  `CVE-2023-6238` · CVE record: kernel and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 21 Nov 2023 · Tags: Memory corruption
- [Kernel: use-after-free in drivers/net/usb/lan78xx.c in lan78xx_disconnect](https://agentprime.io/advisories/CVE-2023-6039.md)
  `CVE-2023-6039` · CVE record: Kernel and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Nov 2023 · Tags: Memory corruption
- [Use-after-free in parse_lease_state()](https://agentprime.io/advisories/CVE-2023-1194.md)
  `CVE-2023-1194` · CVE record: kernel and 4 more · CVSS 7.1 High · Not analysed yet · Published 3 Nov 2023 · Tags: Memory corruption
- [Use-after-free in setup_async_work()](https://agentprime.io/advisories/CVE-2023-1193.md)
  `CVE-2023-1193` · CVE record: Kernel and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Nov 2023 · Tags: Memory corruption
- [Use-after-free in smb2_is_status_io_timeout()](https://agentprime.io/advisories/CVE-2023-1192.md)
  `CVE-2023-1192` · CVE record: kernel and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Nov 2023 · Tags: Memory corruption
- [Kernel: integer overflow in igmpv3_newpack leading to exploitable memory access](https://agentprime.io/advisories/CVE-2023-42752.md)
  `CVE-2023-42752` · CVE record: Kernel and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2023 · Tags: Memory corruption
- [Possible dos from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.c](https://agentprime.io/advisories/CVE-2023-5158.md)
  `CVE-2023-5158` · CVE record: kernel and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 25 Sept 2023 · Tags: CWE-684
- [Sev-es / sev-snp vmgexit double fetch vulnerability](https://agentprime.io/advisories/CVE-2023-4155.md)
  `CVE-2023-4155` · CVE record: kernel and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 13 Sept 2023 · Tags: Race condition
- [Use after free race between mbind() and vma-locked page fault](https://agentprime.io/advisories/CVE-2023-4611.md)
  `CVE-2023-4611` · CVE record: Kernel and 4 more · CVSS 7.0 High · Not analysed yet · Published 29 Aug 2023 · Tags: Memory corruption
- [Kernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c](https://agentprime.io/advisories/CVE-2023-4569.md)
  `CVE-2023-4569` · CVE record: Kernel and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 28 Aug 2023 · Tags: CWE-402
- [Memory leak in btrfs_get_dev_args_from_path()](https://agentprime.io/advisories/CVE-2023-4394.md)
  `CVE-2023-4394` · CVE record: Kernel and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 17 Aug 2023 · Tags: Denial of service
- [Kernel: btrfs: double free in btrfs_get_root_ref()](https://agentprime.io/advisories/CVE-2023-4389.md)
  `CVE-2023-4389` · CVE record: Kernel and 4 more · CVSS 7.0 High · Not analysed yet · Published 16 Aug 2023 · Tags: Memory corruption
- [Tree connection null pointer dereference denial-of-service vulnerability](https://agentprime.io/advisories/CVE-2023-32248.md)
  `CVE-2023-32248` · CVE record: kernel and 4 more · CVSS 7.5 High · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption
- [Session race condition remote code execution vulnerability](https://agentprime.io/advisories/CVE-2023-32257.md)
  `CVE-2023-32257` · CVE record: kernel and 4 more · CVSS 8.1 High · Not analysed yet · Published 24 Jul 2023 · Tags: Race condition
- [Session null pointer dereference denial-of-service vulnerability](https://agentprime.io/advisories/CVE-2023-32252.md)
  `CVE-2023-32252` · CVE record: kernel and 4 more · CVSS 7.5 High · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption
- [Session race condition remote code execution vulnerability](https://agentprime.io/advisories/CVE-2023-32258.md)
  `CVE-2023-32258` · CVE record: kernel and 4 more · CVSS 8.1 High · Not analysed yet · Published 24 Jul 2023 · Tags: Race condition
- [Session setup memory exhaustion denial-of-service vulnerability](https://agentprime.io/advisories/CVE-2023-32247.md)
  `CVE-2023-32247` · CVE record: kernel and 4 more · CVSS 7.5 High · Not analysed yet · Published 24 Jul 2023 · Tags: Denial of service
- [Out-of-bounds read when setting hmac data](https://agentprime.io/advisories/CVE-2023-2860.md)
  `CVE-2023-2860` · CVE record: kernel and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption
- [Use-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.c](https://agentprime.io/advisories/CVE-2023-3863.md)
  `CVE-2023-3863` · CVE record: Kernel and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption
- [kernel: A vulnerability was found due to missing lock for IOPOLL flaw in…](https://agentprime.io/advisories/CVE-2023-2430.md)
  `CVE-2023-2430` · CVE record: kernel · CVSS 5.5 Medium · Not analysed yet · Published 23 Jul 2023 · Tags: CWE-413
- [Possibility of deadlock in libbpf function sock_hash_delete_elem](https://agentprime.io/advisories/CVE-2023-0160.md)
  `CVE-2023-0160` · CVE record: kernel and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 18 Jul 2023 · Tags: Denial of service
- [Distros-\[dirtyvma\] privilege escalation via non-rcu-protected vma traversal](https://agentprime.io/advisories/CVE-2023-3269.md)
  `CVE-2023-3269` · CVE record: kernel and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Jul 2023 · Tags: Memory corruption
- [Tree connection race condition remote code execution vulnerability](https://agentprime.io/advisories/CVE-2023-32254.md)
  `CVE-2023-32254` · CVE record: kernel and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jul 2023 · Tags: Race condition
- [Session race condition remote code execution vulnerability](https://agentprime.io/advisories/CVE-2023-32250.md)
  `CVE-2023-32250` · CVE record: kernel and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jul 2023 · Tags: Race condition
- [Crash due to a null pointer dereference in the dn_nsp_send function](https://agentprime.io/advisories/CVE-2023-3338.md)
  `CVE-2023-3338` · CVE record: kernel and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2023 · Tags: Memory corruption
- [Uncontrolled resource consumption in Kernel](https://agentprime.io/advisories/CVE-2023-1206.md)
  `CVE-2023-1206` · CVE record: Kernel · No CVSS score · Not analysed yet · Published 30 Jun 2023 · Tags: Denial of service
- [NULL pointer dereference in Kernel](https://agentprime.io/advisories/CVE-2023-3359.md)
  `CVE-2023-3359` · CVE record: Kernel · CVSS 5.5 Medium · Not analysed yet · Published 28 Jun 2023 · Tags: Memory corruption
- [NULL pointer dereference in Kernel](https://agentprime.io/advisories/CVE-2023-3358.md)
  `CVE-2023-3358` · CVE record: Kernel · CVSS 5.5 Medium · Not analysed yet · Published 28 Jun 2023 · Tags: Memory corruption
- [NULL pointer dereference in Kernel](https://agentprime.io/advisories/CVE-2023-3357.md)
  `CVE-2023-3357` · CVE record: Kernel · CVSS 5.5 Medium · Not analysed yet · Published 28 Jun 2023 · Tags: Memory corruption
- [Null pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.c](https://agentprime.io/advisories/CVE-2023-3355.md)
  `CVE-2023-3355` · CVE record: kernel and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 28 Jun 2023 · Tags: Memory corruption
- [Use after free in Kernel](https://agentprime.io/advisories/CVE-2023-3317.md)
  `CVE-2023-3317` · CVE record: Kernel · CVSS 7.1 High · Not analysed yet · Published 23 Jun 2023 · Tags: Memory corruption
- [Double free in Kernel](https://agentprime.io/advisories/CVE-2023-3312.md)
  `CVE-2023-3312` · CVE record: Kernel · CVSS 7.5 High · Not analysed yet · Published 19 Jun 2023 · Tags: Memory corruption
- [Use after free in Kernel](https://agentprime.io/advisories/CVE-2023-3159.md)
  `CVE-2023-3159` · CVE record: Kernel · CVSS 6.7 Medium · Not analysed yet · Published 12 Jun 2023 · Tags: Memory corruption
- [Use after free in Kernel](https://agentprime.io/advisories/CVE-2023-3141.md)
  `CVE-2023-3141` · CVE record: Kernel · CVSS 7.1 High · Not analysed yet · Published 9 Jun 2023 · Tags: Memory corruption
- [Use after free in Kernel](https://agentprime.io/advisories/CVE-2023-3111.md)
  `CVE-2023-3111` · CVE record: Kernel · CVSS 7.8 High · Not analysed yet · Published 5 Jun 2023 · Tags: Memory corruption
- [Use after free in Kernel](https://agentprime.io/advisories/CVE-2023-2985.md)
  `CVE-2023-2985` · CVE record: Kernel · CVSS 5.5 Medium · Not analysed yet · Published 1 Jun 2023 · Tags: Memory corruption
- [Use after free in Kernel](https://agentprime.io/advisories/CVE-2023-2598.md)
  `CVE-2023-2598` · CVE record: Kernel · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2023 · Tags: Memory corruption
- [A known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, becomes actual again for the new hw AmpereOne.](https://agentprime.io/advisories/CVE-2023-3006.md)
  `CVE-2023-3006` · CVE record: Kernel · CVSS 5.5 Medium · Not analysed yet · Published 31 May 2023 · Tags: CWE-226
- [NULL pointer dereference in Kernel](https://agentprime.io/advisories/CVE-2023-2898.md)
  `CVE-2023-2898` · CVE record: Kernel · No CVSS score · Not analysed yet · Published 26 May 2023 · Tags: Memory corruption
- [Execution with unnecessary privileges in Kernel](https://agentprime.io/advisories/CVE-2023-2002.md)
  `CVE-2023-2002` · CVE record: Kernel · No CVSS score · Not analysed yet · Published 26 May 2023 · Tags: Privilege escalation
- [Use after free in Kernel](https://agentprime.io/advisories/CVE-2023-1195.md)
  `CVE-2023-1195` · CVE record: Kernel · CVSS 5.5 Medium · Not analysed yet · Published 18 May 2023 · Tags: Memory corruption
- [Use after free in Kernel](https://agentprime.io/advisories/CVE-2023-1859.md)
  `CVE-2023-1859` · CVE record: Kernel · CVSS 4.7 Medium · Not analysed yet · Published 17 May 2023 · Tags: Memory corruption
- [Out-of-bounds write in Kernel](https://agentprime.io/advisories/CVE-2023-2124.md)
  `CVE-2023-2124` · CVE record: Kernel · No CVSS score · Not analysed yet · Published 15 May 2023 · Tags: Memory corruption
- [Kernel: A denial of service problem was found, due to a possible recursive locking scenario…](https://agentprime.io/advisories/CVE-2023-2269.md)
  `CVE-2023-2269` · CVE record: Kernel · No CVSS score · Not analysed yet · Published 25 Apr 2023 · Tags: CWE-413
- [Out-of-bounds read in Kernel](https://agentprime.io/advisories/CVE-2023-2176.md)
  `CVE-2023-2176` · CVE record: Kernel · CVSS 7.8 High · Not analysed yet · Published 20 Apr 2023 · Tags: Memory corruption
- [Use after free in Kernel](https://agentprime.io/advisories/CVE-2023-2162.md)
  `CVE-2023-2162` · CVE record: Kernel · CVSS 5.5 Medium · Not analysed yet · Published 19 Apr 2023 · Tags: Memory corruption
- [NULL pointer dereference in Kernel](https://agentprime.io/advisories/CVE-2023-1382.md)
  `CVE-2023-1382` · CVE record: Kernel · CVSS 4.7 Medium · Not analysed yet · Published 19 Apr 2023 · Tags: Memory corruption
- [Use after free in Kernel](https://agentprime.io/advisories/CVE-2023-1855.md)
  `CVE-2023-1855` · CVE record: Kernel · CVSS 6.3 Medium · Not analysed yet · Published 5 Apr 2023 · Tags: Memory corruption
- [Use after free in Kernel](https://agentprime.io/advisories/CVE-2023-1838.md)
  `CVE-2023-1838` · CVE record: Kernel · No CVSS score · Not analysed yet · Published 5 Apr 2023 · Tags: Memory corruption
- [Use after free in Kernel](https://agentprime.io/advisories/CVE-2023-1611.md)
  `CVE-2023-1611` · CVE record: Kernel · CVSS 6.3 Medium · Not analysed yet · Published 3 Apr 2023 · Tags: Memory corruption
- [Use after free in Kernel](https://agentprime.io/advisories/CVE-2023-1670.md)
  `CVE-2023-1670` · CVE record: Kernel · CVSS 7.8 High · Not analysed yet · Published 30 Mar 2023 · Tags: Memory corruption
- [Kernel: A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in…](https://agentprime.io/advisories/CVE-2022-4744.md)
  `CVE-2022-4744` · CVE record: Kernel · CVSS 7.8 High · Not analysed yet · Published 30 Mar 2023 · Tags: CWE-460
- [Kernel: A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of…](https://agentprime.io/advisories/CVE-2023-1637.md)
  `CVE-2023-1637` · CVE record: Kernel · CVSS 5.5 Medium · Not analysed yet · Published 27 Mar 2023 · Tags: CWE-226
- [Out-of-bounds read in Kernel](https://agentprime.io/advisories/CVE-2023-1380.md)
  `CVE-2023-1380` · CVE record: Kernel · CVSS 7.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.16 · Not analysed yet · Published 27 Mar 2023 · Tags: Memory corruption
- [Memory leak in kernel](https://agentprime.io/advisories/CVE-2023-1074.md)
  `CVE-2023-1074` · CVE record: kernel · CVSS 5.5 Medium · Not analysed yet · Published 27 Mar 2023 · Tags: Denial of service
- [Buffer overflow in kernel](https://agentprime.io/advisories/CVE-2023-1073.md)
  `CVE-2023-1073` · CVE record: kernel · CVSS 6.6 Medium · Not analysed yet · Published 27 Mar 2023 · Tags: Memory corruption

Older: <https://agentprime.io/advisories/technology/kernel.md?cursor=WyIyMDIzLTAzLTI3VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMy0xMDczIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=kernel>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/kernel/>. Everything for agents: <https://agentprime.io/llms.txt>.