Approved changes feed: RSS · Atom

cpe:2.3:a:linux_kernel:kernel:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLinux Kernel (6a60e7c6-8ed0-518b-a244-0bd4cd15b19f)
ProductKernel (164632cc-15a3-50ae-a046-e6392af6dc51)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-2785 vulnerable 2026-06-08 05:43:36.456342 Arbitrary Memory read in BPF Linux Kernel
MEDIUM (6.7)
There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpf_sys_bpf are not verified and can point anywhere, including memory not owned by BPF. An attacker with CAP_BPF can arbitrarily read memory from anywhere on the system. We recommend upgrading past commit 86f44fcec22c
Published: 2022-09-23T11:10:08.764Z
Updated: 2025-04-21T13:49:09.750Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22600 vulnerable 2026-06-08 05:30:00.913778 Double Free in net/packet/af_packet.c leading to priviledge escalation
MEDIUM (6.6)
A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755
Published: 2022-01-26T00:00:00.000Z
Updated: 2025-10-21T23:15:48.681Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1749 vulnerable 2026-06-08 05:21:02.957752 Details available
HIGH (7.5)
A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data unencrypted. This would allow anyone in between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.
Published: 2020-09-09T14:35:17.000Z
Updated: 2024-08-04T06:46:30.814Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14386 vulnerable 2026-06-08 05:19:23.201641 Details available
MEDIUM (6.7)
A flaw was found in the Linux kernel before 5.9-rc4. Memory corruption can be exploited to gain root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity.
Published: 2020-09-16T12:48:12.000Z
Updated: 2024-08-04T12:46:34.367Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14385 vulnerable 2026-06-08 05:19:23.197674 Details available
MEDIUM (5.5)
A flaw was found in the Linux kernel before 5.9-rc4. A failure of the file system metadata validator in XFS can cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt. This can lead to the filesystem being shutdown, or otherwise rendered inaccessible until it is remounted, leading to a denial of service. The highest threat from this vulnerability is to system availability.
Published: 2020-09-15T21:14:53.000Z
Updated: 2024-08-04T12:46:34.096Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14314 vulnerable 2026-06-08 05:19:22.949691 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14304 vulnerable 2026-06-08 05:19:22.909460 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10781 vulnerable 2026-06-08 05:16:35.882315 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10768 vulnerable 2026-06-08 05:16:35.858369 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10767 vulnerable 2026-06-08 05:16:35.858026 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10766 vulnerable 2026-06-08 05:16:35.857659 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10732 vulnerable 2026-06-08 05:16:35.759463 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14898 vulnerable 2026-06-08 05:12:56.378373 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.