← Packages
linux
The Linux Kernel
- Current
- 7.3.3
- Candidate
- Stale
- License
- GPL-2.0-only
Advisory · 13
Provider matches do not establish RPM applicability. Local patches, bundled dependencies and binary artifacts are not evaluated.
- Summary
- The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names.NVD
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 1.55%FIRST
- Vulnerable CPE criteria
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*NVD
- Aliases
- —NVD
- KEV
- NoCISA
- CVSS_V2
- AV:N/AC:L/Au:N/C:P/I:N/A:NNVD
- References
- Web · exchange.xforce.ibmcloud.com
- Summary
- cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination.NVD
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 0.347%FIRST
- Vulnerable CPE criteria
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*NVD
- Aliases
- —NVD
- KEV
- NoCISA
- CVSS_V2
- AV:L/AC:M/Au:N/C:C/I:C/A:CNVD
- Summary
- The Linux kernel, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and determining whether an Echo Reply is sent, as demonstrated by thcping.NVD
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 2.89%FIRST
- Vulnerable CPE criteria
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*NVD
- Aliases
- —NVD
- KEV
- NoCISA
- CVSS_V2
- AV:N/AC:L/Au:N/C:P/I:N/A:NNVD
- Summary
- In a Linux KVM guest that has PV TLB enabled, a process in the guest kernel may be able to read memory locations from another process in the same guest. This problem is limit to the host running linux kernel 4.10 with a guest running linux kernel 4.16 or later. The problem mainly affects AMD processors but Intel CPUs cannot be ruled out.NVD
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 0.619%FIRST
- Vulnerable CPE criteria
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*; >= 4.16, cpe:2.3:o:linux:linux_kernel:4.10:*:*:*:*:*:*:*NVD
- Aliases
- —NVD
- KEV
- NoCISA
- CVSS_V2
- AV:L/AC:M/Au:N/C:P/I:N/A:NNVD
- CVSS_V3
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:NNVD
- CVSS_V3
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NNVD
- Summary
- A flaw was found in the Linux kernel in the function hid_debug_events_read() in drivers/hid/hid-debug.c file which may enter an infinite loop with certain parameters passed from a userspace. A local privileged user ("root") can cause a system lock up and a denial of service. Versions from v4.18 and newer are vulnerable.NVD
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 0.457%FIRST
- Vulnerable CPE criteria
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*; >= 4.18NVD
- Aliases
- —NVD
- KEV
- NoCISA
- CVSS_V2
- AV:L/AC:L/Au:N/C:N/I:N/A:CNVD
- CVSS_V3
- CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:HNVD
- CVSS_V3
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:HNVD
- Summary
- A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access with nested(=1) virtualization enabled. In that, L1 guest could access L0's APIC register values via L2 guest, when 'virtualize x2APIC mode' is enabled. A guest could use this flaw to potentially crash the host kernel resulting in DoS issue. Kernel versions from 4.16 and newer are vulnerable to this issue.NVD
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 0.358%FIRST
- Vulnerable CPE criteria
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*; >= 4.16NVD
- Aliases
- —NVD
- KEV
- NoCISA
- CVSS_V2
- AV:L/AC:M/Au:N/C:N/I:N/A:CNVD
- CVSS_V3
- CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:HNVD
- CVSS_V3
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:HNVD
- Summary
- A memory leak vulnerability was found in Linux kernel in llcp_sock_connectNVD
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 3.26%FIRST
- Vulnerable CPE criteria
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*NVD
- Aliases
- —NVD
- KEV
- NoCISA
- CVSS_V2
- AV:N/AC:L/Au:N/C:N/I:N/A:PNVD
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HNVD
- Summary
- A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic the system, causing memory corruption or escalating privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.NVD
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 0.788%FIRST
- Vulnerable CPE criteria
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*; > 4.4.249, cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*; >= 4.10, < 4.14.213, cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*; >= 4.15, < 4.19.164, cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*; >= 4.20, < 5.4.86, cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*; >= 4.5, < 4.9.249, cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*; >= 5.5, < 5.10.4NVD
- Aliases
- —NVD
- KEV
- NoCISA
- CVSS_V2
- AV:L/AC:L/Au:N/C:P/I:P/A:CNVD
- CVSS_V3
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HNVD
- Summary
- There is a vulnerability in the linux kernel versions higher than 5.2 (if kernel compiled with config params CONFIG_BPF_SYSCALL=y , CONFIG_BPF=y , CONFIG_CGROUPS=y , CONFIG_CGROUP_BPF=y , CONFIG_HARDENED_USERCOPY not set, and BPF hook to getsockopt is registered). As result of BPF execution, the local user can trigger bug in __cgroup_bpf_run_filter_getsockopt() function that can lead to heap overflow (because of non-hardened usercopy). The impact of attack could be deny of service or possibly privileges escalation.NVD
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 0.4%FIRST
- Vulnerable CPE criteria
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*; > 5.2NVD
- Aliases
- —NVD
- KEV
- NoCISA
- CVSS_V2
- AV:L/AC:L/Au:N/C:P/I:P/A:PNVD
- CVSS_V3
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HNVD
- Summary
- A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user attach malicious HCI TTY Bluetooth device. A local user could use this flaw to crash the system. This flaw affects all the Linux kernel versions starting from 3.13.NVD
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 0.485%FIRST
- Vulnerable CPE criteria
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*; >= 3.13NVD
- Aliases
- —NVD
- KEV
- NoCISA
- CVSS_V2
- AV:L/AC:L/Au:N/C:N/I:N/A:PNVD
- CVSS_V3
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HNVD
- Summary
- A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which could lead to resource exhaustion and DoS.NVD
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 0.297%FIRST
- Vulnerable CPE criteria
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*NVD
- Aliases
- —NVD
- KEV
- NoCISA
- CVSS_V3
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HNVD
- Summary
- A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).NVD
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 0.797%FIRST
- Vulnerable CPE criteria
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*; >= 4.20NVD
- Aliases
- —NVD
- KEV
- NoCISA
- CVSS_V3
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HNVD
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:HNVD
- Summary
- A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems.NVD
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 0.982%FIRST
- Vulnerable CPE criteria
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*NVD
- Aliases
- —NVD
- KEV
- NoCISA
- CVSS_V3
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NNVD
Description
This is the meta package that handles standard linux kernel installation.
Changelog
PR · 58
Issue · 7
Checks
| Monitor | Observation | Last checked |
|---|---|---|
Stale Repository refresh: git fetch exited 128 (authentication) | ||
Stale Source last confirmed at 2026-11-10T17:23:44+00:00; repository refresh overdue. | ||
Checked | ||
Checked | ||
Checked Current source cycle 7.3; upstream lifecycle only. | Last attempted | |
Not configured No reliable monitor identity/configuration. | — | |
Not configured No reliable monitor identity/configuration. | — | |
Checked Current source component only; local patches, build options, bundled dependencies and binary artifacts are not evaluated. | Last attempted | |
Not configured No reliable monitor identity/configuration. | — |