| Max CVSS | 4.4 | Min CVSS | 1.9 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-18397 | 2.1 |
The userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for certain UFFDIO_ ioctl calls, as demonstrated by allowing local users to write data into holes in a tmpfs file (if the user has read-only access to that fil
|
24-08-2020 - 17:37 | 12-12-2018 - 10:29 | |
| CVE-2019-6133 | 4.4 |
In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and therefore authorization decisions are improperly cached. This is related to lack of uid checking in polkitbackend/polkitbackendin
|
24-08-2020 - 17:37 | 11-01-2019 - 14:29 | |
| CVE-2018-19854 | 1.9 |
An issue was discovered in the Linux kernel before 4.19.3. crypto_report_one() and related functions in crypto/crypto_user.c (the crypto user configuration API) do not fully initialize structures that are copied to userspace, potentially leaking sens
|
06-11-2019 - 01:15 | 04-12-2018 - 16:29 |