Netapp h410c vulnerabilities

11 CVEs affecting Netapp h410c, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-32248, published 2023-07-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-32248, published 2023-07-24. High severity, CVSS 7.5. EPSS: 4.1% chance of exploitation in the next 30 days. A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_TREE_CONNECT and SMB2_QUERY_INFO commands. The issue…
CVE-2022-25636, published 2022-02-24. High severity, CVSS 7.8. EPSS: 2.6% chance of exploitation in the next 30 days. net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds write. This is related to nf_tables_offload.
CVE-2023-35001, published 2023-07-05. High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days. Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace
CVE-2023-3390, published 2023-06-28. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c. Mishandled error handling with NFT_MSG_NEWRULE makes it possible to use a…
CVE-2023-35828, published 2023-06-18. High severity, CVSS 7.0. EPSS: 0.5% chance of exploitation in the next 30 days. An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c.
CVE-2022-48502, published 2023-05-31. High severity, CVSS 7.1. EPSS: 0.5% chance of exploitation in the next 30 days. An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an out-of-bounds read in ntfs_set_ea in…
CVE-2023-1989, published 2023-04-11. High severity, CVSS 7.0. EPSS: 0.4% chance of exploitation in the next 30 days. A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel. A call to btsdio_remove with an unfinished job may cause a race problem which leads to a UAF on…
CVE-2023-28466, published 2023-03-16. High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days. do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference).
CVE-2023-1838, published 2023-04-05. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget. This flaw could allow a local attacker to…
CVE-2023-35826, published 2023-06-18. High severity, CVSS 7.0. EPSS: 0.2% chance of exploitation in the next 30 days. An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in cedrus_remove in drivers/staging/media/sunxi/cedrus/cedrus.c.

Latest

CVE-2023-1295, published 2023-06-28. High severity, CVSS 7.0. EPSS: 0.2% chance of exploitation in the next 30 days. A time-of-check to time-of-use issue exists in io_uring subsystem's IORING_OP_CLOSE operation in the Linux kernel's versions 5.6 - 5.11 (inclusive), which allows a local user to elevate their…