Grsecurity Grsecurity Kernel Patch — known CVE vulnerabilities

Every CVE whose affected-product data names Grsecurity Grsecurity Kernel Patch, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2007-0257 — CVSS 7.8 (high): Unspecified vulnerability in the expand_stack function in grsecurity PaX allows local users to gain privileges via unspecified vectors…
• CVE-2006-0228 — CVSS 7.2 (high): The RBAC functionality in grsecurity before 2.1.8 does not properly handle when the admin role creates a service and then exits the shell…
• CVE-2007-0253 — CVSS 7.2 (high): Unspecified vulnerability in the grsecurity patch has unspecified impact and remote attack vectors, a different vulnerability than the…
• CVE-2002-1826 — CVSS 4.6 (medium): grsecurity 1.9.4 for Linux kernel 2.4.18 allows local users to bypass read-only permissions by using mmap to directly map /dev/mem or…
• CVE-2008-1940 — CVSS 4.6 (medium): The RBAC functionality in grsecurity before 2.1.11-2.6.24.5 and 2.1.11-2.4.36.2 does not enforce user_transition_deny and…