Vulnerabilities

Debian Debian Linux 11.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2060CVEs

CVE-2024-50067

uprobe: avoid out-of-bounds memory access of fetching args

Published 2024-10-28 · Analyzed

7.8EPSS 0.002

CVE-2024-42136

cdrom: rearrange last_media_change check to avoid unintentional overflow

Published 2024-07-30 · Analyzed

7.8EPSS 0.002

CVE-2023-37208

When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

Published 2023-07-05 · Modified

7.8EPSS 0.002

CVE-2024-50063

bpf: Prevent tail call between progs attached to different hooks

Published 2024-10-21 · Modified

7.8EPSS 0.002

CVE-2023-52572

cifs: Fix UAF in cifs_demultiplex_thread()

Published 2024-03-02 · Modified

7.8EPSS 0.002

CVE-2024-42314

btrfs: fix extent map use-after-free when adding pages to compressed bio

Published 2024-08-17 · Modified

7.8EPSS 0.002

CVE-2025-37913

net_sched: qfq: Fix double list add in class with netem as child qdisc

Published 2025-05-20 · Modified

7.8EPSS 0.002

CVE-2021-47247

net/mlx5e: Fix use-after-free of encap entry in neigh update handler

Published 2024-05-21 · Modified

7.8EPSS 0.002

CVE-2024-42302

PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal

Published 2024-08-17 · Modified

7.8EPSS 0.002

CVE-2025-38000

sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()

Published 2025-06-06 · Modified

7.8EPSS 0.002

CVE-2025-37914

net_sched: ets: Fix double list add in class with netem as child qdisc

Published 2025-05-20 · Modified

7.8EPSS 0.002

CVE-2025-37810

usb: dwc3: gadget: check that event count does not exceed event buffer length

Published 2025-05-08 · Analyzed

7.8EPSS 0.002

CVE-2024-42159

scsi: mpi3mr: Sanitise num_phys

Published 2024-07-30 · Analyzed

7.8EPSS 0.002

CVE-2025-23150

ext4: fix off-by-one error in do_split

Published 2025-05-01 · Modified

7.8EPSS 0.002

CVE-2025-38077

platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store()

Published 2025-06-18 · Analyzed

7.8EPSS 0.002

CVE-2025-37798

codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()

Published 2025-05-02 · Modified

7.8EPSS 0.002

CVE-2021-47489

drm/amdgpu: Fix even more out of bound writes from debugfs

Published 2024-05-22 · Analyzed

7.8EPSS 0.002

CVE-2025-23142

sctp: detect and prevent references to a freed transport in sendmsg

Published 2025-05-01 · Modified

7.8EPSS 0.002

CVE-2024-46859

platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses

Published 2024-09-27 · Modified

7.8EPSS 0.002

CVE-2026-41082

In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.

Published 2026-04-16 · Analyzed

7.8EPSS 0.002

CVE-2024-46871

drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX

Published 2024-10-09 · Analyzed

7.8EPSS 0.002

CVE-2025-37797

net_sched: hfsc: Fix a UAF vulnerability in class handling

Published 2025-05-02 · Modified

7.8EPSS 0.002

CVE-2024-46852

dma-buf: heaps: Fix off-by-one in CMA heap fault handler

Published 2024-09-27 · Modified

7.8EPSS 0.002

CVE-2025-37991

parisc: Fix double SIGFPE crash

Published 2025-05-20 · Analyzed

7.8EPSS 0.002

CVE-2025-23156

media: venus: hfi_parser: refactor hfi packet parsing logic

Published 2025-05-01 · Modified

7.8EPSS 0.002

CVE-2025-37765

drm/nouveau: prime: fix ttm_bo_delayed_delete oops

Published 2025-05-01 · Modified

7.8EPSS 0.002

CVE-2025-23158

media: venus: hfi: add check to handle incorrect queue size

Published 2025-05-01 · Modified

7.8EPSS 0.002

CVE-2025-23157

media: venus: hfi_parser: add check to avoid out of bound access

Published 2025-05-01 · Modified

7.8EPSS 0.002

CVE-2025-37890

net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc

Published 2025-05-16 · Modified

7.8EPSS 0.002

CVE-2025-38005

dmaengine: ti: k3-udma: Add missing locking

Published 2025-06-18 · Modified

7.8EPSS 0.002

CVE-2025-37979

ASoC: qcom: Fix sc7280 lpass potential buffer overflow

Published 2025-05-20 · Modified

7.8EPSS 0.002

CVE-2025-38024

RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug

Published 2025-06-18 · Modified

7.8EPSS 0.002

CVE-2025-38079

crypto: algif_hash - fix double free in hash_accept

Published 2025-06-18 · Modified

7.8EPSS 0.002

CVE-2025-37921

vxlan: vnifilter: Fix unlocked deletion of default FDB entry

Published 2025-05-20 · Modified

7.8EPSS 0.002

CVE-2025-37911

bnxt_en: Fix out-of-bound memcpy() during ethtool -w

Published 2025-05-20 · Modified

7.8EPSS 0.002

CVE-2025-37817

mcb: fix a double free bug in chameleon_parse_gdd()

Published 2025-05-08 · Analyzed

7.8EPSS 0.002

CVE-2025-37819

irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()

Published 2025-05-08 · Analyzed

7.8EPSS 0.002

CVE-2025-37789

net: openvswitch: fix nested key length validation in the set() action

Published 2025-05-01 · Modified

7.8EPSS 0.002

CVE-2025-37823

net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too

Published 2025-05-08 · Modified

7.8EPSS 0.002

CVE-2025-37738

ext4: ignore xattrs past end

Published 2025-05-01 · Modified

7.8EPSS 0.002

Debian Debian Linux 11.0

Security check