Vulnerabilities

Debian Debian Linux 11.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2060CVEs

CVE-2025-23141

KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses

Published 2025-05-01 · Modified

7.8EPSS 0.002

CVE-2025-38416

NFC: nci: uart: Set tty->disc_data only in success path

Published 2025-07-25 · Modified

7.8EPSS 0.002

CVE-2025-38111

net/mdiobus: Fix potential out-of-bounds read/write access

Published 2025-07-03 · Modified

7.8EPSS 0.002

CVE-2025-37949

xenbus: Use kref to track req lifetime

Published 2025-05-20 · Modified

7.8EPSS 0.002

CVE-2025-38494

HID: core: do not bypass hid_hw_raw_request

Published 2025-07-28 · Modified

7.8EPSS 0.002

CVE-2025-37901

irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs

Published 2025-05-20 · Modified

7.8EPSS 0.002

CVE-2025-38115

net_sched: sch_sfq: fix a potential crash on gso_skb handling

Published 2025-07-03 · Modified

7.8EPSS 0.002

CVE-2025-38065

orangefs: Do not truncate file size

Published 2025-06-18 · Modified

7.8EPSS 0.002

CVE-2025-38051

smb: client: Fix use-after-free in cifs_fill_dirent

Published 2025-06-18 · Modified

7.8EPSS 0.002

CVE-2025-38298

EDAC/skx_common: Fix general protection fault

Published 2025-07-10 · Analyzed

7.8EPSS 0.002

CVE-2025-37892

mtd: inftlcore: Add error check for inftl_read_oob()

Published 2025-05-20 · Analyzed

7.8EPSS 0.002

CVE-2025-37903

drm/amd/display: Fix slab-use-after-free in hdcp

Published 2025-05-20 · Modified

7.8EPSS 0.002

CVE-2025-38095

dma-buf: insert memory barrier before updating num_fences

Published 2025-07-03 · Modified

7.8EPSS 0.002

CVE-2025-39730

NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()

Published 2025-09-07 · Analyzed

7.8EPSS 0.002

CVE-2023-52935

mm/khugepaged: fix ->anon_vma race

Published 2025-03-27 · Analyzed

7.8EPSS 0.002

CVE-2025-38415

Squashfs: check return result of sb_min_blocksize

Published 2025-07-25 · Analyzed

7.8EPSS 0.002

CVE-2025-38184

tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer

Published 2025-07-04 · Modified

7.8EPSS 0.002

CVE-2025-38424

perf: Fix sample vs do_exit()

Published 2025-07-25 · Modified

7.8EPSS 0.002

CVE-2025-38389

drm/i915/gt: Fix timeline left held on VMA alloc error

Published 2025-07-25 · Analyzed

7.8EPSS 0.002

CVE-2025-38403

vsock/vmci: Clear the vmci transport packet properly when initializing it

Published 2025-07-25 · Analyzed

7.8EPSS 0.002

CVE-2025-38180

net: atm: fix /proc/net/atm/lec handling

Published 2025-07-04 · Modified

7.8EPSS 0.002

CVE-2025-38193

net_sched: sch_sfq: reject invalid perturb period

Published 2025-07-04 · Modified

7.8EPSS 0.002

CVE-2025-38428

Input: ims-pcu - check record size in ims_pcu_flash_firmware()

Published 2025-07-25 · Analyzed

7.8EPSS 0.002

CVE-2025-38062

genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie

Published 2025-06-18 · Modified

7.8EPSS 0.002

CVE-2025-38350

net/sched: Always pass notifications when child class becomes empty

Published 2025-07-19 · Modified

7.8EPSS 0.002

CVE-2025-38466

perf: Revert to requiring CAP_SYS_ADMIN for uprobes

Published 2025-07-25 · Modified

7.8EPSS 0.002

CVE-2025-37964

x86/mm: Eliminate window where TLB flushes may be inadvertently skipped

Published 2025-05-20 · Modified

7.8EPSS 0.002

CVE-2025-38729

ALSA: usb-audio: Validate UAC3 power domain descriptors, too

Published 2025-09-04 · Modified

7.8EPSS 0.002

CVE-2025-38702

fbdev: fix potential buffer overflow in do_register_framebuffer()

Published 2025-09-04 · Modified

7.8EPSS 0.002

CVE-2025-39701

ACPI: pfr_update: Fix the driver update version check

Published 2025-09-05 · Modified

7.8EPSS 0.002

CVE-2025-38280

bpf: Avoid __bpf_prog_ret0_warn when jit fails

Published 2025-07-10 · Modified

7.8EPSS 0.002

CVE-2025-39686

comedi: Make insn_rw_emulate_bits() do insn->n samples

Published 2025-09-05 · Modified

7.8EPSS 0.002

CVE-2025-38323

net: atm: add lec_mutex

Published 2025-07-10 · Analyzed

7.8EPSS 0.002

CVE-2025-38386

ACPICA: Refuse to evaluate a method if arguments are missing

Published 2025-07-25 · Modified

7.8EPSS 0.002

CVE-2025-38097

espintcp: remove encap socket caching to avoid reference leak

Published 2025-07-03 · Modified

7.8EPSS 0.002

CVE-2025-38166

bpf: fix ktls panic with sockmap

Published 2025-07-03 · Modified

7.8EPSS 0.002

CVE-2023-52757

smb: client: fix potential deadlock when releasing mids

Published 2024-05-21 · Analyzed

7.8EPSS 0.002

CVE-2025-38131

coresight: prevent deactivate active config while enabling the config

Published 2025-07-03 · Analyzed

7.8EPSS 0.002

CVE-2025-38068

crypto: lzo - Fix compression buffer overrun

Published 2025-06-18 · Modified

7.8EPSS 0.002

CVE-2025-38084

mm/hugetlb: unshare page tables during VMA split, not before

Published 2025-06-28 · Modified

7.8EPSS 0.002

Debian Debian Linux 11.0

Security check