Vulnerabilities

Debian Debian Linux 11.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2060CVEs

CVE-2025-38396

fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass

Published 2025-07-25 · Modified

7.8EPSS 0.002

CVE-2025-38470

net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime

Published 2025-07-28 · Modified

7.8EPSS 0.002

CVE-2025-38498

do_change_type(): refuse to operate on unmounted/not ours mounts

Published 2025-07-30 · Modified

7.8EPSS 0.002

CVE-2025-38218

f2fs: fix to do sanity check on sit_bitmap_size

Published 2025-07-04 · Modified

7.8EPSS 0.002

CVE-2025-38212

ipc: fix to protect IPCS lookups using RCU

Published 2025-07-04 · Modified

7.8EPSS 0.002

CVE-2025-38715

hfs: fix slab-out-of-bounds in hfs_bnode_read()

Published 2025-09-04 · Modified

7.8EPSS 0.002

CVE-2025-38539

tracing: Add down_write(trace_event_sem) when adding trace event

Published 2025-08-16 · Modified

7.8EPSS 0.002

CVE-2025-38542

net: appletalk: Fix device refcount leak in atrtr_create()

Published 2025-08-16 · Modified

7.8EPSS 0.002

CVE-2025-38502

bpf: Fix oob access in cgroup local storage

Published 2025-08-16 · Modified

7.8EPSS 0.002

CVE-2025-38707

fs/ntfs3: Add sanity check for file name

Published 2025-09-04 · Modified

7.8EPSS 0.002

CVE-2025-38735

gve: prevent ethtool ops after shutdown

Published 2025-09-05 · Modified

7.8EPSS 0.002

CVE-2025-38604

wifi: rtl818x: Kill URBs before clearing tx status queue

Published 2025-08-19 · Modified

7.8EPSS 0.002

CVE-2025-38538

dmaengine: nbpfaxi: Fix memory corruption in probe()

Published 2025-08-16 · Analyzed

7.8EPSS 0.002

CVE-2025-39710

media: venus: Add a check for packet size after reading from shared memory

Published 2025-09-05 · Modified

7.8EPSS 0.002

CVE-2025-39714

media: usbtv: Lock resolution while streaming

Published 2025-09-05 · Modified

7.8EPSS 0.002

CVE-2025-38579

f2fs: fix KMSAN uninit-value in extent_info usage

Published 2025-08-19 · Modified

7.8EPSS 0.002

CVE-2025-38714

hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()

Published 2025-09-04 · Modified

7.8EPSS 0.002

CVE-2025-38677

f2fs: fix to avoid out-of-boundary access in dnode page

Published 2025-08-30 · Modified

7.8EPSS 0.002

CVE-2025-38653

proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al

Published 2025-08-22 · Modified

7.8EPSS 0.002

CVE-2025-38245

atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().

Published 2025-07-09 · Analyzed

7.8EPSS 0.002

CVE-2025-39738

btrfs: do not allow relocation of partially dropped subvolumes

Published 2025-09-11 · Modified

7.8EPSS 0.002

CVE-2025-38227

media: vidtv: Terminating the subsequent process of initialization failure

Published 2025-07-04 · Modified

7.8EPSS 0.002

CVE-2025-37997

netfilter: ipset: fix region locking in hash types

Published 2025-05-29 · Modified

7.8EPSS 0.002

CVE-2025-39835

xfs: do not propagate ENODATA disk errors into xattr code

Published 2025-09-16 · Modified

7.8EPSS 0.002

CVE-2025-39828

atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().

Published 2025-09-16 · Modified

7.8EPSS 0.002

CVE-2025-39787

soc: qcom: mdt_loader: Ensure we don't read past the ELF header

Published 2025-09-11 · Modified

7.8EPSS 0.002

CVE-2025-38313

bus: fsl-mc: fix double-free on mc_dev

Published 2025-07-10 · Analyzed

7.8EPSS 0.002

CVE-2025-38618

vsock: Do not allow binding to VMADDR_PORT_ANY

Published 2025-08-22 · Modified

7.8EPSS 0.002

CVE-2025-38666

net: appletalk: Fix use-after-free in AARP proxy probe

Published 2025-08-22 · Analyzed

7.8EPSS 0.002

CVE-2025-38535

phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode

Published 2025-08-16 · Analyzed

7.8EPSS 0.002

CVE-2025-39788

scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE

Published 2025-09-11 · Modified

7.8EPSS 0.002

CVE-2025-38161

RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction

Published 2025-07-03 · Modified

7.8EPSS 0.002

CVE-2025-38455

KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight

Published 2025-07-25 · Modified

7.8EPSS 0.002

CVE-2025-38456

ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()

Published 2025-07-25 · Modified

7.8EPSS 0.002

CVE-2025-38058

__legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock

Published 2025-06-18 · Modified

7.8EPSS 0.002

CVE-2025-38548

hwmon: (corsair-cpro) Validate the size of the received input buffer

Published 2025-08-16 · Analyzed

7.8EPSS 0.002

CVE-2025-38718

sctp: linearize cloned gso packets in sctp_rcv

Published 2025-09-04 · Modified

7.8EPSS 0.002

CVE-2025-38262

tty: serial: uartlite: register uart driver in init

Published 2025-07-09 · Modified

7.8EPSS 0.002

CVE-2025-39824

HID: asus: fix UAF via HID_CLAIMED_INPUT validation

Published 2025-09-16 · Modified

7.8EPSS 0.002

CVE-2025-39783

PCI: endpoint: Fix configfs group list head handling

Published 2025-09-11 · Modified

7.8EPSS 0.002

Debian Debian Linux 11.0

Security check