Vulnerabilities

Linux Kernel 6.15

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

280CVEs

CVE-2025-37924

ksmbd: fix use-after-free in kerberos authentication

Published 2025-05-20 · Modified

9.8EPSS 0.212

CVE-2025-37778

ksmbd: Fix dangling pointer in krb_authenticate

Published 2025-05-01 · Modified

9.8EPSS 0.011

CVE-2025-37935

net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM

Published 2025-05-20 · Modified

9.8EPSS 0.005

CVE-2025-37894

net: use sock_gen_put() when sk_state is TCP_TIME_WAIT

Published 2025-05-20 · Modified

9.8EPSS 0.005

CVE-2025-38075

scsi: target: iscsi: Fix timeout on deleted connection

Published 2025-06-18 · Modified

9.8EPSS 0.005

CVE-2026-43376

ksmbd: fix use-after-free by using call_rcu() for oplock_info

Published 2026-05-08 · Analyzed

9.8EPSS 0.004

CVE-2025-38325

ksmbd: add free_transport ops in ksmbd connection

Published 2025-07-10 · Modified

9.8EPSS 0.004

CVE-2026-31501

net: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX path

Published 2026-04-22 · Analyzed

9.8EPSS 0.004

CVE-2025-22077

Revert "smb: client: fix TCP timers deadlock after rmmod"

Published 2025-04-16 · Modified

9.8EPSS 0.004

CVE-2025-37750

smb: client: fix UAF in decryption with multichannel

Published 2025-05-01 · Modified

9.8EPSS 0.004

CVE-2025-37959

bpf: Scrub packet on bpf_redirect_peer

Published 2025-05-20 · Modified

9.4EPSS 0.004

CVE-2025-37899

ksmbd: fix use-after-free in session logoff

Published 2025-05-20 · Modified

8.8EPSS 0.010

CVE-2025-37947

ksmbd: prevent out-of-bounds stream writes by validating *pos

Published 2025-05-20 · Modified

8.8EPSS 0.006

CVE-2025-37926

ksmbd: fix use-after-free in ksmbd_session_rpc_open

Published 2025-05-20 · Modified

8.8EPSS 0.005

CVE-2025-38052

net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done

Published 2025-06-18 · Modified

8.8EPSS 0.005

CVE-2025-37956

ksmbd: prevent rename with empty string

Published 2025-05-20 · Modified

8.8EPSS 0.004

CVE-2025-37952

ksmbd: Fix UAF in __close_file_table_ids

Published 2025-05-20 · Modified

8.8EPSS 0.004

CVE-2025-37777

ksmbd: fix use-after-free in __smb2_lease_break_noti()

Published 2025-05-01 · Modified

8.8EPSS 0.004

CVE-2025-37776

ksmbd: fix use-after-free in smb_break_all_levII_oplock()

Published 2025-05-01 · Modified

8.8EPSS 0.003

CVE-2025-38092

ksmbd: use list_first_entry_or_null for opinfo_get_list()

Published 2025-07-02 · Modified

8.8EPSS 0.003

CVE-2025-37885

KVM: x86: Reset IRTE to host control if *new* route isn't postable

Published 2025-05-09 · Modified

8.8EPSS 0.003

CVE-2025-38016

HID: bpf: abort dispatch if device destroyed

Published 2025-06-18 · Modified

8.8EPSS 0.003

CVE-2025-37918

Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue()

Published 2025-05-20 · Modified

8.8EPSS 0.002

CVE-2025-37790

net: mctp: Set SOCK_RCU_FREE

Published 2025-05-01 · Modified

8.8EPSS 0.002

CVE-2025-38074

vhost-scsi: protect vq->log_used with vq->mutex

Published 2025-06-18 · Modified

8.8EPSS 0.002

CVE-2025-37957

KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception

Published 2025-05-20 · Modified

8.8EPSS 0.002

CVE-2025-37996

KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort()

Published 2025-05-29 · Modified

8.8EPSS 0.002

CVE-2025-37936

perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.

Published 2025-05-20 · Modified

8.7EPSS 0.002

CVE-2025-37799

vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp

Published 2025-05-03 · Modified

8.6EPSS 0.003

CVE-2025-37749

net: ppp: Add bound checking for skb data on ppp_sync_txmung

Published 2025-05-01 · Modified

8.2EPSS 0.004

CVE-2025-37973

wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation

Published 2025-05-20 · Modified

8.1EPSS 0.002

CVE-2025-39889

Bluetooth: l2cap: Check encryption key size on incoming connection

Published 2025-09-24 · Modified

8.1EPSS 0.001

CVE-2025-37928

dm-bufio: don't schedule in atomic context

Published 2025-05-20 · Analyzed

7.81 PoCEPSS 0.007

CVE-2025-37756

net: tls: explicitly disallow disconnect

Published 2025-05-01 · Modified

7.8EPSS 0.003

CVE-2025-37886

pds_core: make wait_context part of q_info

Published 2025-05-09 · Modified

7.8EPSS 0.003

CVE-2025-37927

iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid

Published 2025-05-20 · Analyzed

7.8EPSS 0.003

CVE-2025-37752

net_sched: sch_sfq: move the limit validation

Published 2025-05-01 · Modified

7.8EPSS 0.003

CVE-2025-37873

eth: bnxt: fix missing ring index trim on error path

Published 2025-05-09 · Modified

7.8EPSS 0.003

CVE-2025-37822

riscv: uprobes: Add missing fence.i after building the XOL buffer

Published 2025-05-08 · Modified

7.8EPSS 0.003

CVE-2025-37869

drm/xe: Use local fence in error path of xe_migrate_clear

Published 2025-05-09 · Modified

7.8EPSS 0.003

Linux Kernel 6.15

Security check