Vulnerabilities

Linux Kernel 6.17

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

276CVEs

CVE-2025-39962

rxrpc: Fix untrusted unsigned subtract

Published 2025-10-09 · Modified

7.8EPSS 0.002

CVE-2025-39723

netfs: Fix unbuffered write error handling

Published 2025-09-05 · Modified

7.8EPSS 0.002

CVE-2025-38616

tls: handle data disappearing from under the TLS ULP

Published 2025-08-22 · Modified

7.8EPSS 0.002

CVE-2025-39965

xfrm: xfrm_alloc_spi shouldn't use 0 as SPI

Published 2025-10-13 · Modified

7.8EPSS 0.002

CVE-2025-38729

ALSA: usb-audio: Validate UAC3 power domain descriptors, too

Published 2025-09-04 · Modified

7.8EPSS 0.002

CVE-2025-39686

comedi: Make insn_rw_emulate_bits() do insn->n samples

Published 2025-09-05 · Modified

7.8EPSS 0.002

CVE-2026-52973

futex: Drop CLONE_THREAD requirement for private default hash alloc

Published 2026-06-24 · Modified

7.8EPSS 0.002

CVE-2025-39701

ACPI: pfr_update: Fix the driver update version check

Published 2025-09-05 · Modified

7.8EPSS 0.002

CVE-2025-39913

tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.

Published 2025-10-01 · Modified

7.8EPSS 0.002

CVE-2025-39766

net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit

Published 2025-09-11 · Modified

7.8EPSS 0.002

CVE-2025-39689

ftrace: Also allocate and copy hash for reading of filter files

Published 2025-09-05 · Modified

7.8EPSS 0.002

CVE-2025-39683

tracing: Limit access to parser->buffer when trace_get_user failed

Published 2025-09-05 · Modified

7.8EPSS 0.002

CVE-2025-39823

KVM: x86: use array_index_nospec with indices that come from guest

Published 2025-09-16 · Modified

7.8EPSS 0.002

CVE-2026-43408

ceph: add a bunch of missing ceph_path_info initializers

Published 2026-05-08 · Analyzed

7.8EPSS 0.002

CVE-2026-43059

Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers

Published 2026-05-05 · Analyzed

7.8EPSS 0.002

CVE-2025-39691

fs/buffer: fix use-after-free when call bh_read() helper

Published 2025-09-05 · Modified

7.8EPSS 0.002

CVE-2026-31511

Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete

Published 2026-04-22 · Modified

7.8EPSS 0.002

CVE-2026-23012

mm/damon/core: remove call_control in inactive contexts

Published 2026-01-25 · Analyzed

7.8EPSS 0.002

CVE-2025-39967

fbcon: fix integer overflow in fbcon_do_set_font

Published 2025-10-15 · Modified

7.8EPSS 0.002

CVE-2025-39956

igc: don't fail igc_probe() on LED setup error

Published 2025-10-09 · Modified

7.8EPSS 0.002

CVE-2025-39738

btrfs: do not allow relocation of partially dropped subvolumes

Published 2025-09-11 · Modified

7.8EPSS 0.002

CVE-2025-39835

xfs: do not propagate ENODATA disk errors into xattr code

Published 2025-09-16 · Modified

7.8EPSS 0.002

CVE-2026-31652

mm/damon/stat: deallocate damon_call() failure leaking damon_ctx

Published 2026-04-24 · Analyzed

7.8EPSS 0.002

CVE-2026-31650

mmc: vub300: fix use-after-free on disconnect

Published 2026-04-24 · Analyzed

7.8EPSS 0.002

CVE-2025-39828

atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().

Published 2025-09-16 · Modified

7.8EPSS 0.002

CVE-2025-38618

vsock: Do not allow binding to VMADDR_PORT_ANY

Published 2025-08-22 · Modified

7.8EPSS 0.002

CVE-2025-38730

io_uring/net: commit partial buffers on retry

Published 2025-09-04 · Modified

7.8EPSS 0.002

CVE-2025-38735

gve: prevent ethtool ops after shutdown

Published 2025-09-05 · Modified

7.8EPSS 0.002

CVE-2025-38718

sctp: linearize cloned gso packets in sctp_rcv

Published 2025-09-04 · Modified

7.8EPSS 0.002

CVE-2025-39810

bnxt_en: Fix memory corruption when FW resources change during ifdown

Published 2025-09-16 · Modified

7.8EPSS 0.002

CVE-2025-39824

HID: asus: fix UAF via HID_CLAIMED_INPUT validation

Published 2025-09-16 · Modified

7.8EPSS 0.002

CVE-2025-39855

ice: fix NULL access of tx->in_use in ice_ptp_ts_irq

Published 2025-09-19 · Modified

7.8EPSS 0.002

CVE-2025-38733

s390/mm: Do not map lowcore with identity mapping

Published 2025-09-05 · Modified

7.8EPSS 0.002

CVE-2025-39931

crypto: af_alg - Set merge to zero early in af_alg_sendmsg

Published 2025-10-04 · Modified

7.8EPSS 0.002

CVE-2025-39821

perf: Avoid undefined behavior from stopping/starting inactive events

Published 2025-09-16 · Modified

7.8EPSS 0.002

CVE-2025-39945

cnic: Fix use-after-free bugs in cnic_delete_task

Published 2025-10-04 · Modified

7.8EPSS 0.002

CVE-2025-39873

can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB

Published 2025-09-23 · Modified

7.8EPSS 0.002

CVE-2025-39863

wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work

Published 2025-09-19 · Modified

7.8EPSS 0.002

CVE-2025-39955

tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().

Published 2025-10-09 · Modified

7.8EPSS 0.002

CVE-2025-39911

i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path

Published 2025-10-01 · Analyzed

7.8EPSS 0.002

Linux Kernel 6.17

Security check