Vulnerabilities

Linux Kernel 6.8

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

302CVEs

CVE-2024-26608

ksmbd: fix global oob in ksmbd_nl_policy

Published 2024-02-29 · Analyzed

7.8EPSS 0.002

CVE-2024-26823

irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems

Published 2024-04-17 · Modified

7.8EPSS 0.002

CVE-2024-27414

rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back

Published 2024-05-17 · Modified

7.8EPSS 0.002

CVE-2024-26718

dm-crypt, dm-verity: disable tasklets

Published 2024-04-03 · Modified

7.8EPSS 0.002

CVE-2024-27431

cpumap: Zero-initialise xdp_rxq_info struct before running XDP program

Published 2024-05-17 · Modified

7.8EPSS 0.002

CVE-2024-35785

tee: optee: Fix kernel panic caused by incorrect error handling

Published 2024-05-17 · Modified

7.8EPSS 0.002

CVE-2024-26786

iommufd: Fix iopt_access_list_id overwrite bug

Published 2024-04-04 · Modified

7.8EPSS 0.002

CVE-2024-26919

usb: ulpi: Fix debugfs directory leak

Published 2024-04-17 · Modified

7.8EPSS 0.002

CVE-2024-26836

platform/x86: think-lmi: Fix password opcode ordering for workstations

Published 2024-04-17 · Analyzed

7.8EPSS 0.002

CVE-2023-52637

can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)

Published 2024-04-03 · Modified

7.8EPSS 0.002

CVE-2024-26724

net/mlx5: DPLL, Fix possible use after free after delayed work timer triggers

Published 2024-04-03 · Analyzed

7.8EPSS 0.002

CVE-2024-41018

fs/ntfs3: Add a check for attr_names and oatbl

Published 2024-07-29 · Modified

7.8EPSS 0.002

CVE-2024-27061

crypto: sun8i-ce - Fix use after free in unprepare

Published 2024-05-01 · Modified

7.8EPSS 0.002

CVE-2024-26623

pds_core: Prevent race issues involving the adminq

Published 2024-03-06 · Modified

7.8EPSS 0.002

CVE-2024-35792

crypto: rk3288 - Fix use after free in unprepare

Published 2024-05-17 · Modified

7.8EPSS 0.002

CVE-2024-39503

netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type

Published 2024-07-12 · Modified

7.8EPSS 0.002

CVE-2024-26699

drm/amd/display: Fix array-index-out-of-bounds in dcn35_clkmgr

Published 2024-04-03 · Modified

7.8EPSS 0.002

CVE-2024-26914

drm/amd/display: fix incorrect mpc_combine array size

Published 2024-04-17 · Modified

7.8EPSS 0.002

CVE-2024-26762

cxl/pci: Skip to handle RAS errors if CXL.mem device is detached

Published 2024-04-03 · Modified

7.8EPSS 0.002

CVE-2024-26728

drm/amd/display: fix null-pointer dereference on edid reading

Published 2024-04-03 · Modified

7.8EPSS 0.002

CVE-2024-57945

riscv: mm: Fix the out of bound issue of vmemmap address

Published 2025-01-21 · Modified

7.8EPSS 0.002

CVE-2024-26637

wifi: ath11k: rely on mac80211 debugfs handling for vif

Published 2024-03-18 · Modified

7.8EPSS 0.002

CVE-2023-52642

media: rc: bpf attach/detach requires write permission

Published 2024-04-17 · Analyzed

7.8EPSS 0.002

CVE-2024-27411

drm/nouveau: keep DMA buffers required for suspend/resume

Published 2024-05-17 · Modified

7.8EPSS 0.002

CVE-2024-27408

dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup

Published 2024-05-17 · Modified

7.8EPSS 0.002

CVE-2024-27062

nouveau: lock the client object tree.

Published 2024-05-01 · Modified

7.8EPSS 0.002

CVE-2024-26614

tcp: make sure init the accept_queue's spinlocks once

Published 2024-02-29 · Modified

7.8EPSS 0.002

CVE-2026-31693

cifs: some missing initializations on replay

Published 2026-04-30 · Analyzed

7.8EPSS 0.002

CVE-2026-31479

drm/xe: always keep track of remap prev/next

Published 2026-04-22 · Analyzed

7.8EPSS 0.002

CVE-2024-27405

usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs

Published 2024-05-17 · Analyzed

7.5EPSS 0.013

CVE-2024-26690

net: stmmac: protect updates of 64-bit statistics counters

Published 2024-04-03 · Modified

7.5EPSS 0.008

CVE-2024-26851

netfilter: nf_conntrack_h323: Add protection for bmp length out of range

Published 2024-04-17 · Modified

7.5EPSS 0.007

CVE-2024-26854

ice: fix uninitialized dplls mutex usage

Published 2024-04-17 · Analyzed

7.5EPSS 0.007

CVE-2024-26826

mptcp: fix data re-injection from stale subflow

Published 2024-04-17 · Modified

7.5EPSS 0.006

CVE-2024-26611

xsk: fix usage of multi-buffer BPF helpers for ZC XDP

Published 2024-02-29 · Modified

7.5EPSS 0.006

CVE-2024-26626

ipmr: fix kernel panic when forwarding mcast packets

Published 2024-03-06 · Modified

7.5EPSS 0.006

CVE-2024-26769

nvmet-fc: avoid deadlock on delete association path

Published 2024-04-03 · Modified

7.5EPSS 0.006

CVE-2024-26834

netfilter: nft_flow_offload: release dst in case direct xmit path is used

Published 2024-04-17 · Modified

7.5EPSS 0.006

CVE-2026-23003

ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()

Published 2026-01-25 · Modified

7.5EPSS 0.005

CVE-2025-39894

netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm

Published 2025-10-01 · Modified

7.5EPSS 0.003

Linux Kernel 6.8

Security check