Vulnerabilities

Linux Kernel 6.17

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

276CVEs

CVE-2025-39906

drm/amd/display: remove oem i2c adapter on finish

Published 2025-10-01 · Modified

7.8EPSS 0.001

CVE-2025-39908

net: dev_ioctl: take ops lock in hwtstamp lower paths

Published 2025-10-01 · Modified

7.8EPSS 0.001

CVE-2025-38717

net: kcm: Fix race condition in kcm_unattach()

Published 2025-09-04 · Modified

7.8EPSS 0.001

CVE-2026-23162

drm/xe/nvm: Fix double-free on aux add failure

Published 2026-02-14 · Analyzed

7.8EPSS 0.001

CVE-2025-39825

smb: client: fix race with concurrent opens in rename(2)

Published 2025-09-16 · Modified

7.8EPSS 0.001

CVE-2025-39927

ceph: fix race condition validating r_parent before applying state

Published 2025-10-01 · Modified

7.8EPSS 0.001

CVE-2025-39966

iommufd: Fix race during abort for file descriptors

Published 2025-10-15 · Modified

7.8EPSS 0.001

CVE-2025-39941

zram: fix slot write race condition

Published 2025-10-04 · Modified

7.8EPSS 0.001

CVE-2026-31563

net: macb: Use dev_consume_skb_any() to free TX SKBs

Published 2026-04-24 · Modified

7.5EPSS 0.007

CVE-2026-43057

net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback

Published 2026-05-01 · Modified

7.5EPSS 0.007

CVE-2025-39770

net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM

Published 2025-09-11 · Modified

7.5EPSS 0.004

CVE-2025-39894

netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm

Published 2025-10-01 · Modified

7.5EPSS 0.003

CVE-2025-39857

net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync()

Published 2025-09-19 · Modified

7.5EPSS 0.003

CVE-2025-39929

smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path

Published 2025-10-04 · Modified

7.5EPSS 0.003

CVE-2025-39851

vxlan: Fix NPD when refreshing an FDB entry with a nexthop object

Published 2025-09-19 · Modified

7.5EPSS 0.003

CVE-2025-39942

ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size

Published 2025-10-04 · Modified

7.5EPSS 0.003

CVE-2025-39720

ksmbd: fix refcount leak causing resource not released

Published 2025-09-05 · Modified

7.5EPSS 0.003

CVE-2025-39897

net: xilinx: axienet: Add error handling for RX metadata pointer retrieval

Published 2025-10-01 · Modified

7.5EPSS 0.003

CVE-2025-71090

nfsd: fix nfsd_file reference leak in nfsd4_add_rdaccess_to_wrdeleg()

Published 2026-01-13 · Modified

7.5EPSS 0.002

CVE-2025-39694

s390/sclp: Fix SCCB present check

Published 2025-09-05 · Modified

7.3EPSS 0.002

CVE-2025-39757

ALSA: usb-audio: Validate UAC3 cluster segment descriptors

Published 2025-09-11 · Modified

7.1EPSS 0.002

CVE-2025-39687

iio: light: as73211: Ensure buffer holes are zeroed

Published 2025-09-05 · Modified

7.1EPSS 0.002

CVE-2026-43005

hwmon: (tps53679) Fix array access with zero-length block read

Published 2026-05-01 · Analyzed

7.1EPSS 0.002

CVE-2025-38736

net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization

Published 2025-09-05 · Modified

7.1EPSS 0.002

CVE-2025-39902

mm/slub: avoid accessing metadata when pointer is invalid in object_err()

Published 2025-10-01 · Modified

7.1EPSS 0.002

CVE-2025-39853

i40e: Fix potential invalid access when MAC list is empty

Published 2025-09-19 · Modified

7.1EPSS 0.002

CVE-2025-39817

efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare

Published 2025-09-16 · Modified

7.1EPSS 0.002

CVE-2025-39891

wifi: mwifiex: Initialize the chan_stats array to zero

Published 2025-10-01 · Analyzed

7.1EPSS 0.002

CVE-2025-39685

comedi: pcl726: Prevent invalid irq number

Published 2025-09-05 · Modified

7.1EPSS 0.002

CVE-2025-39901

i40e: remove read access to debugfs files

Published 2025-10-01 · Modified

7.1EPSS 0.002

CVE-2025-39883

mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory

Published 2025-09-23 · Analyzed

7.1EPSS 0.002

CVE-2025-39840

audit: fix out-of-bounds read in audit_compare_dname_path()

Published 2025-09-19 · Modified

7.1EPSS 0.002

CVE-2025-39922

ixgbe: fix incorrect map used in eee linkmode

Published 2025-10-01 · Modified

7.1EPSS 0.001

CVE-2025-39928

i2c: rtl9300: ensure data length is within supported range

Published 2025-10-01 · Modified

7.1EPSS 0.001

CVE-2025-39905

net: phylink: add lock for serializing concurrent pl->phydev writes with resolver

Published 2025-10-01 · Modified

7.0EPSS 0.001

CVE-2025-40300

x86/vmscape: Add conditional IBPB mitigation

Published 2025-09-11 · Modified

5.5EPSS 0.003

CVE-2026-23416

mm/mseal: update VMA end correctly on merge

Published 2026-04-02 · Analyzed

5.5EPSS 0.002

CVE-2025-40005

spi: cadence-quadspi: Implement refcount to handle unbind during busy

Published 2025-10-20 · Modified

5.5EPSS 0.002

CVE-2025-38683

hv_netvsc: Fix panic during namespace deletion with VF

Published 2025-09-04 · Modified

5.5EPSS 0.002

CVE-2025-38684

net/sched: ets: use old 'nbands' while purging unused classes

Published 2025-09-04 · Modified

5.5EPSS 0.002

Linux Kernel 6.17

Security check