Vulnerabilities

Linux Kernel 6.8

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

302CVEs

CVE-2024-26857

geneve: make sure to pull inner header in geneve_rx()

Published 2024-04-17 · Modified

7.3EPSS 0.006

CVE-2024-26730

hwmon: (nct6775) Fix access to temperature configuration registers

Published 2024-04-03 · Modified

7.3EPSS 0.002

CVE-2024-26768

LoongArch: Change acpi_core_pic[NR_CPUS] to acpi_core_pic[MAX_CORE_PIC]

Published 2024-04-03 · Modified

7.2EPSS 0.006

CVE-2024-26630

mm: cachestat: fix folio read-after-free in cache walk

Published 2024-03-13 · Modified

7.1EPSS 0.003

CVE-2024-26763

dm-crypt: don't modify the data when using authenticated encryption

Published 2024-04-03 · Modified

7.1EPSS 0.003

CVE-2024-26674

x86/lib: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups

Published 2024-04-02 · Analyzed

7.1EPSS 0.003

CVE-2024-26791

btrfs: dev-replace: properly validate device names

Published 2024-04-04 · Analyzed

7.1EPSS 0.002

CVE-2023-52640

fs/ntfs3: Fix oob in ntfs_listxattr

Published 2024-04-03 · Modified

7.1EPSS 0.002

CVE-2024-26669

net/sched: flower: Fix chain template offload

Published 2024-04-02 · Analyzed

7.1EPSS 0.002

CVE-2023-52626

net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context

Published 2024-03-26 · Analyzed

7.1EPSS 0.002

CVE-2024-26673

netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations

Published 2024-04-02 · Analyzed

7.1EPSS 0.002

CVE-2024-26660

drm/amd/display: Implement bounds check for stream encoder creation in DCN301

Published 2024-04-02 · Modified

7.0EPSS 0.003

CVE-2024-26799

ASoC: qcom: Fix uninitialized pointer dmactl

Published 2024-04-04 · Modified

7.0EPSS 0.002

CVE-2024-24857

Race condition vulnerability in Linux kernel bluetooth in conn_info_{min,max}_age_set()

Published 2024-02-05 · Modified

6.8EPSS 0.003

CVE-2024-24861

Race condition vulnerability in Linux kernel media/xc4000 xc4000_get_frequency()

Published 2024-02-05 · Modified

6.3EPSS 0.002

CVE-2024-26918

PCI: Fix active state requirement in PME polling

Published 2024-04-17 · Analyzed

6.2EPSS 0.002

CVE-2024-26843

efi: runtime: Fix potential overflow of soft-reserved region size

Published 2024-04-17 · Analyzed

6.0EPSS 0.002

CVE-2024-27402

phonet/pep: fix racy skb_queue_empty() use

Published 2024-05-17 · Analyzed

5.8EPSS 0.002

CVE-2024-26798

fbcon: always restore the old font data in fbcon_do_set_font()

Published 2024-04-04 · Analyzed

5.5EPSS 0.003

CVE-2024-26840

cachefiles: fix memory leak in cachefiles_add_cache()

Published 2024-04-17 · Analyzed

5.5EPSS 0.003

CVE-2023-52487

net/mlx5e: Fix peer flow lists handling

Published 2024-02-29 · Analyzed

5.5EPSS 0.003

CVE-2024-27023

md: Fix missing release of 'active_io' for flush

Published 2024-05-01 · Analyzed

5.5EPSS 0.003

CVE-2024-26735

ipv6: sr: fix possible use-after-free and null-ptr-deref

Published 2024-04-03 · Analyzed

5.5EPSS 0.003

CVE-2024-1151

Kernel: stack overflow problem in open vswitch kernel module leading to dos

Published 2024-02-11 · Modified

5.5EPSS 0.003

CVE-2024-26741

dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished().

Published 2024-04-03 · Analyzed

5.5EPSS 0.003

CVE-2023-52658

Revert "net/mlx5: Block entering switchdev mode with ns inconsistency"

Published 2024-05-17 · Analyzed

5.5EPSS 0.003

CVE-2024-26726

btrfs: don't drop extent_map for free space inode on write error

Published 2024-04-03 · Modified

5.5EPSS 0.003

CVE-2024-26615

net/smc: fix illegal rmb_desc access in SMC-D connection dump

Published 2024-02-29 · Analyzed

5.5EPSS 0.003

CVE-2024-26715

usb: dwc3: gadget: Fix NULL pointer dereference in dwc3_gadget_suspend

Published 2024-04-03 · Analyzed

5.5EPSS 0.003

CVE-2024-26920

tracing/trigger: Fix to return error if failed to alloc snapshot

Published 2024-04-17 · Modified

5.5EPSS 0.003

CVE-2024-26733

arp: Prevent overflow in arp_req_get().

Published 2024-04-03 · Analyzed

5.5EPSS 0.003

CVE-2024-26744

RDMA/srpt: Support specifying the srpt_service_guid parameter

Published 2024-04-03 · Modified

5.5EPSS 0.003

CVE-2024-26778

fbdev: savage: Error out if pixclock equals zero

Published 2024-04-03 · Analyzed

5.5EPSS 0.003

CVE-2024-26777

fbdev: sis: Error out if pixclock equals zero

Published 2024-04-03 · Analyzed

5.5EPSS 0.003

CVE-2024-26675

ppp_async: limit MRU to 64K

Published 2024-04-02 · Analyzed

5.5EPSS 0.003

CVE-2024-26906

x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()

Published 2024-04-17 · Modified

5.5EPSS 0.003

CVE-2024-26752

l2tp: pass correct message length to ip6_append_data

Published 2024-04-03 · Analyzed

5.5EPSS 0.003

CVE-2024-26685

nilfs2: fix potential bug in end_buffer_async_write

Published 2024-04-03 · Analyzed

5.5EPSS 0.003

CVE-2024-26855

net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()

Published 2024-04-17 · Modified

5.5EPSS 0.003

CVE-2024-35815

fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion

Published 2024-05-17 · Modified

5.5EPSS 0.002

Linux Kernel 6.8

Security check