Vulnerabilities

Linux Kernel 6.9

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

329CVEs

CVE-2024-41011

drm/amdkfd: don't allow mapping the MMIO HDP page with large pages

Published 2024-07-18 · Modified

7.8EPSS 0.002

CVE-2024-35894

mptcp: prevent BPF accessing lowat from a subflow socket.

Published 2024-05-19 · Modified

7.8EPSS 0.002

CVE-2024-35911

ice: fix memory corruption bug with suspend and rebuild

Published 2024-05-19 · Analyzed

7.8EPSS 0.002

CVE-2024-27020

netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()

Published 2024-05-01 · Modified

7.8EPSS 0.002

CVE-2024-26932

usb: typec: tcpm: fix double-free issue in tcpm_port_unregister_pd()

Published 2024-05-01 · Modified

7.8EPSS 0.002

CVE-2024-35993

mm: turn folio_test_hugetlb into a PageType

Published 2024-05-20 · Modified

7.8EPSS 0.002

CVE-2024-36012

Bluetooth: msft: fix slab-use-after-free in msft_do_close()

Published 2024-05-23 · Modified

7.8EPSS 0.002

CVE-2024-27019

netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()

Published 2024-05-01 · Modified

7.8EPSS 0.002

CVE-2024-42111

btrfs: always do the basic checks for btrfs_qgroup_inherit structure

Published 2024-07-30 · Modified

7.8EPSS 0.002

CVE-2024-26923

af_unix: Fix garbage collector racing against connect()

Published 2024-04-24 · Modified

7.8EPSS 0.002

CVE-2024-36001

netfs: Fix the pre-flush when appending to a file in writethrough mode

Published 2024-05-20 · Modified

7.8EPSS 0.002

CVE-2024-35874

aio: Fix null ptr deref in aio_complete() wakeup

Published 2024-05-19 · Modified

7.8EPSS 0.002

CVE-2024-36894

usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete

Published 2024-05-30 · Modified

7.8EPSS 0.002

CVE-2024-35994

firmware: qcom: uefisecapp: Fix memory related IO errors and crashes

Published 2024-05-20 · Modified

7.8EPSS 0.002

CVE-2024-26934

USB: core: Fix deadlock in usb_deauthorize_interface()

Published 2024-05-01 · Modified

7.8EPSS 0.002

CVE-2024-36963

tracefs: Reset permissions on remount if permissions are options

Published 2024-06-03 · Analyzed

7.8EPSS 0.002

CVE-2025-71100

wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc()

Published 2026-01-13 · Modified

7.8EPSS 0.002

CVE-2024-27005

interconnect: Don't access req_list while it's being manipulated

Published 2024-05-01 · Modified

7.8EPSS 0.002

CVE-2024-27021

r8169: fix LED-related deadlock on module removal

Published 2024-05-01 · Modified

7.8EPSS 0.002

CVE-2024-26933

USB: core: Fix deadlock in port "disable" sysfs attribute

Published 2024-05-01 · Analyzed

7.8EPSS 0.002

CVE-2024-35798

btrfs: fix race in read_extent_buffer_pages()

Published 2024-05-17 · Modified

7.8EPSS 0.002

CVE-2026-23013

net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback

Published 2026-01-25 · Modified

7.8EPSS 0.002

CVE-2025-21851

bpf: Fix softlockup in arena_map_free on 64k page kernel

Published 2025-03-12 · Modified

7.8EPSS 0.002

CVE-2026-43374

net: nexthop: fix percpu use-after-free in remove_nh_grp_entry

Published 2026-05-08 · Analyzed

7.8EPSS 0.002

CVE-2024-35968

pds_core: Fix pdsc_check_pci_health function to use work thread

Published 2024-05-20 · Modified

7.8EPSS 0.002

CVE-2024-36961

thermal/debugfs: Fix two locking issues with thermal zone debug

Published 2024-06-03 · Modified

7.8EPSS 0.002

CVE-2026-23354

x86/fred: Correct speculative safety in fred_extint()

Published 2026-03-25 · Analyzed

7.8EPSS 0.001

CVE-2024-36955

ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node()

Published 2024-05-30 · Analyzed

7.7EPSS 0.002

CVE-2024-35857

icmp: prevent possible NULL dereferences from icmp_build_probe()

Published 2024-05-17 · Modified

7.5EPSS 0.010

CVE-2024-36929

net: core: reject skb_copy(_expand) for fraglist GSO skbs

Published 2024-05-30 · Modified

7.5EPSS 0.009

CVE-2024-27393

xen-netfront: Add missing skb_mark_for_recycle

Published 2024-05-09 · Modified

7.5EPSS 0.008

CVE-2024-35971

net: ks8851: Handle softirqs at the end of IRQ thread to fix hang

Published 2024-05-20 · Modified

7.5EPSS 0.007

CVE-2024-35891

net: phy: micrel: Fix potential null pointer dereference

Published 2024-05-19 · Modified

7.5EPSS 0.006

CVE-2024-35882

SUNRPC: Fix a slow server-side memory leak with RPC-over-TCP

Published 2024-05-19 · Modified

7.5EPSS 0.006

CVE-2026-46031

net: ks8851: Reinstate disabling of BHs around IRQ handler

Published 2026-05-27 · Analyzed

7.5EPSS 0.005

CVE-2024-36945

net/smc: fix neighbour and rtable leak in smc_ib_find_route()

Published 2024-05-30 · Modified

7.5EPSS 0.005

CVE-2024-35901

net: mana: Fix Rx DMA datasize and skb_over_panic

Published 2024-05-19 · Modified

7.5EPSS 0.005

CVE-2024-36962

net: ks8851: Queue RX packets in IRQ handler instead of disabling BHs

Published 2024-06-03 · Modified

7.5EPSS 0.005

CVE-2024-35998

smb3: fix lock ordering potential deadlock in cifs_sync_mid_result

Published 2024-05-20 · Modified

7.5EPSS 0.004

CVE-2024-35999

smb3: missing lock when picking channel

Published 2024-05-20 · Modified

7.5EPSS 0.004

Linux Kernel 6.9

Security check