Vulnerabilities

Linux Kernel 6.17

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

276CVEs

CVE-2025-39946

tls: make sure to abort the stream if headers are bogus

Published 2025-10-04 · Analyzed

9.8EPSS 0.096

CVE-2025-39682

tls: fix handling of zero-length records on the rx_list

Published 2025-09-05 · Analyzed

9.8KEVEPSS 0.020

CVE-2025-38566

sunrpc: fix handling of server side tls alerts

Published 2025-08-19 · Modified

9.8EPSS 0.006

CVE-2025-39841

scsi: lpfc: Fix buffer free/clear order in deferred receive path

Published 2025-09-19 · Modified

9.8EPSS 0.005

CVE-2025-38734

net/smc: fix UAF on smcsk after smc_listen_out()

Published 2025-09-05 · Modified

9.8EPSS 0.005

CVE-2026-46039

rxgk: Fix potential integer overflow in length check

Published 2026-05-27 · Analyzed

9.8EPSS 0.004

CVE-2025-39702

ipv6: sr: Fix MAC comparison to be constant-time

Published 2025-09-05 · Modified

9.8EPSS 0.004

CVE-2025-38737

cifs: Fix oops due to uninitialised variable

Published 2025-09-05 · Modified

9.8EPSS 0.004

CVE-2025-39703

net, hsr: reject HSR frame if skb can't hold tag

Published 2025-09-05 · Modified

9.8EPSS 0.004

CVE-2025-39880

libceph: fix invalid accesses to ceph_connection_v1_info

Published 2025-09-23 · Modified

9.8EPSS 0.003

CVE-2025-39673

ppp: fix race conditions in ppp_fill_forward_path

Published 2025-09-05 · Modified

9.8EPSS 0.003

CVE-2025-39948

ice: fix Rx page leak on multi-buffer frames

Published 2025-10-04 · Modified

9.8EPSS 0.003

CVE-2025-39932

smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work)

Published 2025-10-04 · Modified

9.8EPSS 0.003

CVE-2025-39943

ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer

Published 2025-10-04 · Modified

9.4EPSS 0.003

CVE-2025-39933

smb: client: let recv_done verify data_offset, data_length and remaining_data_length

Published 2025-10-04 · Modified

9.4EPSS 0.002

CVE-2025-38560

x86/sev: Evict cache lines during SNP memory validation

Published 2025-08-19 · Modified

9.3EPSS 0.002

CVE-2025-38728

smb3: fix for slab out of bounds on mount to ksmbd

Published 2025-09-04 · Modified

9.1EPSS 0.003

CVE-2025-39839

batman-adv: fix OOB read/write in network-coding decode

Published 2025-09-19 · Modified

8.8EPSS 0.003

CVE-2025-39848

ax25: properly unshare skbs in ax25_kiss_rcv()

Published 2025-09-19 · Modified

8.8EPSS 0.002

CVE-2025-39806

HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()

Published 2025-09-16 · Modified

8.8EPSS 0.002

CVE-2025-39864

wifi: cfg80211: fix use-after-free in cmp_bss()

Published 2025-09-19 · Modified

8.8EPSS 0.002

CVE-2025-39952

wifi: wilc1000: avoid buffer overflow in WID string configuration

Published 2025-10-04 · Modified

8.8EPSS 0.002

CVE-2025-39849

wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()

Published 2025-09-19 · Modified

8.8EPSS 0.002

CVE-2025-39827

net: rose: include node references in rose_neigh refcount

Published 2025-09-16 · Modified

8.8EPSS 0.002

CVE-2025-39918

wifi: mt76: fix linked list corruption

Published 2025-10-01 · Modified

8.8EPSS 0.002

CVE-2025-39826

net: rose: convert 'use' field to refcount_t

Published 2025-09-16 · Modified

8.8EPSS 0.002

CVE-2025-39698

io_uring/futex: ensure io_futex_wait() cleans up properly on failure

Published 2025-09-05 · Modified

8.8EPSS 0.002

CVE-2025-39862

wifi: mt76: mt7915: fix list corruption after hardware restart

Published 2025-09-19 · Modified

8.8EPSS 0.002

CVE-2025-39919

wifi: mt76: mt7996: add missing check for rx wcid entries

Published 2025-10-01 · Modified

8.8EPSS 0.002

CVE-2025-39704

LoongArch: KVM: Fix stack protector issue in send_ipi_data()

Published 2025-09-05 · Modified

8.8EPSS 0.001

CVE-2025-39961

iommu/amd/pgtbl: Fix possible race while increase page table level

Published 2025-10-09 · Modified

8.8EPSS 0.001

CVE-2025-39869

dmaengine: ti: edma: Fix memory allocation size for queue_priority_map

Published 2025-09-23 · Modified

8.4EPSS 0.002

CVE-2025-39809

HID: intel-thc-hid: intel-quicki2c: Fix ACPI dsd ICRS/ISUB length

Published 2025-09-16 · Modified

8.4EPSS 0.002

CVE-2025-39882

drm/mediatek: fix potential OF node use-after-free

Published 2025-09-23 · Modified

8.4EPSS 0.002

CVE-2026-46010

rxrpc: Fix error handling in rxgk_extract_token()

Published 2026-05-27 · Analyzed

8.1EPSS 0.004

CVE-2025-39860

Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()

Published 2025-09-19 · Modified

8.0EPSS 0.002

CVE-2025-39964

crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg

Published 2025-10-13 · Analyzed

7.8KEVEPSS 0.008

CVE-2025-38676

iommu/amd: Avoid stack buffer overflow from kernel cmdline

Published 2025-08-26 · Modified

7.8EPSS 0.004

CVE-2025-39866

fs: writeback: fix use-after-free in __mark_inode_dirty()

Published 2025-09-19 · Modified

7.8EPSS 0.003

CVE-2025-38678

netfilter: nf_tables: reject duplicate device on updates

Published 2025-09-03 · Modified

7.8EPSS 0.003

Linux Kernel 6.17

Security check