Vulnerabilities

Linux Kernel 6.9

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

329CVEs

CVE-2024-36886

tipc: fix UAF in error path

Published 2024-05-30 · Modified

9.8EPSS 0.013

CVE-2024-26811

ksmbd: validate payload size in ipc response

Published 2024-04-08 · Modified

9.8EPSS 0.008

CVE-2024-35884

udp: do not accept non-tunnel GSO skbs landing in a tunnel

Published 2024-05-19 · Modified

9.8EPSS 0.007

CVE-2024-35863

smb: client: fix potential UAF in is_valid_oplock_break()

Published 2024-05-19 · Modified

9.8EPSS 0.007

CVE-2024-35861

smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()

Published 2024-05-19 · Modified

9.8EPSS 0.007

CVE-2024-35862

smb: client: fix potential UAF in smb2_is_network_name_deleted()

Published 2024-05-19 · Modified

9.8EPSS 0.007

CVE-2024-35864

smb: client: fix potential UAF in smb2_is_valid_lease_break()

Published 2024-05-19 · Modified

9.8EPSS 0.007

CVE-2024-35869

smb: client: guarantee refcounted children from parent session

Published 2024-05-19 · Modified

9.8EPSS 0.006

CVE-2024-35865

smb: client: fix potential UAF in smb2_is_valid_oplock_break()

Published 2024-05-19 · Modified

9.8EPSS 0.006

CVE-2024-35870

smb: client: fix UAF in smb2_reconnect_server()

Published 2024-05-19 · Modified

9.8EPSS 0.006

CVE-2024-36911

hv_netvsc: Don't free decrypted memory

Published 2024-05-30 · Modified

9.8EPSS 0.006

CVE-2024-36958

NFSD: Fix nfsd4_encode_fattr4() crasher

Published 2024-05-30 · Modified

9.8EPSS 0.005

CVE-2026-43414

scsi: qla2xxx: Completely fix fcport double free

Published 2026-05-08 · Analyzed

9.8EPSS 0.004

CVE-2026-23427

ksmbd: fix use-after-free in durable v2 replay of active file handles

Published 2026-04-03 · Modified

9.8EPSS 0.003

CVE-2024-36912

Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl

Published 2024-05-30 · Modified

9.6EPSS 0.010

CVE-2024-36913

Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails

Published 2024-05-30 · Modified

9.3EPSS 0.007

CVE-2024-36909

Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted

Published 2024-05-30 · Modified

9.3EPSS 0.002

CVE-2024-35960

net/mlx5: Properly link new fs rules into the tree

Published 2024-05-20 · Modified

9.1EPSS 0.014

CVE-2024-36896

USB: core: Fix access violation during port device removal

Published 2024-05-30 · Analyzed

9.1EPSS 0.009

CVE-2024-35955

kprobes: Fix possible use-after-free issue on kprobe registration

Published 2024-05-20 · Modified

8.8EPSS 0.012

CVE-2024-35854

mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash

Published 2024-05-17 · Modified

8.8EPSS 0.006

CVE-2024-36964

fs/9p: only translate RWX permissions for plain 9P2000

Published 2024-06-03 · Modified

8.8EPSS 0.005

CVE-2024-36013

Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect()

Published 2024-05-23 · Modified

8.8EPSS 0.005

CVE-2024-35969

ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr

Published 2024-05-20 · Modified

8.8EPSS 0.004

CVE-2024-26931

scsi: qla2xxx: Fix command flush on cable pull

Published 2024-05-01 · Modified

8.8EPSS 0.004

CVE-2024-36922

wifi: iwlwifi: read txq->read_ptr under lock

Published 2024-05-30 · Modified

8.8EPSS 0.003

CVE-2024-36921

wifi: iwlwifi: mvm: guard against invalid STA ID on removal

Published 2024-05-30 · Modified

8.8EPSS 0.003

CVE-2024-35887

ax25: fix use-after-free bugs caused by ax25_ds_del_timer

Published 2024-05-19 · Modified

8.8EPSS 0.003

CVE-2024-35856

Bluetooth: btusb: mediatek: Fix double free of skb in coredump

Published 2024-05-17 · Modified

8.8EPSS 0.003

CVE-2024-35915

nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet

Published 2024-05-19 · Modified

8.8EPSS 0.003

CVE-2024-26990

KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status

Published 2024-05-01 · Modified

8.8EPSS 0.002

CVE-2024-35889

idpf: fix kernel panic on unknown packet types

Published 2024-05-19 · Modified

8.6EPSS 0.004

CVE-2024-35875

x86/coco: Require seeding RNG with RDRAND on CoCo systems

Published 2024-05-19 · Modified

8.4EPSS 0.003

CVE-2024-36910

uio_hv_generic: Don't free decrypted memory

Published 2024-05-30 · Modified

8.4EPSS 0.002

CVE-2024-26945

crypto: iaa - Fix nr_cpus < nr_iaa case

Published 2024-05-01 · Analyzed

8.4EPSS 0.002

CVE-2024-35980

arm64: tlb: Fix TLBI RANGE operand

Published 2024-05-20 · Modified

8.4EPSS 0.002

CVE-2024-35948

bcachefs: Check for journal entries overruning end of sb clean section

Published 2024-05-20 · Modified

8.4EPSS 0.002

CVE-2024-35987

riscv: Fix loading 64-bit NOMMU kernels past the start of RAM

Published 2024-05-20 · Modified

8.4EPSS 0.002

CVE-2024-27018

netfilter: br_netfilter: skip conntrack input hook for promisc packets

Published 2024-05-01 · Modified

8.2EPSS 0.006

CVE-2024-26980

ksmbd: fix slab-out-of-bounds in smb2_allocate_rsp_buf

Published 2024-05-01 · Modified

8.2EPSS 0.006

Linux Kernel 6.9

Security check