Skip to content

Linux · weakness class

Denial of Service

1,959 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
9

Every one of the 1,959 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. SACK can cause extensive memory use via fragmented resend queueCVE-2019-11478Linux · CVSS 5.3 · 94% likely

    CWE-770

  2. Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger…CVE-2019-11479Linux · CVSS 5.3 · 91% likely

    CWE-405

  3. Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of…CVE-2018-5390Linux · 72% likely

    CWE-400

  4. The Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packetsCVE-2018-5391Linux · 32% likely

    CWE-400

  5. The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which allows remote attackers to cau…CVE-2017-5972Linux · 24% likely

    CWE-400

  6. The igmp_heard_query function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a denial of service (divide-by-zero error and panic) via IGMP pa…CVE-2012-0207Linux · 20% likely

    CWE-369

  7. net/core/net_namespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of creation and cleanup of network namespaces, which makes it easier for remot…CVE-2011-2189Linux · 18% likely

    CWE-400

  8. The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote attackers to cause a denial of service (IOMMU space exhaust…CVE-2009-3613Linux · 12% likely

    CWE-399

  9. The nfs4_proc_lock function in fs/nfs/nfs4proc.c in the NFSv4 client in the Linux kernel before 2.6.31-rc4 allows remote NFS servers to cause a denial of service (NULL pointer der…CVE-2009-3726Linux · 12% likely

    CWE-399

  10. The skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denial of service (infinite loop) via a small value…CVE-2013-4348Linux · 9.7% likely

    CWE-399

  11. The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of servic…CVE-2014-3687Linux · 8.6% likely

    CWE-400

  12. The IP stack in the Linux kernel through 4.8.2 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by trig…CVE-2016-7039Linux · 7.6% likely

    CWE-399

  13. A memory leak in the ath10k_usb_hif_tx_sg() function in drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (mem…CVE-2019-19078Linux · 6.6% likely

    CWE-401

  14. A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol. This issue results from the lack of proper handling of user-supplied data…CVE-2023-2156Linux · 6.2% likely

    CWE-617

  15. The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 do not properly consider yielding a processor, which allows remote attackers to cause a denial…CVE-2015-5364Linux · 6.1% likely

    CWE-399

  16. The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 provide inappropriate -EAGAIN return values, which allows remote attackers to cause a denial o…CVE-2015-5366Linux · 6.1% likely

    CWE-399

  17. A memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11 allows attackers to cause a denial of service (memory consumption) by triggering vf…CVE-2019-8980Linux · 5.9% likely

    CWE-401

  18. The SCTP implementation in the Linux kernel before 3.17.4 allows remote attackers to cause a denial of service (memory consumption) by triggering a large number of chunks in an as…CVE-2014-3688Linux · 5.9% likely

    CWE-399

  19. The batadv_frag_merge_packets function in net/batman-adv/fragmentation.c in the B.A.T.M.A.N. implementation in the Linux kernel through 3.18.1 uses an incorrect length field durin…CVE-2014-9428Linux · 5.4% likely

    CWE-399

  20. net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly consider the possibility of kmalloc failure, which allows remote attackers to cause a denia…CVE-2014-6417Linux · 5.2% likely

    CWE-399

  21. An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c omits a kfree call in certain smb2_handle_negotiate error conditions, aka…CVE-2022-47941Linux · CVSS 7.5 · 5.2% likely

    CWE-401

  22. A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by…CVE-2019-19052Linux · 5.2% likely

    CWE-401

  23. The sctp_process_param function in net/sctp/sm_make_chunk.c in the SCTP implementation in the Linux kernel before 3.17.4, when ASCONF is used, allows remote attackers to cause a d…CVE-2014-7841Linux · 5.2% likely

    CWE-399

  24. A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_link_xmit() hits an unknown state while attempting to parse SKB…CVE-2023-1390Linux · CVSS 7.5 · 5.1% likely

    CWE-1050

  25. A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption…CVE-2019-19050Linux · 5.1% likely

    CWE-401

  26. A flaw was found in the Linux kernel present since v4.0-rc1 and through v4.13-rc4. A crafted network packet sent remotely by an attacker may force the kernel to enter an infinite…CVE-2018-10938Linux · 4.9% likely

    CWE-835

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

Updated AboutDevelopersSign in