Linux · weakness class
Memory Corruption
6,959 CVEs · 16 exploited
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
- exploited in the wild
- 16
- likely to be exploited
- 35
Every one of the 6,959 is a mark on the map. Named now: 1 to 26, most at risk first.
- A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux ke…
- Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE
- Use-after-free in Linux kernel's netfilter: nf_tables component
- A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters…
- net: skbuff: preserve shared-frag marker during coalescing
- Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (committed on April 14, 2015). This ke…
- An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially a…
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows…
- net: fix __dst_negative_advice() race
- Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- netfilter: bridge: make ebt_snat ARP rewrite writable
- HID: core: zero-initialize the report buffer
- ipv6: account for fraggap on the paged allocation path
- Integer overflow in TCP_SKB_CB(skb)->tcp_gso_segs
- xfrm: esp: avoid in-place decrypt on shared skb frags
CWE-1231 article1 article this week: Microsoft warns attackers use GSocket relay tool to retain access to Linux servers
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present
- A bug affects the Linux kernel’s ksmbd NTLMv2 authentication and is known to crash the OS immediately in Linux-based systems.
- ksmbd: fix null pointer dereference in alloc_preauth_hash()
- A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes i…
- An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2misc.c has an out-of-bounds read and OOPS for SMB2_TREE_CONNECT.
- The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-…
- ksmbd: validate mech token in session setup
- An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c has a use-after-free and OOPS for SMB2_TREE_DISCONNECT.
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.