Skip to content

Linux · weakness class

Other weaknesses

113 CVEs · 1 exploited

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

exploited in the wild
1
likely to be exploited
1

Every one of the 113 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a craf…CVE-2013-2094Linux · CVSS 8.4 · 48% likely

    CWE-189

  2. Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involvin…CVE-2016-7117Linux · 24% likely

    CWE-19

  3. Integer signedness error in the oz_hcd_get_desc_cnf function in drivers/staging/ozwpan/ozhcd.c in the OZWPAN driver in the Linux kernel through 4.0.5 allows remote attackers to ca…CVE-2015-4001Linux · 7.1% likely

    CWE-189

  4. The IPv4 implementation in the Linux kernel before 3.18.8 does not properly consider the length of the Read-Copy Update (RCU) grace period for redirecting lookups in the absence o…CVE-2015-1465Linux · 6.5% likely

    CWE-17

  5. The sfc (aka Solarflare Solarstorm) driver in the Linux kernel before 3.2.30 allows remote attackers to cause a denial of service (DMA descriptor consumption and network-controlle…CVE-2012-3412Linux · 5.9% likely

    CWE-189

  6. The oz_usb_handle_ep_data function in drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 allows remote attackers to cause a denial of servic…CVE-2015-4003Linux · 5.8% likely

    CWE-189

  7. drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by processing certain trailing payload data…CVE-2009-4536Linux · 5.2% likely

    CWE-189

  8. The udp6_ufo_fragment function in net/ipv6/udp_offload.c in the Linux kernel through 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly perform a certain siz…CVE-2013-4563Linux · 3.9% likely

    CWE-189

  9. The decode_choice function in net/netfilter/nf_conntrack_h323_asn1.c in the Linux kernel before 2.6.20.15, 2.6.21.x before 2.6.21.6, and before 2.6.22 allows remote attackers to c…CVE-2007-3642Linux · 3.9% likely

    CWE-189

  10. Off-by-one error in the build_unc_path_to_root function in fs/cifs/connect.c in the Linux kernel before 3.9.6 allows remote attackers to cause a denial of service (memory corrupti…CVE-2013-4247Linux · 3.6% likely

    CWE-189

  11. Integer overflow in the sctp_setsockopt_auth_key function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel 2.6.24-rc1 thr…CVE-2008-3526Linux · 3.5% likely

    CWE-189

  12. The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 2.6.32-git6 allows user-assisted remote attackers to cause a denial of service (divide-by-zero error…CVE-2009-4307Linux · 3.4% likely

    CWE-189

  13. The tcp_cwnd_reduction function in net/ipv4/tcp_input.c in the Linux kernel before 4.3.5 allows remote attackers to cause a denial of service (divide-by-zero error and system cras…CVE-2016-2070Linux · 3.3% likely

    CWE-189

  14. Integer underflow in the ieee80211_rx function in net/ieee80211/ieee80211_rx.c in the Linux kernel 2.6.x before 2.6.23 allows remote attackers to cause a denial of service (crash)…CVE-2007-4997Linux · 3.2% likely

    CWE-189

  15. Off-by-one error in the get_prng_bytes function in crypto/ansi_cprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic p…CVE-2013-4345Linux · 3.2% likely

    CWE-189

  16. Integer overflow in the dccp_setsockopt_change function in net/dccp/proto.c in the Datagram Congestion Control Protocol (DCCP) subsystem in the Linux kernel 2.6.17-rc1 through 2.6…CVE-2008-3276Linux · 3.2% likely

    CWE-189

  17. Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1, might allow remote attackers to obtain sensitive informati…CVE-2009-1265Linux · 3.2% likely

    CWE-189

  18. The ndisc_router_discovery function in net/ipv6/ndisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in the Linux kernel before 3.19.6 allows remote at…CVE-2015-2922Linux · 3.0% likely

    CWE-17

  19. The azx_position_ok function in hda_intel.c in Linux kernel 2.6.33-rc4 and earlier, when running on the AMD780V chip set, allows context-dependent attackers to cause a denial of s…CVE-2010-1085Linux · 2.9% likely

    CWE-189

  20. The selinux_parse_skb_ipv6 function in security/selinux/hooks.c in the Linux kernel before 2.6.12-rc4 allows remote attackers to cause a denial of service (OOPS) via vectors assoc…CVE-2005-4886Linux · 2.7% likely

    CWE-189

  21. The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 3.2.2, on the x86 platform and unspecified other platforms, allows user-assisted remote attackers to…CVE-2012-2100Linux · 2.7% likely

    CWE-189

  22. On multiple SR-IOV cars it is possible for VF's assigned to guests to send ethernet flow control pause frames via the PF. This includes Linux kernel ixgbe driver before commit f07…CVE-2015-1142857Linux · 2.1% likely

    CWE-254

  23. net: skbuff: propagate shared-frag marker through frag-transfer helpersCVE-2026-43503Linux · CVSS 8.8 · 2.0% likelycovered by CyberSIXT

    CWE-664

  24. The apic_get_tmcct function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5 allows guest OS users to cause a denial of service (divide-by-zero erro…CVE-2013-6367Linux · 1.4% likely

    CWE-189

  25. The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed __copy_to_user_inatomic and _…CVE-2015-1805Linux · 1.4% likely

    CWE-17

  26. The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1 miscalculates the number of pages during the handling of a mapping failure, which allows gu…CVE-2014-3601Linux · 1.2% likely

    CWE-189

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.