CVEs
Every published CVE. Without a filter the list holds those exploited, with a public check, or likely to be exploited; pick a year and month or a vendor for the rest.
| CVE | Vendor · product | Exploitation | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2021-22555Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE | Linux · Linux Kernel | Exploited | 8.3 | 79% | 2021-07-07 |
| CVE-2023-0266Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel | Linux · Linux Kernel | Exploited | 7.9 | 2.6% | 2023-01-30 |
| CVE-2019-11477Integer overflow in TCP_SKB_CB(skb)->tcp_gso_segs | Linux · Linux kernel | Likely | 7.5 | 99% | 2019-06-18 |
| CVE-2019-11478SACK can cause extensive memory use via fragmented resend queue | Linux · Linux kernel | Likely | 5.3 | 94% | 2019-06-18 |
| CVE-2019-11479Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger… | Linux · Linux kernel | Likely | 5.3 | 91% | 2019-06-18 |
| CVE-2018-5390Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of… | Linux · Linux Kernel | Likely | – | 72% | 2018-08-06 |
| CVE-2023-0210A bug affects the Linux kernel’s ksmbd NTLMv2 authentication and is known to crash the OS immediately in Linux-based systems. | Linux · Linux Kernel | Likely | – | 72% | 2023-03-27 |
| CVE-2022-47938An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2misc.c has an out-of-bounds read and OOPS for SMB2_TREE_CONNECT. | Linux · Linux Kernel | Likely | 6.5 | 60% | 2022-12-23 |
| CVE-2021-43267An issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16. The Transparent Inter-Process Communication (TIPC) functionality allows remote attackers to exploi… | Linux · Linux Kernel | Likely | – | 58% | 2021-11-02 |
| CVE-2017-18017The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-… | Linux · Linux Kernel | Likely | – | 53% | 2018-01-03 |
| CVE-2022-47939An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c has a use-after-free and OOPS for SMB2_TREE_DISCONNECT. | Linux · Linux Kernel | Likely | 9.8 | 49% | 2022-12-23 |
| CVE-2023-44466An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5. There is an integer signedness error, leading to a buffer overflow and remote code execution v… | Linux · Linux Kernel | Likely | – | 45% | 2023-09-29 |
| CVE-2015-1328The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file creation in the upper… | Linux · Linux Kernel | Likely | – | 38% | 2016-11-28 |
| CVE-2014-0038The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges via a recvmmsg system cal… | Linux · Linux Kernel | Likely | – | 35% | 2014-02-06 |
| CVE-2017-16995The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory corruption) or possibly have unspecified… | Linux · Linux Kernel | Likely | – | 30% | 2017-12-22 |
| CVE-2021-3490Linux kernel eBPF bitwise ops ALU32 bounds tracking | Linux · Linux kernel | Likely | 7.8 | 27% | 2021-06-04 |
| CVE-2016-3955The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or po… | Linux · Linux Kernel | Likely | – | 25% | 2016-07-03 |
| CVE-2017-5972The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which allows remote attackers to cau… | Linux · Linux Kernel | Likely | – | 24% | 2017-02-14 |
| CVE-2016-7117Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involvin… | Linux · Linux Kernel | Likely | – | 24% | 2016-10-10 |
| CVE-2006-2444The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service (crash) via unspecified remote attack v… | Linux · Linux Kernel | Likely | – | 23% | 2006-05-25 |
| CVE-2015-8660The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended acces… | Linux · Linux Kernel | Likely | – | 22% | 2015-12-28 |
| CVE-2010-1173The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remote attackers to cause a denial of servic… | Linux · Linux Kernel | Likely | – | 21% | 2010-05-07 |
| CVE-2004-1137Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers to cause a denial of service or execute… | Linux · Linux Kernel | Likely | – | 21% | 2004-12-15 |
| CVE-2017-1000112Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE __ip_append_data() calls ip_ufo_append_data() to append. Ho… | Linux · Linux Kernel | Likely | – | 21% | 2017-10-04 |
| CVE-2012-0207The igmp_heard_query function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a denial of service (divide-by-zero error and panic) via IGMP pa… | Linux · Linux Kernel | Likely | – | 20% | 2012-05-17 |
| CVE-2011-2189net/core/net_namespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of creation and cleanup of network namespaces, which makes it easier for remot… | Linux · Linux Kernel | Likely | – | 18% | 2011-10-10 |
| CVE-2017-7308The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a d… | Linux · Linux Kernel | Likely | – | 18% | 2017-03-29 |
| CVE-2010-2943The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unl… | Linux · Linux Kernel | Likely | – | 17% | 2010-09-30 |
| CVE-2009-0065Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.28-git8 allows remote attackers to have… | Linux · Linux Kernel | Likely | – | 17% | 2009-01-07 |
| CVE-2019-6974In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free. | Linux · Linux Kernel | Likely | – | 17% | 2019-02-15 |
| CVE-2017-1000251The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerabilit… | Linux · Linux Kernel | Likely | – | 16% | 2017-09-12 |
| CVE-2006-3468Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service (file system panic) via a crafted UDP packet with a V2 lookup procedure that… | Linux · Linux Kernel | Likely | – | 16% | 2006-07-18 |
| CVE-2018-11412In the Linux kernel 4.13 through 4.16.11, ext4_read_inline_data() in fs/ext4/inline.c performs a memcpy with an untrusted length value in certain circumstances involving a crafted… | Linux · Linux Kernel | Likely | – | 16% | 2018-05-24 |
| CVE-2009-2692The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local us… | Linux · Linux Kernel | Likely | – | 15% | 2009-08-14 |
| CVE-2015-8812drivers/infiniband/hw/cxgb3/iwch_cm.c in the Linux kernel before 4.5 does not properly identify error conditions, which allows remote attackers to execute arbitrary code or cause… | Linux · Linux Kernel | Likely | – | 15% | 2016-04-27 |
| CVE-2016-5696net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessio… | Linux · Linux Kernel | Likely | – | 15% | 2016-08-06 |
| CVE-2007-4567The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-by-hop IPv6 extended header, which allows remote attackers t… | Linux · Linux Kernel | Likely | – | 14% | 2007-12-21 |
| CVE-2007-1357The atalk_sum_skb function in AppleTalk for Linux kernel 2.6.x before 2.6.21, and possibly 2.4.x, allows remote attackers to cause a denial of service (crash) via an AppleTalk fra… | Linux · Linux Kernel | Likely | – | 14% | 2007-04-11 |
| CVE-2017-10661Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list corruption or use-after-free) via simult… | Linux · Linux Kernel | Likely | – | 13% | 2017-08-19 |
| CVE-2023-32233In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel me… | Linux · Linux Kernel | Likely | 7.8 | 13% | 2023-05-08 |
| CVE-2005-0815Multiple "range checking flaws" in the ISO9660 filesystem handler in Linux 2.6.11 and earlier may allow attackers to cause a denial of service or corrupt memory via a crafted file… | Linux · Linux Kernel | Likely | – | 13% | 2005-03-20 |
| CVE-2016-10229udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a re… | Linux · Linux Kernel | Likely | – | 13% | 2017-04-04 |
| CVE-2019-16746An issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not check the length of variable elements in a beacon head, leading to a buffer overf… | Linux · Linux Kernel | Likely | – | 13% | 2019-09-24 |
| CVE-2009-3613The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote attackers to cause a denial of service (IOMMU space exhaust… | Linux · Linux Kernel | Likely | – | 12% | 2009-10-19 |
| CVE-2010-0437The ip6_dst_lookup_tail function in net/ipv6/ip6_output.c in the Linux kernel before 2.6.27 does not properly handle certain circumstances involving an IPv6 TUN network interface… | Linux · Linux Kernel | Likely | – | 12% | 2010-03-24 |
| CVE-2009-3726The nfs4_proc_lock function in fs/nfs/nfs4proc.c in the NFSv4 client in the Linux kernel before 2.6.31-rc4 allows remote NFS servers to cause a denial of service (NULL pointer der… | Linux · Linux Kernel | Likely | – | 12% | 2009-11-09 |
| CVE-2004-0816Integer underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote attackers to cause a denial of service (application crash) via a malformed IP pack… | Linux · Linux Kernel | Likely | – | 12% | 2004-10-26 |
| CVE-2000-0506The "capabilities" feature in Linux before 2.2.16 allows local users to cause a denial of service or gain privileges by setting the capabilities to prevent a setuid program from d… | Linux · Linux Kernel | Likely | – | 11% | 2000-10-13 |
| CVE-2016-8655Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging the C… | Linux · Linux Kernel | Likely | – | 11% | 2016-12-08 |
| CVE-2009-4272A certain Red Hat patch for net/ipv4/route.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 allows remote attackers to cause a denial of service (deadlock) via cr… | Linux · Linux Kernel | Likely | – | 11% | 2010-01-27 |
Exploitation: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. Data as of 2026-11-15.