Debian Linux (Debian) - vulnerabilities (CVEs)

10014 CVEs, 1 in the last 30 days, 116 known versions, newest CVE from 2026-10-22. Vendor: Debian.

CVEs of Debian Linux

CVE-2026-111497 - CVSS 9.8 (critical), 2026-10-22: A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote…
CVE-2026-77118 - CVSS 8.4 (high), 2026-08-20: A heap out-of-bounds write exists in the Photo CD (PCD) decoder of GraphicsMagick. In DecodeImage() (coders/pcd.c), the Huffman delta loop advances its output…
CVE-2026-12996 - CVSS 8.1 (high), 2026-07-30: A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denial of service or…
CVE-2026-14355 - CVSS 5.6 (medium), 2026-07-03: In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before 8.4.23, 8.5.* before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL…
CVE-2026-56968 - CVSS 5.3 (medium), 2026-06-23: GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a…
CVE-2026-49975 - CVSS 7.5 (high), 2026-06-08: Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue…
CVE-2026-9256 - CVSS 9.2 (critical), 2026-05-22: NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex…
CVE-2026-46333 - CVSS 7.8 (high), 2026-05-15: In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic The 'dumpability' of a task is fundamentally…
CVE-2026-31431 - CVSS 7.8 (high), 2026-04-22: In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit…
CVE-2026-41082 - CVSS 7.8 (high), 2026-04-16: In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.
CVE-2026-34757 - CVSS 5.1 (medium), 2026-04-09: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.0.9 to…
CVE-2026-4775 - CVSS 7.8 (high), 2026-03-24: A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by…
CVE-2026-1940 - CVSS 7.5 (high), 2026-03-23: An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gst_wavparse_adtl_chunk() function. The patch added a size validation check lsize + 8 >…
CVE-2025-63261 - CVSS 7.8 (high), 2026-03-20: AWStats 8.0 is vulnerable to Command Injection via the open function
CVE-2026-3497 - CVSS 8.2 (high), 2026-03-12: Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux…
CVE-2026-25506 - CVSS 7.8 (high), 2026-02-10: MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow…
CVE-2025-64098 - CVSS 5.9 (medium), 2026-02-03: Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). Prior to versions 3.4.1, 3.3.1, and…
CVE-2025-62602 - CVSS 7.5 (high), 2026-02-03: Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). Prior to versions 3.4.1, 3.3.1, and…
CVE-2025-62603 - CVSS 7.5 (high), 2026-02-03: Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). ParticipantGenericMessage is the DDS…
CVE-2025-62799 - CVSS 9.8 (critical), 2026-02-03: Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). Prior to versions 3.4.1, 3.3.1, and…
CVE-2025-62600 - CVSS 8.6 (high), 2026-02-03: eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to 2.6.11, 2.14.6,…
CVE-2025-62599 - CVSS 8.6 (high), 2026-02-03: eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to 2.6.11, 2.14.6,…
CVE-2026-25061 - CVSS 7.5 (high), 2026-01-29: tcpflow is a TCP/IP packet demultiplexer. In versions up to and including 1.61, wifipcap parses 802.11 management frame elements and performs a length check…
CVE-2026-24765 - CVSS 7.8 (high), 2026-01-27: PHPUnit is a testing framework for PHP. A vulnerability has been discovered in versions prior to 12.5.8, 11.5.50, 10.5.62, 9.6.33, and 8.5.52 involving unsafe…
CVE-2025-68670 - CVSS 9.8 (critical), 2026-01-27: xrdp is an open source RDP server. xrdp before v0.10.5 contains an unauthenticated stack-based buffer overflow vulnerability. The issue stems from improper…
CVE-2026-24061 - CVSS 9.8 (critical), 2026-01-21: telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.
CVE-2026-23490 - CVSS 7.5 (high), 2026-01-16: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed…
CVE-2025-68615 - CVSS 9.8 (critical), 2025-12-23: net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon…
CVE-2025-6966 - CVSS 6.9 (medium), 2025-12-05: NULL pointer dereference in TagSection.keys() in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service (process crash)…
CVE-2025-63498 - CVSS 6.1 (medium), 2025-11-24: alinto SOGo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the "userName" parameter.
CVE-2025-64512 - CVSS 8.6 (high), 2025-11-10: Pdfminer.six is a community maintained fork of the original PDFMiner, a tool for extracting information from PDF documents. Prior to version 20251107,…
CVE-2025-62230 - CVSS 7.3 (high), 2025-10-30: A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees certain data structures…
CVE-2025-62231 - CVSS 7.3 (high), 2025-10-30: A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an…
CVE-2025-10934 - CVSS 7.8 (high), 2025-10-29: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…
CVE-2025-10921 - CVSS 7.8 (high), 2025-10-29: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…
CVE-2025-10922 - CVSS 7.8 (high), 2025-10-29: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…
CVE-2025-39920 - CVSS 5.5 (medium), 2025-10-01: In the Linux kernel, the following vulnerability has been resolved: pcmcia: Add error handling for add_interval() in do_validate_mem() In the…
CVE-2025-39923 - CVSS 5.5 (medium), 2025-10-01: In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees When we don't have a…
CVE-2025-39911 - CVSS 7.8 (high), 2025-10-01: In the Linux kernel, the following vulnerability has been resolved: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path If request_irq() in…
CVE-2025-39913 - CVSS 7.8 (high), 2025-10-01: In the Linux kernel, the following vulnerability has been resolved: tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.…
CVE-2025-39914 - CVSS 5.5 (medium), 2025-10-01: In the Linux kernel, the following vulnerability has been resolved: tracing: Silence warning when chunk allocation fails in trace_pid_write Syzkaller trigger…
CVE-2025-39916 - CVSS 5.5 (medium), 2025-10-01: In the Linux kernel, the following vulnerability has been resolved: mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters() When creating a…
CVE-2025-39907 - CVSS 5.5 (medium), 2025-10-01: In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer Avoid below overlapping…
CVE-2025-39909 - CVSS 5.5 (medium), 2025-10-01: In the Linux kernel, the following vulnerability has been resolved: mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters() Patch series…
CVE-2025-39902 - CVSS 7.1 (high), 2025-10-01: In the Linux kernel, the following vulnerability has been resolved: mm/slub: avoid accessing metadata when pointer is invalid in object_err() object_err()…
CVE-2025-39891 - CVSS 7.1 (high), 2025-10-01: In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Initialize the chan_stats array to zero The adapter->chan_stats[] array is…
CVE-2025-39894 - CVSS 7.5 (high), 2025-10-01: In the Linux kernel, the following vulnerability has been resolved: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm When…
CVE-2025-41244 - CVSS 7.8 (high), 2025-09-29: VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having…
CVE-2025-39883 - CVSS 7.1 (high), 2025-09-23: In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory When I did…
CVE-2025-39885 - CVSS 5.5 (medium), 2025-09-23: In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix recursive semaphore deadlock in fiemap call syzbot detected a OCFS2 hang due to…
CVE-2025-39876 - CVSS 5.5 (medium), 2025-09-23: In the Linux kernel, the following vulnerability has been resolved: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() The function…
CVE-2025-39877 - CVSS 7.8 (high), 2025-09-23: In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix use-after-free in state_show() state_show() reads kdamond->damon_ctx…
CVE-2025-39880 - CVSS 9.8 (critical), 2025-09-23: In the Linux kernel, the following vulnerability has been resolved: libceph: fix invalid accesses to ceph_connection_v1_info There is a place where generic…
CVE-2025-39881 - CVSS 7.8 (high), 2025-09-23: In the Linux kernel, the following vulnerability has been resolved: kernfs: Fix UAF in polling when open file is released A use-after-free (UAF) vulnerability…
CVE-2025-39869 - CVSS 8.4 (high), 2025-09-23: In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: edma: Fix memory allocation size for queue_priority_map Fix a critical…
CVE-2025-39870 - CVSS 7.8 (high), 2025-09-23: In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix double free in idxd_setup_wqs() The clean up in idxd_setup_wqs() has…
CVE-2025-39873 - CVSS 7.8 (high), 2025-09-23: In the Linux kernel, the following vulnerability has been resolved: can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB…
CVE-2025-39864 - CVSS 8.8 (high), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix use-after-free in cmp_bss() Following bss_free() quirk introduced in…
CVE-2025-39865 - CVSS 5.5 (medium), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: tee: fix NULL pointer dereference in tee_shm_put tee_shm_put have NULL pointer…
CVE-2025-39866 - CVSS 7.8 (high), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: fs: writeback: fix use-after-free in __mark_inode_dirty() An use-after-free issue occurred…
CVE-2025-39853 - CVSS 7.1 (high), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: i40e: Fix potential invalid access when MAC list is empty list_first_entry() never returns…
CVE-2025-39857 - CVSS 7.5 (high), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync() BUG: kernel NULL…
CVE-2025-39860 - CVSS 8 (high), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() syzbot reported the splat…
CVE-2025-39843 - CVSS 5.5 (medium), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: mm: slub: avoid wake up kswapd in set_track_prepare set_track_prepare() can incur lock…
CVE-2025-39844 - CVSS 5.5 (medium), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: mm: move page table sync declarations to linux/pgtable.h During our internal testing, we…
CVE-2025-39845 - CVSS 5.5 (medium), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() Define…
CVE-2025-39846 - CVSS 5.5 (medium), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() In…
CVE-2025-39847 - CVSS 5.5 (medium), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: ppp: fix memory leak in pad_compress_skb If alloc_skb() fails in pad_compress_skb(), it…
CVE-2025-39848 - CVSS 8.8 (high), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: ax25: properly unshare skbs in ax25_kiss_rcv() Bernard Pidoux reported a regression…
CVE-2025-39849 - CVSS 8.8 (high), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() If the ssid->datalen…
CVE-2025-39838 - CVSS 5.5 (medium), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: cifs: prevent NULL pointer dereference in UTF16 conversion There can be a NULL pointer…
CVE-2025-39839 - CVSS 8.8 (high), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix OOB read/write in network-coding decode batadv_nc_skb_decode_packet()…
CVE-2025-39841 - CVSS 9.8 (critical), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix buffer free/clear order in deferred receive path Fix a use-after-free…
CVE-2025-39842 - CVSS 5.5 (medium), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: ocfs2: prevent release journal inode after journal shutdown Before calling…
CVE-2025-39835 - CVSS 7.8 (high), 2025-09-16: In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code ENODATA (aka ENOATTR) has a very…
CVE-2025-39828 - CVSS 7.8 (high), 2025-09-16: In the Linux kernel, the following vulnerability has been resolved: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). syzbot reported the splat…
CVE-2025-39826 - CVSS 8.8 (high), 2025-09-16: In the Linux kernel, the following vulnerability has been resolved: net: rose: convert 'use' field to refcount_t The 'use' field in struct rose_neigh is used…
CVE-2025-39827 - CVSS 8.8 (high), 2025-09-16: In the Linux kernel, the following vulnerability has been resolved: net: rose: include node references in rose_neigh refcount Current implementation maintains…
CVE-2025-39824 - CVSS 7.8 (high), 2025-09-16: In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix UAF via HID_CLAIMED_INPUT validation After hid_hw_start() is called…
CVE-2025-39825 - CVSS 7.8 (high), 2025-09-16: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix race with concurrent opens in rename(2) Besides sending the rename…
CVE-2025-39823 - CVSS 7.8 (high), 2025-09-16: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: use array_index_nospec with indices that come from guest min and dest_id are…
CVE-2025-39819 - CVSS 5.5 (medium), 2025-09-16: In the Linux kernel, the following vulnerability has been resolved: fs/smb: Fix inconsistent refcnt update A possible inconsistent update of refcount was…
CVE-2025-39817 - CVSS 7.1 (high), 2025-09-16: In the Linux kernel, the following vulnerability has been resolved: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare Observed on kernel 6.6 (present on…
CVE-2025-39813 - CVSS 4.7 (medium), 2025-09-16: In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump When calling…
CVE-2025-39812 - CVSS 5.5 (medium), 2025-09-16: In the Linux kernel, the following vulnerability has been resolved: sctp: initialize more fields in sctp_v6_from_sk() syzbot found that sin6_scope_id was not…
CVE-2025-39808 - CVSS 5.5 (medium), 2025-09-16: In the Linux kernel, the following vulnerability has been resolved: HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() in…
CVE-2025-39806 - CVSS 8.8 (high), 2025-09-16: In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() A malicious HID device…
CVE-2023-53259 - CVSS 7.1 (high), 2025-09-15: In the Linux kernel, the following vulnerability has been resolved: VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF The call…
CVE-2022-50327 - CVSS 5.5 (medium), 2025-09-15: In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value The return value of…
CVE-2025-39800 - CVSS 7.8 (high), 2025-09-15: In the Linux kernel, the following vulnerability has been resolved: btrfs: abort transaction on unexpected eb generation at btrfs_copy_root() If we find an…
CVE-2025-39801 - CVSS 5.5 (medium), 2025-09-15: In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Remove WARN_ON for device endpoint command timeouts This commit addresses a…
CVE-2025-39798 - CVSS 7.3 (high), 2025-09-12: In the Linux kernel, the following vulnerability has been resolved: NFS: Fix the setting of capabilities when automounting a new filesystem Capabilities…
CVE-2025-39794 - CVSS 5.5 (medium), 2025-09-12: In the Linux kernel, the following vulnerability has been resolved: ARM: tegra: Use I/O memcpy to write to IRAM Kasan crashes the kernel trying to check…
CVE-2025-39795 - CVSS 5.5 (medium), 2025-09-12: In the Linux kernel, the following vulnerability has been resolved: block: avoid possible overflow for chunk_sectors check in blk_stack_limits() In…
CVE-2025-9086 - CVSS 7.5 (high), 2025-09-12: 1. A cookie is set using the `secure` keyword for `https://target` 2. curl is redirected to or otherwise made to speak with `http://target` (same hostname,…
CVE-2025-39788 - CVSS 7.8 (high), 2025-09-11: In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE On Google gs101, the number of…
CVE-2025-39790 - CVSS 8.4 (high), 2025-09-11: In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Detect events pointing to unexpected TREs When a remote device sends a…
CVE-2025-40300 - CVSS 5.5 (medium), 2025-09-11: In the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability that exploits…
CVE-2025-39782 - CVSS 5.5 (medium), 2025-09-11: In the Linux kernel, the following vulnerability has been resolved: jbd2: prevent softlockup in jbd2_log_do_checkpoint() Both jbd2_log_do_checkpoint() and…
CVE-2025-39783 - CVSS 7.8 (high), 2025-09-11: In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix configfs group list head handling Doing a list_del() on the epf_group…