Linux Kernel CVE Statistics

12 Linux Kernel CVEs in August 2017

Full month · Source: NIST NVD

July 2017 September 2017

In August 2017, 12 Linux kernel CVEs were published, sourced from the NIST National Vulnerability Database. Of these, 2 were rated Critical, 5 were rated High severity and 5 Medium. No CVEs from this month have been confirmed as actively exploited via the CISA KEV catalog. August's 12 CVEs represent 6% of all 2017 Linux kernel CVEs , up from July's 10 (a 20% month-over-month increase) .

12
Total CVEs
2
Critical
5
High
5
Medium
0
Low
0
KEV Exploited
All CVEs — August 2017 12 CVEs
All (12) Critical (2) High (5) Medium (5) Low (0)
CVE ID Package Severity CVSS Published Description
CVE-2017-13715 linux Critical 9.8 2017-08-29 The __skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel before 4.3 does not ensure that n_prot…
CVE-2017-12762 linux Critical 9.8 2017-08-09 In /drivers/isdn/i4l/isdn_net.c: A user-controlled buffer is copied into a local buffer of constant size using strcpy w…
CVE-2017-13686 linux High 7.8 2017-08-24 net/ipv4/route.c in the Linux kernel 4.13-rc1 through 4.13-rc6 is too late to check for a NULL fi field when RTM_F_FIB_…
CVE-2017-10662 linux High 7.8 2017-08-19 The sanity_check_raw_super function in fs/f2fs/super.c in the Linux kernel before 4.11.1 does not validate the segment …
CVE-2017-10663 linux High 7.8 2017-08-19 The sanity_check_ckpt function in fs/f2fs/super.c in the Linux kernel before 4.12.4 does not validate the blkoff and se…
CVE-2017-10661 linux High 7.0 2017-08-19 Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a deni…
CVE-2017-7533 linux High 7.0 2017-08-05 Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges …
CVE-2017-13694 linux Medium 5.5 2017-08-25 The acpi_ps_complete_final_op() function in drivers/acpi/acpica/psobject.c in the Linux kernel through 4.12.9 does not …
CVE-2017-13695 linux Medium 5.5 2017-08-25 The acpi_ns_evaluate() function in drivers/acpi/acpica/nseval.c in the Linux kernel through 4.12.9 does not flush the o…
CVE-2017-13693 linux Medium 5.5 2017-08-25 The acpi_ds_create_operands() function in drivers/acpi/acpica/dsutils.c in the Linux kernel through 4.12.9 does not flu…
CVE-2006-3635 linux Medium 5.5 2017-08-07 The ia64 subsystem in the Linux kernel before 2.6.26 allows local users to cause a denial of service (stack consumption…
CVE-2017-14051 linux Medium 4.4 2017-08-31 An integer overflow in the qla2x00_sysfs_write_optrom_ctl function in drivers/scsi/qla2xxx/qla_attr.c in the Linux kern…

Frequently Asked Questions

How many Linux kernel CVEs were published in August 2017?

12 Linux kernel CVEs were published in August 2017, sourced from the NIST National Vulnerability Database. Of these, 2 were rated Critical severity, 5 High, and 5 Medium.

How does August 2017 compare to other months?

August 2017's 12 CVEs represent 6% of all 2017 Linux kernel CVEs. Compared to July's 10 CVEs, this was a 20% increase month-over-month. View the full 2017 breakdown →

July 2017 2017 statistics September 2017