Linux Kernel CVE Statistics
34 Linux Kernel CVEs in November 2017
Full month · Source: NIST NVD
In November 2017, 34 Linux kernel CVEs were published, sourced from the NIST National Vulnerability Database. Of these, 7 were rated High severity and 27 Medium. No CVEs from this month have been confirmed as actively exploited via the CISA KEV catalog. November's 34 CVEs represent 16% of all 2017 Linux kernel CVEs , up from October's 15 (a 127% month-over-month increase) .
34
Total CVEs
0
Critical
7
High
27
Medium
0
Low
0
KEV Exploited
All CVEs — November 2017
34 CVEs
| CVE ID | Package | Severity | CVSS | Published | Description | |
|---|---|---|---|---|---|---|
| CVE-2017-17052 | linux | High | 7.8 | 2017-11-29 | The mm_init function in kernel/fork.c in the Linux kernel before 4.12.10 does not clear the ->exe_file member of a new … | |
| CVE-2017-16939 | linux | High | 7.8 | 2017-11-24 | The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to ga… | |
| CVE-2017-0861 | linux | High | 7.8 | 2017-11-16 | Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to… | |
| CVE-2017-15115 | linux | High | 7.8 | 2017-11-15 | The sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check whether the intended n… | |
| CVE-2017-16526 | linux | High | 7.8 | 2017-11-04 | drivers/uwb/uwbd.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (general protectio… | |
| CVE-2017-1000405 | linux | High | 7.0 | 2017-11-30 | The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmd_mkdirty() in the touch_pmd() function insid… | |
| CVE-2017-17053 | linux | High | 7.0 | 2017-11-29 | The init_new_context function in arch/x86/include/asm/mmu_context.h in the Linux kernel before 4.12.10 does not correct… | |
| CVE-2017-16534 | linux | Medium | 6.8 | 2017-11-04 | The cdc_parse_cdc_header function in drivers/usb/core/message.c in the Linux kernel before 4.13.6 allows local users to… | |
| CVE-2017-16643 | linux | Medium | 6.6 | 2017-11-07 | The parse_hid_report_descriptor function in drivers/input/tablet/gtco.c in the Linux kernel before 4.13.11 allows local… | |
| CVE-2017-16644 | linux | Medium | 6.6 | 2017-11-07 | The hdpvr_probe function in drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel through 4.13.11 allows local users… | |
| CVE-2017-16647 | linux | Medium | 6.6 | 2017-11-07 | drivers/net/usb/asix_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NUL… | |
| CVE-2017-16646 | linux | Medium | 6.6 | 2017-11-07 | drivers/media/usb/dvb-usb/dib0700_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of… | |
| CVE-2017-16648 | linux | Medium | 6.6 | 2017-11-07 | The dvb_frontend_free function in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel through 4.13.11 allows loca… | |
| CVE-2017-16649 | linux | Medium | 6.6 | 2017-11-07 | The usbnet_generic_cdc_bind function in drivers/net/usb/cdc_ether.c in the Linux kernel through 4.13.11 allows local us… | |
| CVE-2017-16645 | linux | Medium | 6.6 | 2017-11-07 | The ims_pcu_get_cdc_union_desc function in drivers/input/misc/ims-pcu.c in the Linux kernel through 4.13.11 allows loca… |