kernel-headers vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the kernel-headers package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Missing Release of Resource after Effective Lifetime	*
M CVE-2025-40146	*
M CVE-2025-40187	*
M CVE-2025-40179	*
M Information Exposure	*
M CVE-2025-40197	*
M CVE-2025-40203	*
M CVE-2025-40195	*
M NULL Pointer Dereference	*
M CVE-2025-40206	*
L CVE-2025-40200	*
M Improper Locking	*
M Integer Underflow	*
L CVE-2025-40181	*
M Out-of-bounds Read	*
H CVE-2025-40186	*
M CVE-2025-40178	*
M CVE-2025-40201	*
L CVE-2025-40196	*
L CVE-2025-40198	*
L CVE-2025-40183	*
M CVE-2025-40147	*
M CVE-2025-40139	*
M CVE-2025-40111	*
M CVE-2025-40155	*
H CVE-2025-40133	*
L CVE-2025-40169	*
L CVE-2025-40162	*
M CVE-2025-40167	*
M CVE-2025-40154	*
M CVE-2025-40168	*
M CVE-2025-40121	*
M CVE-2025-40142	*
M NULL Pointer Dereference	*
M CVE-2025-40130	*
M CVE-2025-40115	*
M CVE-2025-40149	*
L CVE-2025-40159	*
H CVE-2025-40140	*
M CVE-2025-40110	*
M CVE-2025-40120	*
M CVE-2025-40166	*
M NULL Pointer Dereference	*
H CVE-2025-40157	*
M CVE-2025-40160	*
M CVE-2025-40173	*
M CVE-2025-40170	*
L CVE-2025-40125	*
H Expired Pointer Dereference	*
M CVE-2025-40164	*
H CVE-2025-40158	*
M CVE-2025-40113	*
M CVE-2025-40132	*
M CVE-2025-40153	*
M CVE-2025-40122	*
L CVE-2025-40123	*
M CVE-2025-40171	*
H Expired Pointer Dereference	*
H CVE-2025-40135	*
M CVE-2025-40109	*
M Use After Free	*
M Double Free	*
L CVE-2025-40103	*
L NULL Pointer Dereference	*
M CVE-2025-40102	*
L CVE-2025-40099	*
L CVE-2025-40086	*
M Expected Behavior Violation	*
L CVE-2025-40105	*
M NULL Pointer Dereference	*
M NULL Pointer Dereference	*
L CVE-2025-40035	*
L CVE-2025-40049	*
M Improper Check or Handling of Exceptional Conditions	*
M Improper Input Validation	*
M Improper Validation of Specified Type of Input	*
L CVE-2025-40042	*
M Improper Synchronization	*
M Out-of-Bounds	*
M Improper Check for Unusual or Exceptional Conditions	*
M CVE-2025-40044	*
M NULL Pointer Dereference	*
M NULL Pointer Dereference	*
M CVE-2025-40040	*
M Improper Check for Unusual or Exceptional Conditions	*
M Race Condition	*
M Use After Free	*
M NULL Pointer Dereference	*
M Always-Incorrect Control Flow Implementation	*
M NULL Pointer Dereference	*
M Integer Overflow or Wraparound	*
M Expired Pointer Dereference	*
L CVE-2025-40057	*
M NULL Pointer Dereference	*
M Use After Free	*
M Improper Synchronization	*
M CVE-2025-40070	*
M CVE-2025-40078	*
L Improper Locking	*
L Improper Synchronization	*
M CVE-2025-40024	*
L CVE-2025-40021	*
M Out-of-bounds Write	*
M Incorrect Calculation	*
M Use After Free	*
M Improper Update of Reference Count	*
L NULL Pointer Dereference	*
M CVE-2025-40016	*
M NULL Pointer Dereference	*
M NULL Pointer Dereference	*
M CVE-2025-40005	*
M Expired Pointer Dereference	*
M CVE-2025-39969	*
L CVE-2025-39974	*
M Improper Update of Reference Count	*
M CVE-2025-39980	*
M Out-of-bounds Write	*
M Integer Overflow or Wraparound	*
M Use After Free	*
M Use After Free	*
M Out-of-bounds Read	*
M Improper Validation of Specified Index, Position, or Offset in Input	*
M Use After Free	*
L CVE-2025-39990	*
M Expired Pointer Dereference	*
M CVE-2025-39968	*
M CVE-2025-39999	*
M Incorrect Calculation of Buffer Size	*
M CVE-2025-39970	*
M Use After Free	*
M Use After Free	*
M CVE-2025-39992	*
L NULL Pointer Dereference	*
M Expired Pointer Dereference	*
M CVE-2025-39998	*
L CVE-2025-39997	*
M CVE-2025-39965	*
M CVE-2025-39964	*
L CVE-2025-39958	*
L CVE-2025-39959	*
L Missing Handler	*
M CVE-2025-39961	*
L CVE-2025-39957	*
M Information Exposure	*
M Memory Leak	*
M Race Condition	*
L CVE-2025-39929	*
M Out-of-bounds Write	*
M CVE-2025-39932	*
M CVE-2025-39949	*
M NULL Pointer Dereference	*
M Expired Pointer Dereference	*
M CVE-2025-39933	*
L CVE-2025-39953	*
M CVE-2025-39939	*
L CVE-2025-39937	*
M CVE-2025-39940	*
M CVE-2025-39931	*
M Information Exposure	*
L CVE-2025-39913	*
M Heap-based Buffer Overflow	*
M CVE-2025-39894	*
M CVE-2025-39915	*
M CVE-2025-39922	*
M Improper Update of Reference Count	*
M CVE-2025-39896	*
M CVE-2025-39926	*
M CVE-2025-39923	*
M Out-of-Bounds	*
L Divide By Zero	*
M Out-of-bounds Read	*
M CVE-2025-39900	*
M CVE-2025-39911	*
M Race Condition	*
M CVE-2025-39914	*
M CVE-2025-39905	*
M Improper Resource Shutdown or Release	*
M Out-of-bounds Write	*
M NULL Pointer Dereference	*
M CVE-2025-39902	*
M Improper Check or Handling of Exceptional Conditions	*
M Out-of-Bounds	*
M CVE-2025-39792	*
M CVE-2025-39798	*
M Integer Overflow or Wraparound	*
M CVE-2025-39795	*
M CVE-2023-53317	*
M Inadequate Encryption Strength	*
L CVE-2025-39886	*
M Use After Free	*
M Race Condition	*
M Access of Resource Using Incompatible Type ('Type Confusion')	*
M NULL Pointer Dereference	*
L NULL Pointer Dereference	*
M NULL Pointer Dereference	*
M NULL Pointer Dereference	*
M Missing Release of Resource after Effective Lifetime	*
M Out-of-bounds Read	*
M Deadlock	*
M Missing Release of Resource after Effective Lifetime	*
M NULL Pointer Dereference	*
M NULL Pointer Dereference	*
M Use After Free	*
M NULL Pointer Dereference	*
M Use After Free	*
L NULL Pointer Dereference	*
M NULL Pointer Dereference	*
M Use After Free	*
M NULL Pointer Dereference	*
L CVE-2025-39811	*
M Missing Release of Resource after Effective Lifetime	*
M Release of Invalid Pointer or Reference	*
L NULL Pointer Dereference	*
M Race Condition	*
L CVE-2025-39819	*
M CVE-2025-39824	*
L CVE-2025-39813	*
M CVE-2025-39823	*
M CVE-2025-39809	*
M Out-of-bounds Write	*
M Missing Release of Resource after Effective Lifetime	*
M CVE-2025-39816	*
M CVE-2025-39832	*
M CVE-2025-39822	*
L CVE-2025-39829	*
M CVE-2025-39810	*
M CVE-2025-39808	*
M Improper Locking	*
L Excessive Platform Resource Consumption within a Loop	*
M CVE-2025-39765	*
L CVE-2025-39764	*
M CVE-2025-39791	*
L Deadlock	*
L Missing Default Case in Switch Statement	*
M Resource Management Errors	*
L CVE-2025-39787	*
M Improper Input Validation	*
L CVE-2025-39776	*
L CVE-2025-39756	*
M CVE-2025-39750	*
L Excessive Platform Resource Consumption within a Loop	*
M CVE-2025-39754	*
M Use After Free	*
M CVE-2025-39739	*
M Divide By Zero	*
M CVE-2025-39775	*
M Missing Standardized Error Handling Mechanism	*
L NULL Pointer Dereference	*
M CVE-2025-39782	*
M Double Free	*
L CVE-2025-39760	*
L Race Condition	*
L CVE-2025-39784	*
M NULL Pointer Dereference	*
M Improper Synchronization	*
M NULL Pointer Dereference	*
L CVE-2025-39721	*
L Comparison Using Wrong Factors	*
M Time-of-check Time-of-use (TOCTOU)	*
M Race Condition	*
M Race Condition	*
L Race Condition	*
M Race Condition	*
M Release of Invalid Pointer or Reference	*
M NULL Pointer Dereference	*
M Improper Control of a Resource Through its Lifetime	*
M CVE-2025-39677	*
M Improper Validation of Specified Quantity in Input	*
M Improper Update of Reference Count	*
M Use After Free	*
L CVE-2025-38733	*
M Use of Multiple Resources with Duplicate Identifier	*
M Use of Uninitialized Resource	*
L Divide By Zero	*
M Out-of-bounds Read	*
M Improper Validation of Syntactic Correctness of Input	*
M Use After Free	*
M Improper Validation of Consistency within Input	*
M Time-of-check Time-of-use (TOCTOU)	*
M NULL Pointer Dereference	*
L CVE-2025-38730	*
M Access of Uninitialized Pointer	*
M Missing Synchronization	*
M Integer Overflow or Wraparound	*
M Reachable Assertion	*
M Premature Release of Resource During Expected Lifetime	*
M Out-of-bounds Read	*
M Out-of-bounds Read	*
M Time-of-check Time-of-use (TOCTOU)	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
L Out-of-bounds Read	*
M NULL Pointer Dereference	*
M Insufficient Type Distinction	*
M NULL Pointer Dereference	*
M Race Condition	*
M Expired Pointer Dereference	*
L Improper Update of Reference Count	*
M Improper Input Validation	*
L Race Condition	*
L Improper Resource Locking	*
L Resource Injection	*
L Memory Leak	*
L NULL Pointer Dereference	*
M Incorrect Check of Function Return Value	*
L CVE-2025-21889	*
L Improper Input Validation	*
L Resource Injection	*
L Improper Input Validation	*
L NULL Pointer Dereference	*
L Improper Input Validation	*
L Access of Resource Using Incompatible Type ('Type Confusion')	*
M NULL Pointer Dereference	*
L Resource Injection	*
L CVE-2025-21881	*
L Integer Overflow or Wraparound	*
L CVE-2025-21880	*
L NULL Pointer Dereference	*
L Improper Input Validation	*
L Out-of-bounds Write	*
L Improper Update of Reference Count	*
L NULL Pointer Dereference	*
M Improper Handling of Unexpected Data Type	*
L Improper Handling of Structural Elements	*
L Improper Resource Locking	*
L Resource Injection	*
L CVE-2025-21876	*
L Improper Input Validation	*
L NULL Pointer Dereference	*
L CVE-2025-21831	*
L CVE-2025-21877	*
L CVE-2024-58090	*
L NULL Pointer Dereference	*
L Improper Input Validation	*
L CVE-2025-21872	*
L Improper Input Validation	*
L Deadlock	*
L Improper Resource Locking	*
L Unchecked Return Value	*
L NULL Pointer Dereference	*
L CVE-2025-21643	*
L Integer Overflow or Wraparound	*
L NULL Pointer Dereference	*
L Access of Uninitialized Pointer	*
L Improper Input Validation	*
L Use of Uninitialized Resource	*
L CVE-2024-58079	*
L Improper Resource Locking	*
L NULL Pointer Dereference	*
L NULL Pointer Dereference	*
L CVE-2024-58056	*
L Improper Input Validation	*
L Improper Control of a Resource Through its Lifetime	*
L CVE-2024-54458	*
L Improper Resource Shutdown or Release	*
L CVE-2025-21868	*
L Incorrect Calculation	*
L CVE-2025-21834	*
L Allocation of Resources Without Limits or Throttling	*
L CVE-2025-21821	*
L NULL Pointer Dereference	*
M NULL Pointer Dereference	*
L Race Condition	*
L NULL Pointer Dereference	*
L NULL Pointer Dereference	*
L Resource Exhaustion	*
L Resource Injection	*
L Resource Injection	*
L Out-of-bounds Read	*
L Improper Initialization	*
L NULL Pointer Dereference	*
L NULL Pointer Dereference	*
L Race Condition	*
L NULL Pointer Dereference	*
M Resource Injection	*
M Buffer Access with Incorrect Length Value	*
M CVE-2025-38510	*
M CVE-2025-38512	*
M Improper Input Validation	*
M CVE-2025-21873	*
M CVE-2025-21763	*
M CVE-2025-21729	*
M Use of Uninitialized Resource	*
M Improper Input Validation	*
M NULL Pointer Dereference	*
M Improper Input Validation	*
M Improper Input Validation	*
L Improper Input Validation	*
M CVE-2025-38511	*
M Out-of-Bounds	*
M Memory Leak	*
M Improper Control of a Resource Through its Lifetime	*
M Integer Overflow or Wraparound	*
M Improper Check or Handling of Exceptional Conditions	*
M Lack of Administrator Control over Security	*
M Use After Free	*
M Improper Handling of Values	*
M Memory Leak	*
M Use of Uninitialized Variable	*
M Memory Leak	*
M CVE-2025-21710	*
M Memory Leak	*
M NULL Pointer Dereference	*
M Improper Input Validation	*
M Improper Privilege Management	*
M NULL Pointer Dereference	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Improper Locking	*
M Improper Initialization	*
M Improper Initialization	*
M NULL Pointer Dereference	*
M Deadlock	*
M CVE-2024-57985	*
M Resource Injection	*
M Improper Input Validation	*
M Race Condition	*
M NULL Pointer Dereference	*
M Improper Handling of Exceptional Conditions	*
M Information Loss or Omission	*
M Use of Uninitialized Resource	*
M Use After Free	*
M Divide By Zero	*
M NULL Pointer Dereference	*
M Use of Uninitialized Resource	*
M Resource Injection	*
M CVE-2025-21760	*
M Information Exposure	*
M Use After Free	*
M CVE-2025-21758	*
M Improper Handling of Length Parameter Inconsistency	*
M Use After Free	*
M Improper Input Validation	*
M Out-of-bounds Write	*
M Use of Uninitialized Resource	*
M Use After Free	*
M Use After Free	*
M Out-of-bounds Read	*
M Memory Leak	*
M CVE-2025-21894	*
M Use After Free	*
M Off-by-one Error	*
M Integer Overflow or Wraparound	*
M NULL Pointer Dereference	*
M NULL Pointer Dereference	*
M Out-of-bounds Read	*
M Improper Input Validation	*
M Deadlock	*
M Use After Free	*
M Improper Validation of Array Index	*
M NULL Pointer Dereference	*
M Out-of-bounds Read	*
M Use After Free	*
M Improper Locking	*
M NULL Pointer Dereference	*
M NULL Pointer Dereference	*
M Use of Uninitialized Resource	*
M Use After Free	*
M NULL Pointer Dereference	*
M Out-of-bounds Read	*
H CVE-2025-38509	*
L Missing Release of Resource after Effective Lifetime	*
M Use After Free	*
M Heap-based Buffer Overflow	*
M NULL Pointer Dereference	*
M NULL Pointer Dereference	*
M CVE-2025-38674	*
M CVE-2025-38672	*
M Race Condition	*
M NULL Pointer Dereference	*
L NULL Pointer Dereference	*
M Improper Null Termination	*
L Improper Locking	*
L CVE-2025-38671	*
L NULL Pointer Dereference	*
L CVE-2025-38640	*
M NULL Pointer Dereference	*
L Out-of-bounds Read	*
M NULL Pointer Dereference	*
M Improper Handling of Parameters	*
M NULL Pointer Dereference	*
M Release of Invalid Pointer or Reference	*
M NULL Pointer Dereference	*
M Race Condition	*
M Race Condition	*
M Use After Free	*
M NULL Pointer Dereference	*
M NULL Pointer Dereference	*
M Use After Free	*
L Incorrect Check of Function Return Value	*
L CVE-2025-21884	*
L CVE-2025-38564	*
L CVE-2025-38563	*
L CVE-2025-38591	*
M Unchecked Return Value	*
M Use of Uninitialized Variable	*
L NULL Pointer Dereference	*
M CVE-2025-38569	*
M Missing Initialization of Resource	*
M CVE-2025-38592	*
L CVE-2025-38608	*

Vulnerability

Vulnerable Version

Missing Release of Resource after Effective Lifetime