kernel-headers

Direct Vulnerabilities

Known vulnerabilities in the kernel-headers package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Improper Update of Reference Count	*
M Access of Uninitialized Pointer	*
M Improper Validation of Specified Type of Input	*
M Integer Overflow or Wraparound	*
M NULL Pointer Dereference	*
L Access of Uninitialized Pointer	*
M Divide By Zero	*
M NULL Pointer Dereference	*
M Untrusted Pointer Dereference	*
M Improper Update of Reference Count	*
M Out-of-bounds Read	*
M Improper Update of Reference Count	*
M NULL Pointer Dereference	*
M Use of Function with Inconsistent Implementations	*
M Improper Handling of Length Parameter Inconsistency	*
M Incorrect Conversion between Numeric Types	*
M Out-of-bounds Read	*
M Missing Release of Resource after Effective Lifetime	*
H Out-of-bounds Write	*
M NULL Pointer Dereference	*
M Improper Validation of Specified Index, Position, or Offset in Input	*
M Expired Pointer Dereference	*
M Improper Update of Reference Count	*
L Improper Update of Reference Count	*
M Out-of-bounds Read	*
M Race Condition	*
L Improper Validation of Consistency within Input	*
M Improper Validation of Specified Type of Input	*
M Improper Validation of Specified Index, Position, or Offset in Input	*
L Release of Invalid Pointer or Reference	*
L Missing Release of Resource after Effective Lifetime	*
L Missing Initialization of Resource	*
M Expired Pointer Dereference	*
L Missing Synchronization	*
M Missing Lock Check	*
M Buffer Access with Incorrect Length Value	*
M Multiple Locks of a Critical Resource	*
L Access of Uninitialized Pointer	*
M NULL Pointer Dereference	*
M Improper Validation of Specified Type of Input	*
M Incorrect Privilege Assignment	*
L Release of Invalid Pointer or Reference	*
M Improper Update of Reference Count	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M NULL Pointer Dereference	*
M Operation on a Resource after Expiration or Release	*
L Off-by-one Error	*
M Improper Control of a Resource Through its Lifetime	*
M Incorrect Calculation of Buffer Size	*
M Improper Update of Reference Count	*
L Access of Uninitialized Pointer	*
L Off-by-one Error	*
M Race Condition	*
M Unlock of a Resource that is not Locked	*
L Missing Release of Resource after Effective Lifetime	*
L Missing Release of Resource after Effective Lifetime	*
M Protection Mechanism Failure	*
M Protection Mechanism Failure	*
L NULL Pointer Dereference	*
M Race Condition	*
M Buffer Access with Incorrect Length Value	*
M Memory Leak	*
M Time-of-check Time-of-use (TOCTOU)	*
M Use After Free	*
L Improper Handling of Missing Special Element	*
M Missing Initialization of Resource	*
M Improper Update of Reference Count	*
M Deadlock	*
M Access of Uninitialized Pointer	*
M Memory Leak	*
L Return of Wrong Status Code	*
M Time-of-check Time-of-use (TOCTOU)	*
L CVE-2026-23054	*
M Improper Resource Locking	*
L Incorrect Synchronization	*
M Time-of-check Time-of-use (TOCTOU)	*
M Missing Release of Resource after Effective Lifetime	*
L Expired Pointer Dereference	*
M Improper Input Validation	*
M Deadlock	*
M Improper Validation of Specified Index, Position, or Offset in Input	*
M NULL Pointer Dereference	*
M Reachable Assertion	*
M CVE-2026-23086	*
M Operation on a Resource after Expiration or Release	*
M Race Condition	*
M Integer Underflow	*
L Use of Uninitialized Resource	*
M Improper Control of a Resource Through its Lifetime	*
L Race Condition	*
L Missing Release of Resource after Effective Lifetime	*
M NULL Pointer Dereference	*
M Buffer Access with Incorrect Length Value	*
M NULL Pointer Dereference	*
M Time-of-check Time-of-use (TOCTOU)	*
M Improper Validation of Array Index	*
L CVE-2024-14027	*
M Integer Underflow	*
M Improper Control of a Resource Through its Lifetime	*
L NULL Pointer Dereference	*
L Improper Handling of Inconsistent Special Elements	*
M Missing Release of Resource after Effective Lifetime	*
M Missing Release of Resource after Effective Lifetime	*
M Race Condition	*
M Buffer Underflow	*
M CVE-2026-22999	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
L Missing Initialization of Resource	*
M Reachable Assertion	*
M Use After Free	*
M Resource Exhaustion	*
L Memory Leak	*
M NULL Pointer Dereference	*
M NULL Pointer Dereference	*
M Out-of-bounds Write	*
M Missing Initialization of Resource	*
L NULL Pointer Dereference	*
L Time-of-check Time-of-use (TOCTOU)	*
L Missing Initialization of Resource	*
L Trust of System Event Data	*
L Improper Validation of Specified Index, Position, or Offset in Input	*
L Time-of-check Time-of-use (TOCTOU)	*
M Out-of-bounds Read	*
M Out-of-bounds Read	*
M Incorrect Conversion between Numeric Types	*
M Expired Pointer Dereference	*
L Improper Update of Reference Count	*
M Out-of-bounds Read	*
L Time-of-check Time-of-use (TOCTOU)	*
M Use After Free	*
M Use of Externally-Controlled Format String	*
L Time-of-check Time-of-use (TOCTOU)	*
M Buffer Overflow	*
L Improper Validation of Specified Type of Input	*
L Improper Validation of Specified Type of Input	*
L Premature Release of Resource During Expected Lifetime	*
L Missing Release of Resource after Effective Lifetime	*
L Deadlock	*
M Race Condition	*
M Use of Uninitialized Variable	*
L Missing Release of Resource after Effective Lifetime	*
M Memory Leak	*
L Missing Release of Resource after Effective Lifetime	*
M Out-of-Bounds	*
M Integer Overflow or Wraparound	*
L CVE-2023-54223	*
L Improper Resource Locking	*
L Improper Handling of Missing Special Element	*
L Use of a Non-reentrant Function in a Concurrent Context	*
L Race Condition	*
M Use After Free	*
L Improper Validation of Specified Index, Position, or Offset in Input	*
L Use of Out-of-range Pointer Offset	*
M Deadlock	*
L Reachable Assertion	*
L Race Condition	*
L NULL Pointer Dereference	*
M Reachable Assertion	*
M NULL Pointer Dereference	*
L Incorrect Calculation of Buffer Size	*
M Incorrect Calculation of Buffer Size	*
L Access of Uninitialized Pointer	*
L Deadlock	*
L Expired Pointer Dereference	*
L Time-of-check Time-of-use (TOCTOU)	*
M Access of Uninitialized Pointer	*
L Missing Release of Resource after Effective Lifetime	*
L NULL Pointer Dereference	*
M Use After Free	*
M CVE-2023-54226	*
L Protection Mechanism Failure	*
L NULL Pointer Dereference	*
M Out-of-Bounds	*
L Improper Update of Reference Count	*
L Missing Release of Resource after Effective Lifetime	*
M NULL Pointer Dereference	*
L Missing Release of Resource after Effective Lifetime	*
L Improper Update of Reference Count	*
M NULL Pointer Dereference	*
L NULL Pointer Dereference	*
M Use After Free	*
L Deadlock	*
L Improper Update of Reference Count	*
M Improper Input Validation	*
M Race Condition	*
M NULL Pointer Dereference	*
L Missing Release of Resource after Effective Lifetime	*
M NULL Pointer Dereference	*
M Race Condition	*
L Missing Synchronization	*
M Uncontrolled Recursion	*
L NULL Pointer Dereference	*
M Improper Validation of Specified Index, Position, or Offset in Input	*
L Race Condition	*
M Use of Uninitialized Variable	*
L Time-of-check Time-of-use (TOCTOU)	*
M Resource Exhaustion	*
L Missing Release of Resource after Effective Lifetime	*
L Integer Overflow or Wraparound	*
L Race Condition	*
M NULL Pointer Dereference	*
L Incorrect Check of Function Return Value	*
M Buffer Overflow	*
M NULL Pointer Dereference	*
M Missing Release of Resource after Effective Lifetime	*
L NULL Pointer Dereference	*
L Race Condition	*
M Use After Free	*
L Race Condition	*
M Improper Update of Reference Count	*
M Improper Synchronization	*
M Race Condition	*
M NULL Pointer Dereference	*
M NULL Pointer Dereference	*
L NULL Pointer Dereference	*
L State Issues	*
L Integer Overflow or Wraparound	*
L NULL Pointer Dereference	*
M Use After Free	*
L Incorrect Synchronization	*
L NULL Pointer Dereference	*
L Integer Underflow	*
L NULL Pointer Dereference	*
M Out-of-bounds Write	*
M NULL Pointer Dereference	*
M Missing Release of Resource after Effective Lifetime	*
M Integer Overflow or Wraparound	*
L Time-of-check Time-of-use (TOCTOU)	*
L Time-of-check Time-of-use (TOCTOU)	*
L Expired Pointer Dereference	*
M CVE-2023-54045	*
M Function Call with Incorrectly Specified Arguments	*
M Time-of-check Time-of-use (TOCTOU)	*
L Improper Validation of Consistency within Input	*
L Missing Release of Resource after Effective Lifetime	*
L Access of Uninitialized Pointer	*
L Reachable Assertion	*
M Expired Pointer Dereference	*
L Improper Resource Locking	*
M Race Condition	*
L Use of a Non-reentrant Function in a Concurrent Context	*
M Out-of-Bounds	*
M Improper Resource Locking	*
L NULL Pointer Dereference	*
L Time-of-check Time-of-use (TOCTOU)	*
L Access of Resource Using Incompatible Type ('Type Confusion')	*
L CVE-2023-54067	*
L CVE-2022-50719	*
L Premature Release of Resource During Expected Lifetime	*
L Improper Update of Reference Count	*
L Missing Release of Resource after Effective Lifetime	*
M Out-of-bounds Read	*
M Out-of-Bounds	*
M Improper Update of Reference Count	*
L Missing Release of Resource after Effective Lifetime	*
L Time-of-check Time-of-use (TOCTOU)	*
M Unchecked Return Value	*
M Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	*
M Time-of-check Time-of-use (TOCTOU)	*
L Missing Release of Resource after Effective Lifetime	*
M Unchecked Input for Loop Condition	*
L Allocation of Resources Without Limits or Throttling	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
L Deadlock	*
H Expired Pointer Dereference	*
M Improper Validation of Integrity Check Value	*
M Time-of-check Time-of-use (TOCTOU)	*
H Out-of-bounds Write	*
M CERT C Secure Coding Section 11 - Signals (SIG)	*
M Improper Validation of Specified Index, Position, or Offset in Input	*
H Access of Uninitialized Pointer	*
M Incorrect Synchronization	*
M Expired Pointer Dereference	*
H NULL Pointer Dereference	*
M Improper Locking	*
L Detection of Error Condition Without Action	*
M Incorrect Calculation of Buffer Size	*
M Insufficient Granularity of Access Control	*
M Out-of-bounds Write	*
M Expired Pointer Dereference	*
M Missing Synchronization	*
M CVE-2025-40343	*
M Expired Pointer Dereference	*
M Use of Uninitialized Resource	*
M Missing Reference to Active Allocated Resource	*
M Out-of-bounds Read	*
M Race Condition	*
M Missing Reference to Active Allocated Resource	*
M Use After Free	*
M CVE-2023-53835	*
L Missing Synchronization	*
L Missing Synchronization	*
M Expired Pointer Dereference	*
M Use of Uninitialized Resource	*
L NULL Pointer Dereference	*
L Expired Pointer Dereference	*
M CVE-2023-53824	*
M Expired Pointer Dereference	*
L Access of Uninitialized Pointer	*
L Incorrect Calculation of Buffer Size	*
M Race Condition	*
M Improper Validation of Array Index	*
M Time-of-check Time-of-use (TOCTOU)	*
M CVE-2022-50678	*
M Out-of-Bounds	*
M Expired Pointer Dereference	*
M Access of Uninitialized Pointer	*
M Race Condition	*
L Missing Initialization of Resource	*
M Improper Input Validation	*
M Insufficient Control Flow Management	*
L Missing Release of Resource after Effective Lifetime	*
L Missing Reference to Active Allocated Resource	*
L Missing Release of Resource after Effective Lifetime	*
L Function Call with Incorrectly Specified Arguments	*
M NULL Pointer Dereference	*
M NULL Pointer Dereference	*
L Unchecked Return Value	*
M Incorrect Bitwise Shift of Integer	*
M Incorrect Calculation of Buffer Size	*
L Incomplete Cleanup	*
L NULL Pointer Dereference	*
M Use After Free	*
M Operation on a Resource after Expiration or Release	*
L Missing Release of Resource after Effective Lifetime	*
M Missing Release of Resource after Effective Lifetime	*
M Improper Null Termination	*
H Race Condition	*
M Missing Release of Resource after Effective Lifetime	*
M Improper Synchronization	*
M Deadlock	*
M NULL Pointer Dereference	*
H Premature Release of Resource During Expected Lifetime	*
M Allocation of Resources Without Limits or Throttling	*
L NULL Pointer Dereference	*
L Missing Release of Resource after Effective Lifetime	*
M NULL Pointer Dereference	*
M NULL Pointer Dereference	*
M NULL Pointer Dereference	*
M Heap-based Buffer Overflow	*
M Integer Underflow	*
L Improper Synchronization	*
M NULL Pointer Dereference	*
M Deadlock	*
M Improper Locking	*
M Race Condition	*
L Access of Resource Using Incompatible Type ('Type Confusion')	*
M Use After Free	*
L Incorrect Calculation of Buffer Size	*
L Improper Null Termination	*
M NULL Pointer Dereference	*
L Numeric Range Comparison Without Minimum Check	*
H Information Exposure	*
M NULL Pointer Dereference	*
M NULL Pointer Dereference	*
M Expected Behavior Violation	*
L Reachable Assertion	*
M NULL Pointer Dereference	*
M CVE-2023-7324	*
L Use of Uninitialized Resource	*
M Race Condition	*
M Improper Check for Unusual or Exceptional Conditions	*
M NULL Pointer Dereference	*
L Double-Checked Locking	*
L CVE-2025-40035	*
M CVE-2025-40044	*
L CVE-2025-21976	*
M Incorrect Calculation	*
M Use After Free	*
M Improper Control of a Resource Through its Lifetime	*
L CVE-2023-53712	*
L Improper Input Validation	*
M Out-of-bounds Read	*
L Incorrect Synchronization	*
L Missing Release of Resource after Effective Lifetime	*
M Missing Release of Resource after Effective Lifetime	*
M Improper Check for Unusual or Exceptional Conditions	*
L Missing Release of Resource after Effective Lifetime	*
L CVE-2023-53711	*
L CVE-2022-50575	*
M NULL Pointer Dereference	*
L NULL Pointer Dereference	*
M Out-of-Bounds	*
M Access of Resource Using Incompatible Type ('Type Confusion')	*
L Deadlock	*
L Time-of-check Time-of-use (TOCTOU)	*
L Missing Release of Resource after Effective Lifetime	*
L Integer Overflow or Wraparound	*
L Missing Release of Resource after Effective Lifetime	*
M Out-of-bounds Write	*
M Out-of-bounds Read	*
L Missing Release of Resource after Effective Lifetime	*
L Missing Release of Resource after Effective Lifetime	*
M CVE-2022-50569	*
L Function Call with Incorrectly Specified Arguments	*
L Missing Release of Resource after Effective Lifetime	*
M Use After Free	*
M NULL Pointer Dereference	*
M Use After Free	*
M Incorrect Calculation of Buffer Size	*
M Out-of-bounds Read	*
M Stack-based Buffer Overflow	*
M Allocation of Resources Without Limits or Throttling	*
M Use After Free	*
M Off-by-one Error	*
M Out-of-bounds Write	*
L NULL Pointer Dereference	*
M Use After Free	*
M NULL Pointer Dereference	*
M NULL Pointer Dereference	*
M CVE-2025-39965	*
M CVE-2025-39964	*
M NULL Pointer Dereference	*
L CVE-2025-39957	*
L Missing Release of Resource after Effective Lifetime	*
M Improper Locking	*
L NULL Pointer Dereference	*
M Deadlock	*
M Use After Free	*
L CVE-2023-53618	*
L Incorrect Check of Function Return Value	*
M Improper Resource Locking	*
M Information Exposure	*
M Integer Overflow or Wraparound	*
M Integer Overflow or Wraparound	*
M Incomplete Cleanup	*
M Out-of-bounds Write	*
M NULL Pointer Dereference	*
M Out-of-bounds Read	*
M Missing Release of Resource after Effective Lifetime	*
L Missing Synchronization	*
L NULL Pointer Dereference	*
L Missing Release of Resource after Effective Lifetime	*
L Deadlock	*
M Missing Synchronization	*
M CVE-2022-50534	*
L NULL Pointer Dereference	*
M Use After Free	*
L Missing Release of Resource after Effective Lifetime	*
M Incorrect Calculation	*
L Improper Update of Reference Count	*
M NULL Pointer Dereference	*
M Race Condition	*
M Out-of-bounds Write	*
M NULL Pointer Dereference	*
M Improper Resource Locking	*
M Integer Overflow or Wraparound	*
M Use of Uninitialized Variable	*
M Expired Pointer Dereference	*
M Improper Input Validation	*
M CVE-2023-53539	*
L Missing Reference to Active Allocated Resource	*
L Improper Input Validation	*
M Improper Resource Shutdown or Release	*
L Improper Update of Reference Count	*
L Use of Uninitialized Resource	*
L Use of a Non-reentrant Function in a Concurrent Context	*
M Improper Locking	*
M Release of Invalid Pointer or Reference	*
M Missing Synchronization	*
M Reliance on a Single Factor in a Security Decision	*
M Incorrect Synchronization	*
L Improper Check for Unusual or Exceptional Conditions	*
L Improper Update of Reference Count	*
M Out-of-bounds Read	*
L NULL Pointer Dereference	*
M Double Free	*
L Incorrect Conversion between Numeric Types	*
M Access of Uninitialized Pointer	*
M Heap-based Buffer Overflow	*
M Race Condition	*
M Out-of-bounds Read	*
M Missing Release of Resource after Effective Lifetime	*
M Out-of-bounds Write	*
M NULL Pointer Dereference	*
M Use of a Non-reentrant Function in a Concurrent Context	*
M Excessive Iteration	*
L NULL Pointer Dereference	*
M NULL Pointer Dereference	*
M Missing Release of Resource after Effective Lifetime	*
M Memory Leak	*
M Improper Control of a Resource Through its Lifetime	*
M Race Condition	*
M Reachable Assertion	*
M Improper Control of a Resource Through its Lifetime	*
M NULL Pointer Dereference	*
M Improper Control of a Resource Through its Lifetime	*
M Resource Exhaustion	*
M Out-of-bounds Read	*
M NULL Pointer Dereference	*
L Buffer Access with Incorrect Length Value	*
M Unchecked Return Value	*
M Deadlock	*
L Race Condition	*
L NULL Pointer Dereference	*
M Integer Overflow or Wraparound	*
L Missing Release of Resource after Effective Lifetime	*
M Improper Initialization	*
L Missing Release of Resource after Effective Lifetime	*
L Use of Out-of-range Pointer Offset	*

Vulnerability

Vulnerable Version

Improper Update of Reference Count