Known vulnerabilities in linux-image-kvm (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 3420
Public exploits: 76
Known exploited (KEV): 20
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting linux-image-kvm (Ubuntu package) linux-image-kvm (Ubuntu package) is affected by 3420 known vulnerabilities: 1 critical, 29 high, 99 medium, 3291 low Critical High Medium Low

Vulnerabilities (3420)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU106863 - Incorrect Calculation
CVE-2025-21971
CWE-682 Low
No
No
Ubuntu Pro (Infra-only) 02.04.2025 SB20250402128
SB20250422196
SB2025050712
and 95 more
#VU105746 - Improper input validation
CVE-2023-52927
CWE-20 Low
Available
No
Ubuntu Pro (Infra-only), 5.4.0.1132.128, 5.15.0.1079.75 17.03.2025 SB2025031701
SB2025040917
SB2025040929
and 38 more
#VU102069 - Use After Free
CVE-2024-53237
CWE-416 Low
No
No
5.4.0.1131.127, 5.15.0.1076.72, 6.8.0-58.60 30.12.2024 SB2024123093
SB20250115100
SB2025011731
and 41 more
#VU102032 - Use After Free
CVE-2024-56653
CWE-416 Low
No
No
6.8.0-59.61 30.12.2024 SB2024123056
SB2025020805
SB2025020809
and 12 more
#VU100730 - Use of Uninitialized Resource
CVE-2024-53066
CWE-908 Low
No
No
Ubuntu Pro (Infra-only), 5.4.0.1127.123, 5.15.0.1076.72, 6.8.0-58.60 20.11.2024 SB2024112057
SB2024112401
SB2024112933
and 61 more
#VU100626 - NULL Pointer Dereference
CVE-2024-50296
CWE-476 Low
No
No
Ubuntu Pro (Infra-only), 5.4.0.1127.123, 5.15.0.1076.72, 6.8.0-58.60 19.11.2024 SB2024111937
SB2024112401
SB2024121502
and 53 more
#VU100194 - Use of Uninitialized Resource
CVE-2024-50237
CWE-908 Low
No
No
Ubuntu Pro (Infra-only), 5.4.0.1127.123, 5.15.0.1076.72, 6.8.0-58.60 10.11.2024 SB2024111038
SB2024112265
SB2024112266
and 61 more
#VU100192 - Error Handling
CVE-2024-50256
CWE-388 Low
No
No
Ubuntu Pro (Infra-only), 5.4.0.1131.127, 5.15.0.1078.74, 6.8.0-58.60 10.11.2024 SB2024111036
SB2024112401
SB2024121160
and 58 more
#VU98953 - NULL Pointer Dereference
CVE-2024-49944
CWE-476 Low
No
No
Ubuntu Pro (Infra-only), 5.4.0.1127.123, 5.15.0.1070.66, 6.8.0-54.56 22.10.2024 SB2024102265
SB2024120660
SB2024120662
and 56 more
#VU93381 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-47163
CWE-362 Low
No
No
Ubuntu Pro (Infra-only) 26.06.2024 SB2024062672
SB2024070867
SB2024070868
and 13 more
#VU90893 - Double Free
CVE-2023-52664
CWE-415 Low
No
No
Ubuntu Pro (Infra-only), 5.4.0.1132.128, 5.15.0.1079.75 03.06.2024 SB20240603166
SB2024070828
SB2024070840
and 37 more
#VU90657 - NULL Pointer Dereference
CVE-2023-52458
CWE-476 Low
No
No
Ubuntu Pro (Infra-only), 5.4.0.1127.123, 5.15.0.1054.50 01.06.2024 SB2024060121
SB20240624131
SB20240624132
and 45 more
#VU90325 - Out-of-bounds read
CVE-2021-47191
CWE-125 Low
No
No
Ubuntu Pro (Infra-only) 31.05.2024 SB20240531249
SB2024070712
SB2024070826
and 37 more
#VU90266 - Out-of-bounds read
CVE-2024-36934
CWE-125 Low
No
No
Ubuntu Pro (Infra-only), 5.4.0.1118.114, 5.15.0.1064.60, 6.8.0-40.40 31.05.2024 SB20240531190
SB2024062810
SB2024070973
and 40 more
#VU90220 - Use After Free
CVE-2024-26689
CWE-416 Low
No
No
Ubuntu Pro (Infra-only), 5.4.0.1132.128, 5.15.0.1058.54, 6.5.0.44.44 31.05.2024 SB20240531141
SB2024062493
SB20240702138
and 54 more
#VU90185 - Use After Free
CVE-2024-26974
CWE-416 Low
No
No
Ubuntu Pro (Infra-only), 5.4.0.1116.112, 5.15.0.1062.58 31.05.2024 SB20240531106
SB2024070838
SB2024070839
and 57 more
#VU90184 - Use After Free
CVE-2024-26996
CWE-416 Low
No
No
Ubuntu Pro (Infra-only), 5.15.0.1062.58, 6.8.0-38.38 31.05.2024 SB20240531105
SB2024070828
SB2024070838
and 48 more
#VU90065 - Use After Free
CVE-2023-52741
CWE-416 Low
No
No
Ubuntu Pro (Infra-only) 30.05.2024 SB20240530169
SB2024070449
SB2024070713
and 33 more
#VU90018 - Missing release of memory after effective lifetime
CVE-2021-47119
CWE-401 Low
No
No
Ubuntu Pro (Infra-only), 5.4.0.1131.127 30.05.2024 SB20240530123
SB2024070825
SB20240711216
and 19 more
#VU90014 - Missing release of memory after effective lifetime
CVE-2021-47150
CWE-401 Low
No
No
Ubuntu Pro (Infra-only) 30.05.2024 SB20240530119
SB20240711216
SB20240711219
and 14 more


Showing elements 1 - 20 out of 3420