CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
KernelLinuxscsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()No scoreKernelLinuxscsi: scsi_debug: Fix type in min_t to avoid stack OOBNo scoreKernelLinuxovl: fix warning in ovl_create_real()No scoreKernelLinuxscsi: scsi_debug: Don't call kcalloc() if size arg is zeroNo scoreKernelLinuxxen/netback: don't queue unlimited number of packagesNo scoreKernelLinuxiocost: Fix divide-by-zero on donation from low hweight cgroupNo scoreKernelLinuxmedia: mxl111sf: change mutex_init() locationNo scoreKernelLinuxbtrfs: fix memory leak in __add_inode_ref()No scoreKernelLinuxnet/packet: rx_owner_map depends on pg_vecNo scoreKernelLinuxnet: systemport: Add global locking for descriptor lifecycleNo scoreKernelLinuxsit: do not call ipip6_dev_free() from sit_init_net()No scoreKernelLinuxnetdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_allocNo scoreKernelLinuxigbvf: fix double free in `igbvf_probe`No scoreKernelLinuxrds: memory leak in __rds_conn_create()No scoreKernelLinuxmptcp: clear 'kern' flag from fallback socketsNo scoreKernelLinuxdrm/amd/pm: fix a potential gpu_metrics_table memory leakNo scoreKernelLinuxdm btree remove: fix use after free in rebalance_children()No scoreKernelLinuxnet/sched: sch_ets: don't remove idle classes from the round-robin listNo scoreKernelLinuxnet: hns3: fix use-after-free bug in hclgevf_send_mbx_msgNo scoreKernelLinuxtee: amdtee: fix an IS_ERR() vs NULL bugNo scoreKernelLinuxinet_diag: fix kernel-infoleak for UDP socketsNo scoreKernelLinuxnet: netlink: af_netlink: Prevent empty skb by adding a check on len.No scoreKernelLinuxsch_cake: do not call cake_destroy() from cake_init()No scoreKernelLinuxmac80211: track only QoS data frames for admission controlNo scoreKernelLinuxaudit: improve robustness of the audit queue handlingNo scoreKernelLinuxbpf: Fix signed bounds propagation after mov32No scoreKernelLinuxfirmware: arm_scpi: Fix string overflow in SCPI genpd driverNo scoreKernelLinuxmac80211: validate extended element ID is presentNo scoreKernelLinuxnfc: fix segfault in nfc_genl_dump_devices_doneNo scoreKernelLinuxxen/console: harden hvc_xen against event channel stormsNo scoreKernelLinuxxen/netfront: harden netfront against event channel stormsNo scoreKernelLinuxxen/blkfront: harden blkfront against event channel stormsNo scoreKernelLinuxscsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()No scoreKernelLinuxovl: fix warning in ovl_create_real()No scoreKernelLinuxxen/netback: don't queue unlimited number of packagesNo scoreKernelLinuxmedia: mxl111sf: change mutex_init() locationNo scoreKernelLinuxnetdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_allocNo scoreKernelLinuxsit: do not call ipip6_dev_free() from sit_init_net()No scoreKernelLinuxigbvf: fix double free in `igbvf_probe`No scoreKernelLinuxnet/packet: rx_owner_map depends on pg_vecNo scoreKernelLinuxnet: systemport: Add global locking for descriptor lifecycleNo scoreKernelLinuxrds: memory leak in __rds_conn_create()No scoreKernelLinuxdm btree remove: fix use after free in rebalance_children()No scoreKernelLinuxsch_cake: do not call cake_destroy() from cake_init()No scoreKernelLinuxinet_diag: fix kernel-infoleak for UDP socketsNo scoreKernelLinuxmac80211: track only QoS data frames for admission controlNo scoreKernelLinuxnet: netlink: af_netlink: Prevent empty skb by adding a check on len.No scoreKernelLinuxnfc: fix segfault in nfc_genl_dump_devices_doneNo scoreKernelLinuxaudit: improve robustness of the audit queue handlingNo scoreKernelLinuxmac80211: validate extended element ID is presentNo score- Show moreLoading…