CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
KernelLinuxovl: fix warning in ovl_create_real()No scoreKernelLinuxscsi: scsi_debug: Fix type in min_t to avoid stack OOBNo scoreKernelLinuxxen/netback: don't queue unlimited number of packagesNo scoreKernelLinuxUSB: core: Make do_proc_control() and do_proc_bulk() killableNo scoreKernelLinuxio-wq: drop wqe lock before creating new workerNo scoreKernelLinuxmedia: mxl111sf: change mutex_init() locationNo scoreKernelLinuxiocost: Fix divide-by-zero on donation from low hweight cgroupNo scoreKernelLinuxusb: xhci-mtk: fix list_del warning when enable list debugNo scoreKernelLinuxbtrfs: fix memory leak in __add_inode_ref()No scoreKernelLinuxselinux: fix sleeping function called from invalid contextNo scoreKernelLinuxnet: stmmac: dwmac-rk: fix oob read in rk_gmac_setupNo scoreKernelLinuxnet: systemport: Add global locking for descriptor lifecycleNo scoreKernelLinuxsit: do not call ipip6_dev_free() from sit_init_net()No scoreKernelLinuxnetdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_allocNo scoreKernelLinuxnet/packet: rx_owner_map depends on pg_vecNo scoreKernelLinuxigbvf: fix double free in `igbvf_probe`No scoreKernelLinuxmptcp: fix deadlock in __mptcp_push_pending()No scoreKernelLinuxmptcp: remove tcp ulp setsockopt supportNo scoreKernelLinuxnet: stmmac: fix tc flower deletion for VLAN priority Rx steeringNo scoreKernelLinuxmptcp: clear 'kern' flag from fallback socketsNo scoreKernelLinuxmptcp: never allow the PM to close a listener subflowNo scoreKernelLinuxdrm/amd/pm: fix a potential gpu_metrics_table memory leakNo scoreKernelLinuxrds: memory leak in __rds_conn_create()No scoreKernelLinuxnet/sched: sch_ets: don't remove idle classes from the round-robin listNo scoreKernelLinuxnet: hns3: fix use-after-free bug in hclgevf_send_mbx_msgNo scoreKernelLinuxinet_diag: fix kernel-infoleak for UDP socketsNo scoreKernelLinuxsch_cake: do not call cake_destroy() from cake_init()No scoreKernelLinuxbtrfs: use latest_dev in btrfs_show_devnameNo scoreKernelLinuxdm btree remove: fix use after free in rebalance_children()No scoreKernelLinuxtee: amdtee: fix an IS_ERR() vs NULL bugNo scoreKernelLinuxmac80211: track only QoS data frames for admission controlNo scoreKernelLinuxaudit: improve robustness of the audit queue handlingNo scoreKernelLinuxvduse: check that offset is within bounds in get_config()No scoreKernelLinuxvduse: fix memory corruption in vduse_dev_ioctl()No scoreKernelLinuxnet: netlink: af_netlink: Prevent empty skb by adding a check on len.No scoreKernelLinuxbpf: Fix kernel address leakage in atomic cmpxchg's r0 aux regNo scoreKernelLinuxbpf: Fix kernel address leakage in atomic fetchNo scoreKernelLinuxbpf: Fix signed bounds propagation after mov32No scoreKernelLinuxfirmware: arm_scpi: Fix string overflow in SCPI genpd driverNo scoreKernelLinuxdrm/msm: Fix null ptr access msm_ioctl_gem_submit()No scoreKernelLinuxmac80211: validate extended element ID is presentNo scoreKernelLinuxnfc: fix segfault in nfc_genl_dump_devices_doneNo scoreKernelLinuxi2c: virtio: fix completion handlingNo scoreKernelLinuxRDMA/irdma: Fix a user-after-free in add_pble_prmNo scoreKernelLinuxnetfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lockNo scoreKernelLinuxRDMA/mlx5: Fix releasing unallocated memory in dereg MR flowNo scoreKernelLinuxRDMA: Fix use-after-free in rxe_queue_cleanupNo scoreKernelLinuxxen/console: harden hvc_xen against event channel stormsNo scoreKernelLinuxxen/netfront: harden netfront against event channel stormsNo scoreKernelLinuxxen/blkfront: harden blkfront against event channel stormsNo score- Show moreLoading…