Latest critical vulnerabilities
CVSS 9.0 and up.
- linuxmd/raid1,raid10: fix deadlock in read error recovery path10.0 Critical
- linuxnvme: fix FDP fdpcidx bounds check9.8 Critical
- linuxocfs2: validate fast symlink target during inode read9.8 Critical
- linuxRDMA/siw: Fix endpoint/socket association handling9.8 Critical
- linuxlockd: Avoid hashing uninitialized bytes in nlm4svc_lookup_file()9.8 Critical
- linuxvhost/net: complete zerocopy ubufs only once9.3 Critical
- linuxvdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler10.0 Critical
- linuxsctp: validate embedded address parameter length9.1 Critical
- linuxcrypto: marvell/octeontx - fix DMA cleanup using wrong loop index10.0 Critical
- linuxcrypto: cavium/cpt - fix DMA cleanup using wrong loop index10.0 Critical
- linuxpower: supply: core: fix supplied_from allocations9.8 Critical
- linuxbnxt: fix head underflow on XDP head-grow9.8 Critical
- linuxtcp: clear sock_ops cb flags before force-closing a child socket9.8 Critical
- linuxnet/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen9.8 Critical
- linuxtipc: fix UAF in tipc_l2_send_msg()9.8 Critical
- linuxRDMA/bnxt_re: Proper rollback if the ioremap fails9.2 Critical
- linuxRDMA/bnxt_re: Avoid repeated requests to allocate WC pages9.3 Critical
- linuxRDMA/irdma: Replace waitqueue and flag with completion9.8 Critical
- linuxnet: serialize netif_running() check in enqueue_to_backlog()9.9 Critical
- linuxnet/9p: fix race condition on rdma->state in trans_rdma.c9.8 Critical
- linuxfs/ntfs3: call _ntfs_bad_inode() when failing to rename9.8 Critical
- linuxxprtrdma: Decouple req recycling from RPC completion9.8 Critical
- linuxnfs: use nfsi->rwsem to protect traversal of the file lock list9.8 Critical
- linuxxprtrdma: Fix bcall rep leak and unbounded peek9.8 Critical
- linuxxfrm: Fix dev use-after-free in xfrm async resumption9.8 Critical
- linuxxfrm: Fix xfrm state cache insertion race9.8 Critical
- linuxnetfilter: flowtable: fix and simplify IP6IP6 tunnel handling9.8 Critical
- linuxnetfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types9.8 Critical
- linuxipv6: ioam: fix type confusion of dst_entry9.8 Critical
- linuxksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE9.8 Critical
- linuxipv4: fib: Don't ignore error route in local/main tables.10.0 Critical
- linuxnetfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto()9.8 Critical
- linuxs390/mm: Fix handling of _PAGE_UNUSED pte bit9.3 Critical
- linuxgeneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint10.0 Critical
- linuxgeneve: validate inner network offset in geneve_gro_complete()10.0 Critical
- linuxnet: enetc: check the number of BDs needed for xdp_frame9.8 Critical
- linuxsctp: add INIT verification after cookie unpacking9.8 Critical
- linuxeth: fbnic: don't cache shinfo across skb realloc9.8 Critical
- linuxksmbd: fix use-after-free of fp->owner.name in durable handle owner check9.8 Critical
- linuxnetfs: Fix netfs_create_write_req() to handle async cache object creation9.8 Critical
- linuxnetfs: Fix barriering when walking subrequest list9.8 Critical
- linuxgue: validate REMCSUM private option length9.8 Critical
- linuxnetfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop9.1 Critical
- linuxqede: fix off-by-one in BD ring consumption on build_skb failure9.8 Critical
- linuxnet/liquidio: drop cached VF pci_dev LUT9.3 Critical
- linuxipv4: igmp: Fix potential UAF in igmp_gq_start_timer()9.8 Critical
- linuxipv6: mcast: Fix potential UAF in MLD delayed work9.8 Critical
- linuxnetfilter: nft_lookup: fix catchall element handling with inverted lookups9.1 Critical
- linuxipvs: ensure inner headers in ICMP errors are in headroom9.8 Critical
- linuxcifs: validate DFS referral string offsets9.4 Critical
- Show moreLoading…