kernel vulnerabilities (AlmaLinux)
1,955 vulnerabilities.
kernelAlmaLinuxnet: skbuff: propagate shared-frag marker in skb_zerocopy()No scorekernelAlmaLinuxxfs: fix exchange-range-to-eof file size exchange7.8 HighkernelAlmaLinuxnvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()9.2 CriticalkernelAlmaLinuxKVM: arm64: Transfer the hyp stack pages out of the host stage-28.2 HighkernelAlmaLinuxipv4: validate checksum_start before completing checksum9.3 CriticalkernelAlmaLinuxipv4: free inet_opt and ireq_opt after an RCU grace period9.8 CriticalkernelAlmaLinuxs390/boot: Avoid IPL parameter append past command line8.8 HighkernelAlmaLinuxxfrm: hold net_device reference under RCU in bundle creation7.8 HighkernelAlmaLinuxnetfilter: flowtable: hold reference on ct until flow is released7.8 HighkernelAlmaLinuxexec: Cleanup POSIX timers right after de_thread()7.8 HighkernelAlmaLinuxsignal: Prevent exec() race7.8 HighkernelAlmaLinuxKEYS: encrypted: fix integer overflow of datablob_len7.3 HighkernelAlmaLinuxdrm/amdgpu: Bound GPIO I2C table entry count from VBIOS7.0 HighkernelAlmaLinuxnetfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()7.5 HighkernelAlmaLinuxvirtio-fs: avoid double-free on failed queue setup8.4 HighkernelAlmaLinuxperf: Fix addr_filter_ranges lifetime7.8 HighkernelAlmaLinuxsmb: client: bound dirent name against end of SMB response in cifs_filldir8.1 HighkernelAlmaLinuxnetfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state7.8 HighkernelAlmaLinuxmd/raid5-ppl: fix use-after-free in ppl_do_flush()7.8 HighkernelAlmaLinuxsvcrdma: Reject Write/Reply chunks with segcount 09.1 CriticalkernelAlmaLinuxSUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry9.8 CriticalkernelAlmaLinuxPCI/sysfs: Add lockdown checks to legacy I/O and memory handlers8.8 HighkernelAlmaLinuxnvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()7.8 HighkernelAlmaLinuxNFSD: Prevent client use-after-free during blocked-lock reaping9.8 CriticalkernelAlmaLinuxscsi: target: iscsi: Reserve a terminator byte for the login payload9.1 CriticalkernelAlmaLinuxnvme: add missing SRCU grace period in error path9.8 CriticalkernelAlmaLinuxnvmet-auth: Synchronize timeout work during SQ teardown9.8 CriticalkernelAlmaLinuxKVM: nVMX: Always flush vpid02 on first use8.8 HighkernelAlmaLinuxmedia: cx231xx: reject geometry changes while the VBI queue is busy7.8 HighkernelAlmaLinuxscsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read9.1 CriticalkernelAlmaLinuxdrm/amdkfd: Add TLB flush after MES queue eviction/suspension8.8 HighkernelAlmaLinuxperf: Fix use-after-free when perf mmap() revival races with the last munmap()7.8 HighkernelAlmaLinuxvfio/pci: clear vdev->msi_perm after freeing it on init failure8.8 HighkernelAlmaLinuxKVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation9.3 CriticalkernelAlmaLinuxnfsd: defer vfree of compound ops to fix rpc_status UAF7.8 HighkernelAlmaLinuxnfsd: don't free session slots that are still in use9.8 CriticalkernelAlmaLinuxnfsd: fix stale s2s_cp_stateids IDR entry for async COPY9.8 CriticalkernelAlmaLinuxnfsd: fix UAF in async copy cancel and shutdown9.8 CriticalkernelAlmaLinuxnfsd: initialize copy-notify stateid before publishing it9.8 CriticalkernelAlmaLinuxnfsd: revoke copy-notify stateids before dropping their reference8.8 HighkernelAlmaLinuxsmb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions7.8 HighkernelAlmaLinuxsmb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()9.8 CriticalkernelAlmaLinuxsmb: client: reject a tree connect response whose byte count is too small9.1 CriticalkernelAlmaLinuxIn the Linux kernel, the following vulnerability has been resolved: entry: Fix seccomp bypass...8.4 HighkernelAlmaLinuxsvcrdma: Reject inline replies that overflow the pull-up buffer9.8 CriticalkernelAlmaLinuxsvcrdma: Validate Read chunk positions before reconstruction9.8 CriticalkernelAlmaLinuxopenvswitch: Fix CT limit teardown use-after-free7.8 HighkernelAlmaLinuxnvme-tcp: fix host memory disclosure on R2T for a read command7.5 HighkernelAlmaLinuxnvme-tcp: reject a read that transferred too few bytes7.5 HighkernelAlmaLinuxsctp: stop processing a packet once its association is deleted9.8 Critical- Show olderLoading…