kernel vulnerabilities (AlmaLinux)
1,969 vulnerabilities.
kernelAlmaLinuxwifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap7.6 HighkernelAlmaLinuxmac802154: llsec: add skb_cow_data() before in-place crypto8.8 HighkernelAlmaLinuxnet: ip_gre: require CAP_NET_ADMIN in the device netns for changelink8.8 HighkernelAlmaLinuxKEYS: fix overflow in keyctl_pkey_params_get_2()7.8 HighkernelAlmaLinuxkeys: Pin request_key_auth payload in instantiate paths7.8 HighkernelAlmaLinuxexfat: fix potential use-after-free in exfat_find_dir_entry()9.8 CriticalkernelAlmaLinuxblk-cgroup: fix UAF in __blkcg_rstat_flush()7.8 HighkernelAlmaLinuxtipc: fix slab-use-after-free Read in tipc_aead_decrypt_done8.8 HighkernelAlmaLinuxpNFS: Fix use-after-free in pnfs_update_layout()9.8 CriticalkernelAlmaLinuxKVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path7.8 HighkernelAlmaLinuxnfsd: release layout stid on setlease failure9.8 CriticalkernelAlmaLinuxNFSD: Fix SECINFO_NO_NAME decode error cleanup9.8 CriticalkernelAlmaLinuxnfsd: fix posix_acl leak on SETACL decode failure7.5 HighkernelAlmaLinuxNFSv4/flexfiles: reject zero filehandle version count7.5 HighkernelAlmaLinuxNFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr7.5 HighkernelAlmaLinuxfuse: re-lock request before replacing page cache folio7.8 HighkernelAlmaLinuxdrm/amdgpu: zero-initialize GART table on allocation8.8 HighkernelAlmaLinuxxfs: resample the data fork mapping after cycling ILOCK7.8 HighkernelAlmaLinuxNone: kernel bug fix and enhancement updateNo scorekernelAlmaLinuxvsock/virtio: fix zerocopy completion for multi-skb sends5.5 MediumkernelAlmaLinuxaf_unix: Set gc_in_progress to true in unix_gc().7.1 HighkernelAlmaLinuxKVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use8.8 HighkernelAlmaLinuxKVM: x86: Fix shadow paging use-after-free due to unexpected role8.8 HighkernelAlmaLinuxipv4: account for fraggap on the paged allocation path7.8 HighkernelAlmaLinuxBluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()8.0 HighkernelAlmaLinuxdrm/i915/gem: Fix phys BO pread/pwrite with offset7.8 HighkernelAlmaLinuxfhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh()7.8 HighkernelAlmaLinuxdrm/amd/display: Use krealloc_array() in dal_vector_reserve()7.0 HighkernelAlmaLinuxvfio/pci: Clean up DMABUFs before disabling function8.8 HighkernelAlmaLinuxdrm/xe/eustall: Fix drm_dev_put called before stream disable in close7.8 HighkernelAlmaLinuxiommu/vt-d: Avoid NULL pointer dereference or refcount corruption8.8 HighkernelAlmaLinuxipv6: mcast: Fix use-after-free when processing MLD queries8.8 HighkernelAlmaLinuxipvs: clear the svc scheduler ptr early on edit7.8 HighkernelAlmaLinuxnetfilter: conntrack_irc: fix possible out-of-bounds read8.2 HighkernelAlmaLinuxnetfilter: bridge: make ebt_snat ARP rewrite writable8.8 HighkernelAlmaLinuxnet/sched: act_api: use RCU with deferred freeing for action lifecycle7.8 HighkernelAlmaLinuxBluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()8.0 HighkernelAlmaLinuxBluetooth: RFCOMM: validate skb length in MCC handlers8.1 HighkernelAlmaLinuxsctp: validate cached peer INIT chunk length in COOKIE_ECHO processing9.8 CriticalkernelAlmaLinuxxfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()7.8 HighkernelAlmaLinuxtcp: restrict SO_ATTACH_FILTER to priv users5.5 MediumkernelAlmaLinuxnet/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list8.7 HighkernelAlmaLinuxipv6: sit: reload inner IPv6 header after GSO offloads9.8 CriticalkernelAlmaLinuxnet: guard timestamp cmsgs to real error queue skbs7.1 HighkernelAlmaLinuxBluetooth: hci_sync: reject oversized Broadcast Announcement prepend7.8 HighkernelAlmaLinuxaccel/ivpu: Add buffer overflow check in MS get_info_ioctl7.1 HighkernelAlmaLinuxaccel/ivpu: Fix signed integer truncation in IPC receive7.8 HighkernelAlmaLinuxUSB: serial: io_ti: fix heap overflow in get_manuf_info()6.8 MediumkernelAlmaLinuxALSA: timer: Forcibly close timer instances at closing7.8 HighkernelAlmaLinuxALSA: timer: Fix UAF at snd_timer_user_params()7.8 High- Show moreLoading…