kernel vulnerabilities (Azure Linux)
6,741 vulnerabilities.
kernelAzure Linuxcrypto: ecc - Fix carry overflow in vli multiplication8.8 HighkernelAzure Linuxcrypto: drbg - Fix returning success on failure in CTR_DRBG5.5 MediumkernelAzure Linuxspi: fsl-lpspi: terminate the RX channel on TX prepare failure path9.8 CriticalkernelAzure Linuxtracing: Prevent out-of-bounds read in glob matching7.1 HighkernelAzure LinuxNFSv4: include MAY_WRITE in open permission mask for O_TRUNC7.1 HighkernelAzure Linuxmm: do file ownership checks with the proper mount idmap5.5 MediumkernelAzure LinuxKVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU8.2 HighkernelAzure LinuxKVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU8.2 HighkernelAzure Linuxi2c: core: fix adapter deregistration race7.8 HighkernelAzure LinuxInput: synaptics-rmi4 - bound the F3A keymap to the GPIO count7.8 HighkernelAzure LinuxInput: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count7.8 HighkernelAzure LinuxInput: elan_i2c - prevent division by zero and arithmetic underflow5.5 MediumkernelAzure LinuxRDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg9.1 CriticalkernelAzure LinuxRDMA/siw: bound Read Response placement to the RREAD length9.8 CriticalkernelAzure Linuxfuse: re-lock request before returning from fuse_ref_folio()7.8 HighkernelAzure Linuxwifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers8.8 HighkernelAzure LinuxLoongArch: Report dying CPU to RCU in stop_this_cpu()5.5 MediumkernelAzure LinuxMIPS: smp: report dying CPU to RCU in stop_this_cpu()5.5 MediumkernelAzure Linuxgpio: rockchip: teardown bugs and resource leaks5.5 MediumkernelAzure Linuxhwmon: (lm90) Add lock protection to lm90_alert5.5 MediumkernelAzure Linuxnet/mlx5e: xsk: Fix unlocked writing to ICOSQ7.5 HighkernelAzure LinuxKVM: x86: Check for invalid/obsolete root *after* making MMU pages available8.8 HighkernelAzure LinuxBluetooth: L2CAP: cancel pending_rx_work before taking conn->lock8.8 HighkernelAzure Linuxi2c: i801: fix hardware state machine corruption in error path5.5 MediumkernelAzure Linuxbpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized5.5 MediumkernelAzure Linuxnet: team: fix NULL pointer dereference in team_xmit during mode change5.5 MediumkernelAzure Linuxnetfilter: ipset: fix race between dump and ip_set_list resize7.8 HighkernelAzure Linuxxfs: fail recovery on a committed log item with no regions5.5 MediumkernelAzure Linuxnetfs: Fix potential for tearing in ->remote_i_size and ->zero_point9.8 CriticalkernelAzure Linuxdrm/msm/adreno: Fix a reference leak in a6xx_gpu_init()5.5 MediumkernelAzure Linuxerofs: fix metabuf leak in inode xattr initialization5.5 MediumkernelAzure LinuxALSA: asihpi: Fix potential OOB array access at reading cache7.8 HighkernelAzure Linuxwifi: mac80211: capture fast-RX rate before mesh reuses skb->cb8.8 HighkernelAzure Linuxrbd: eliminate a race in lock_dwork draining on unmap7.8 HighkernelAzure Linuxdrm/amd/display: Validate GPIO pin LUT table size before iterating7.8 HighkernelAzure Linuxriscv: Fix register corruption from uninitialized cregs on error7.8 HighkernelAzure Linuxnetfilter: x_tables: allocate hook ops while under mutex5.5 MediumkernelAzure Linuxnetfilter: x_tables: add and use xtables_unregister_table_exit7.8 HighkernelAzure Linuxnetfilter: ebtables: move to two-stage removal scheme7.8 HighkernelAzure Linuxnetfilter: bridge: eb_tables: close module init race7.8 HighkernelAzure Linuxnetfs: Fix leak of request in netfs_write_begin() error handling5.5 MediumkernelAzure Linuxhwmon: (lm90) Stop work before releasing hwmon device4.7 MediumkernelAzure Linuxcgroup/rstat: validate cpu before css_rstat_cpu() access7.8 HighkernelAzure Linuxblk-mq: pop cached request if it is usable7.8 HighkernelAzure Linuxethtool: rss: fix indir_table and hkey leak on get_rxfh failure5.5 MediumkernelAzure Linuxnet/sched: fix packet loop on netem when duplicate is on5.5 MediumkernelAzure Linuxnet/handshake: Drain pending requests at net namespace exit9.8 CriticalkernelAzure LinuxBluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close8.8 HighkernelAzure Linuxusb: typec: ucsi: ccg: reject firmware images without a ':' record header5.5 MediumkernelAzure Linuxusb: typec: altmodes/displayport: validate count before reading Status Update VDO5.5 Medium- Show moreLoading…