kernel vulnerabilities (Azure Linux)
6,741 vulnerabilities.
kernelAzure Linuxnet/sched: act_gact, act_police: range check the fallback control action6.8 MediumkernelAzure Linuxovl: don't warn when the mount is completed from another user namespace6.8 MediumkernelAzure Linuxxdp: reject clones that overrun skb_shared_info tailroom9.8 CriticalkernelAzure Linuxvxlan: do not arm the ageing timer on a device that is down8.8 HighkernelAzure Linuxvsock/virtio: read virtqueues under worker locks8.4 HighkernelAzure Linuxvsock/virtio: avoid refilling the RX queue after teardown7.8 HighkernelAzure Linuxveth: fix skb length accounting after XDP frag adjustment10.0 CriticalkernelAzure Linuxtls: rx: restore msg_iter before TLS 1.3 optimistic retry9.8 CriticalkernelAzure Linuxtls: don't leave a full plaintext sk_msg ring unpushed7.8 HighkernelAzure Linuxtipc: read le->link under the node lock in tipc_node_link_down()7.8 HighkernelAzure Linuxsmb: client: Fix use-after-free in cifs_try_adding_channels()9.8 CriticalkernelAzure LinuxKVM: SVM: Serialize accesses to the owner and mirror list with separate lock8.8 HighkernelAzure Linuxeventfs: Use children field for rcu head and add memory barriers7.8 HighkernelAzure LinuxRevert "thermal/drivers/hwmon: Cleanup coding style a bit"8.4 HighkernelAzure Linuxring-buffer: Use current_context for safe per-CPU buffer swap7.8 HighkernelAzure Linuxmm/ptdump: always stabilise against page table freeing using init_mmNo scorekernelAzure Linuxipv6: fix Route Information option length validation7.5 HighkernelAzure Linuxip6_tunnel: clear skb2->cb[] in ip6ip6_err()9.8 CriticalkernelAzure Linuxfscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()7.8 HighkernelAzure Linuxsched/psi: Shut down rtpoll_timer in psi_cgroup_free()7.8 HighkernelAzure Linuxima: Instantiate file_truncate and path_truncate hooks8.1 HighkernelAzure Linuxbpf, sockmap: Fix sk_redir use-after-free in send verdict8.4 HighkernelAzure Linuxsctp: keep chunk->transport in step with the list it is queued on9.8 CriticalkernelAzure Linuxsctp: fix use-after-free of cached ASCONF chunk9.8 CriticalkernelAzure Linuxsctp: clear new_transport when removing a peer9.8 CriticalkernelAzure Linuxnet/sched: cls_route: fix fastmap use-after-free on filter7.8 HighkernelAzure Linuxpacket: use consistent hard_header_len in non-ring send paths7.8 HighkernelAzure Linuxnet: ipv6: clear suppressed fib6 rule result9.8 CriticalkernelAzure Linuxnetfilter: nft_payload: fix mask build for partial field offload7.1 HighkernelAzure Linuxvhost: reset the vring metadata cache on vring reconfiguration8.8 HighkernelAzure Linuxnet: mpls: initialize rtm_tos in mpls_getroute()4.8 MediumkernelAzure Linuxbtrfs: zoned: fix deadlock between metadata writeback and transaction commit7.5 HighkernelAzure Linuxbtrfs: skip global block reserve accounting for rescue mountsNo scorekernelAzure Linuxnetfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()9.8 CriticalkernelAzure Linuxkeys: fix out-of-bounds read in keyring_get_key_chunk()7.1 HighkernelAzure Linuxkeys: make keyring key-chunk byte order agree with keyring_diff_objects()6.9 MediumkernelAzure Linuxnetfilter: nf_tables: make nft_object rhltable per table7.8 HighkernelAzure Linuxnetfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH7.1 HighkernelAzure Linuxrds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check()7.8 HighkernelAzure Linuxxsk: fix buffer leak in xsk_drop_skb() for AF_XDP multi-buffer Tx4.8 MediumkernelAzure Linuxxsk: drain continuation descs after overflow in xsk_build_skb()4.8 MediumkernelAzure Linuxxsk: reclaim invalid Tx descriptors in ZC batch path6.7 MediumkernelAzure Linuxscsi: libiscsi: Fix stale-data leak into the SCSI sense buffer7.5 HighkernelAzure Linuxscsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer9.8 CriticalkernelAzure Linuxhwmon: (nct6775-core) Fix number of temperature registers for NCT6116No scorekernelAzure Linuxhwmon: (lm90) Only report alarms if driver is readyNo scorekernelAzure Linuxnet: do not send ICMP/NDISC Redirects when peer allocation fails7.5 HighkernelAzure Linuxhwmon: (nct6775-core) Prevent access to unsupported weight registers7.8 HighkernelAzure Linuxforcedeth: fix UAF of txrx_stats in nv_remove7.8 HighkernelAzure Linuxhwmon: (adt7470) Fix busy-loop and I2C flooding in update threadNo score- Show moreLoading…