linux-6.12 vulnerabilities (Debian)
3,532 vulnerabilities.
linux-6.12Debianvxlan: do not arm the ageing timer on a device that is down8.8 Highlinux-6.12Debianvsock/virtio: read virtqueues under worker locks8.4 Highlinux-6.12Debianvsock/virtio: avoid refilling the RX queue after teardown7.8 Highlinux-6.12Debianveth: fix skb length accounting after XDP frag adjustment10.0 Criticallinux-6.12Debiantls: rx: restore msg_iter before TLS 1.3 optimistic retry9.8 Criticallinux-6.12Debiantls: don't leave a full plaintext sk_msg ring unpushed7.8 Highlinux-6.12Debiantipc: read le->link under the node lock in tipc_node_link_down()7.8 Highlinux-6.12Debiansmb: client: Fix use-after-free in cifs_try_adding_channels()9.8 Criticallinux-6.12DebianKVM: SVM: Serialize accesses to the owner and mirror list with separate lock8.8 Highlinux-6.12Debianeventfs: Fix use-after-free in eventfs_remove_rec()7.8 Highlinux-6.12Debianeventfs: Use children field for rcu head and add memory barriers7.8 Highlinux-6.12DebianRevert "thermal/drivers/hwmon: Cleanup coding style a bit"8.4 Highlinux-6.12Debianptp: ocp: Fix board ID over-read7.1 Highlinux-6.12Debianring-buffer: Initialise reader page order in rb_allocate_cpu_buffer()No scorelinux-6.12Debianring-buffer: Use current_context for safe per-CPU buffer swap7.8 Highlinux-6.12Debianmm/page_table_check: skip special zero mappings5.7 Mediumlinux-6.12Debianmm/ptdump: always stabilise against page table freeing using init_mmNo scorelinux-6.12Debianipv6: fix Route Information option length validation7.5 Highlinux-6.12Debianip6_tunnel: clear skb2->cb[] in ip6ip6_err()9.8 Criticallinux-6.12Debianfscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()7.8 Highlinux-6.12Debiansched/psi: Shut down rtpoll_timer in psi_cgroup_free()7.8 Highlinux-6.12Debianima: Instantiate file_truncate and path_truncate hooks8.1 Highlinux-6.12Debianfsverity: Fix bpf_get_fsverity_digest() dynptr assumptions7.8 Highlinux-6.12Debianbpf, sockmap: Fix sk_redir use-after-free in send verdict8.4 Highlinux-6.12Debiansctp: keep chunk->transport in step with the list it is queued on9.8 Criticallinux-6.12Debiansctp: fix use-after-free of cached ASCONF chunk9.8 Criticallinux-6.12Debiansctp: clear new_transport when removing a peer9.8 Criticallinux-6.12Debianthunderbolt: Bound the DROM dual link port number before indexing sw->ports7.0 Highlinux-6.12Debiannet/sched: cls_route: fix fastmap use-after-free on filter7.8 Highlinux-6.12Debianpacket: use consistent hard_header_len in non-ring send paths7.8 Highlinux-6.12Debiannet: ipv6: clear suppressed fib6 rule result9.8 Criticallinux-6.12Debiannetfilter: nft_payload: fix mask build for partial field offload7.1 Highlinux-6.12Debianvhost: reset the vring metadata cache on vring reconfiguration8.8 Highlinux-6.12Debiannet: mpls: initialize rtm_tos in mpls_getroute()4.8 Mediumlinux-6.12Debianmm/slab: prevent unbounded recursion in free path with new kmalloc type7.5 Highlinux-6.12Debianthunderbolt: Prevent XDomain delayed work use-after-free on disconnect8.8 Highlinux-6.12Debiandmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open()7.8 Highlinux-6.12Debianbtrfs: zoned: fix deadlock between metadata writeback and transaction commit7.5 Highlinux-6.12Debianbtrfs: skip global block reserve accounting for rescue mountsNo scorelinux-6.12Debiannetfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()9.8 Criticallinux-6.12Debiankeys: fix out-of-bounds read in keyring_get_key_chunk()7.1 Highlinux-6.12Debiankeys: make keyring key-chunk byte order agree with keyring_diff_objects()6.9 Mediumlinux-6.12Debiannetfilter: nf_tables: make nft_object rhltable per table7.8 Highlinux-6.12Debiannetfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH7.1 Highlinux-6.12Debianrds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check()7.8 Highlinux-6.12Debianxsk: drain continuation descs after overflow in xsk_build_skb()4.8 Mediumlinux-6.12Debianxsk: reclaim invalid Tx descriptors in ZC batch path6.7 Mediumlinux-6.12Debianscsi: libiscsi: Fix stale-data leak into the SCSI sense buffer7.5 Highlinux-6.12Debianscsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer9.8 Criticallinux-6.12Debianscsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake raceNo score- Show moreLoading…