linux-6.12 vulnerabilities (Debian)
3,532 vulnerabilities.
linux-6.12Debiannvmet: fix max_qid race between configfs and controller allocationNo scorelinux-6.12Debianocfs2: validate orphan slot during inode read7.8 Highlinux-6.12Debianocfs2: validate DIO orphan slot during inode read7.8 Highlinux-6.12DebianSquashfs: check block offset is not negative7.1 Highlinux-6.12Debianscsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffersNo scorelinux-6.12Debiannet: page_pool: fix UAF in __page_pool_release_netmem_dma on xa_cmpxchg race7.1 Highlinux-6.12Debianfs/ntfs3: fix integer overflow in MFT cluster validation7.1 Highlinux-6.12Debianfs/ntfs3: reject out-of-range evcn in mi_enum_attr()7.8 Highlinux-6.12DebianALSA: core: Fix use-after-free in snd_card_do_free()No scorelinux-6.12DebianASoC: SOF: validate topology volume range before allocationNo scorelinux-6.12Debianriscv, bpf: Fix missing sign-ext for signed 1-byte and 2-byte kfunc argsNo scorelinux-6.12DebianACPI: scan: fix bus ID cleanup on device_add() failuresNo scorelinux-6.12Debianmailbox: qcom-cpucp: fix PREEMPT_RT self-deadlock in IRQ handler5.7 Mediumlinux-6.12Debianmailbox: qcom-cpucp: handle NULL data in send_data callbackNo scorelinux-6.12Debiannull_blk: use DEFINE_MUTEX for the file-scope mutexNo scorelinux-6.12Debiannull_blk: register configfs subsystem after creating default devicesNo scorelinux-6.12Debiannull_blk: free global tag_set on init error pathNo scorelinux-6.12Debiannull_blk: free zones array on device power-offNo scorelinux-6.12Debiannull_blk: reject per-device queue resize for shared tag setNo scorelinux-6.12Debiannull_blk: serialize configfs attribute stores with the lockNo scorelinux-6.12Debiannull_blk: serialize configfs attribute updates with device setupNo scorelinux-6.12Debianblk-iolatency: clear delay state when freeing policy data6.8 Mediumlinux-6.12Debianblk-iocost: clear delay state when freeing policy data2.0 Lowlinux-6.12Debianblock: mtip32xx: synchronize ioctls with device removalNo scorelinux-6.12Debianapparmor: fix deadlock in complain-mode change_hat6.8 Mediumlinux-6.12Debianhwmon: (coretemp) Fix core_data leak on CPUs without PTSNo scorelinux-6.12Debianbpf: Check pointer type for all atomic RMW paths7.8 Highlinux-6.12Debianksmbd: Do not skip lock checks for single-byte ranges8.1 Highlinux-6.12Debiansmb: server: fix leak of ksmbd_ipc_login_request_ext() returned buffer8.2 Highlinux-6.12Debianksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user()7.1 Highlinux-6.12Debianksmbd: validate ipc response length before dereferencing its fieldsNo scorelinux-6.12Debianksmbd: free preauth sessions on connection teardown7.1 Highlinux-6.12Debianksmbd: serialize oplock close with pending break ownership7.7 Highlinux-6.12Debiansmb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request()6.0 Mediumlinux-6.12Debiansmb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger()No scorelinux-6.12Debianksmbd: defer publishing granted locks to prevent UAF/double-free race8.8 Highlinux-6.12Debianerofs: fix interlaced ztailpacking pclusters7.1 Highlinux-6.12Debianlwt_bpf: Restore reserved headroom after xmit programNo scorelinux-6.12Debianbpf: Disallow bpf_{g,s}etsockopt() in cgroup UNIX getname hooks1.8 Lowlinux-6.12Debianm68k: nfcon: Do not call console_is_registered() in nfcon_device()6.8 Mediumlinux-6.12Debianbpf: Reject negative optlen in cgroup getsockopt hook6.7 Mediumlinux-6.12Debianksmbd: safely discard unregistered deferred locks6.0 Mediumlinux-6.12Debianksmbd: detach blocked lock requests before freeing7.1 Highlinux-6.12Debianksmbd: scope session state changes to bound connections6.0 Mediumlinux-6.12Debianksmbd: bound smb_check_perm_dacl() ACE walks by DACL size8.1 Highlinux-6.12Debiansmb/server: fix session leak in ksmbd_session_register()8.2 Highlinux-6.12DebianNFSv4: remove callback IDR entry on client allocation failure9.8 Criticallinux-6.12Debianpnfs/blocklayout: Fix device leaks on parse failure7.7 Highlinux-6.12DebianNFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers7.5 Highlinux-6.12DebianNFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease()8.2 High- Show moreLoading…