linux vulnerabilities (Debian)
20,193 vulnerabilities.
linuxDebianaf_unix: Reject SIOCATMARK on non-stream sockets5.5 MediumlinuxDebiannetfilter: ebtables: fix OOB read in compat_mtw_from_user7.8 HighlinuxDebianbatman-adv: clear current gateway during teardown5.5 MediumlinuxDebianvrf: Fix a potential NPD when removing a port from a VRF5.5 MediumlinuxDebiansctp: purge outqueue on stale COOKIE-ECHO handling9.8 CriticallinuxDebianipc: limit next_id allocation to the valid ID range7.8 HighlinuxDebianbatman-adv: dat: handle forward allocation error7.5 HighlinuxDebiannetfilter: ipset: stop hash:* range iteration at end5.5 MediumlinuxDebiannetfilter: xt_policy: fix strict mode inbound policy matching8.3 HighlinuxDebianbatman-adv: fix tp_meter counter underflow during shutdown7.8 HighlinuxDebianBluetooth: serialize accept_q access8.8 HighlinuxDebiansctp: diag: reject stale associations in dump_one path7.1 HighlinuxDebianbatman-adv: frag: disallow unicast fragment in fragment5.5 MediumlinuxDebiannetfilter: ip6t_hbh: reject oversized option lists7.1 HighlinuxDebianbatman-adv: fix fragment reassembly length accounting9.8 CriticallinuxDebianbatman-adv: v: stop OGMv2 on disabled interface5.5 MediumlinuxDebiannetfilter: nf_queue: hold bridge skb->dev while queued7.8 HighlinuxDebianksmbd: scope conn->binding slowpath to bound sessions only8.8 HighlinuxDebianbpf: Free reuseport cBPF prog after RCU grace period.7.8 HighlinuxDebianip6_vti: set netns_immutable on the fallback device.7.8 HighlinuxDebianRDMA: During rereg_mr ensure that REREG_ACCESS is compatible7.8 HighlinuxDebiannet/sched: fix pedit partial COW leading to page cache corruption7.8 HighlinuxDebianmedia: rockchip: rkcif: fix off by one bugs7.8 HighlinuxDebian9p: fix access mode flags being ORed instead of replaced7.7 HighlinuxDebianmm/damon/core: disallow non-power of two min_region_sz on damon_start()5.5 MediumlinuxDebiandrm/nouveau: fix nvkm_device leak on aperture removal failure5.5 MediumlinuxDebiangreybus: gb-beagleplay: bound bootloader receive buffering8.0 HighlinuxDebianRevert "net/smc: Introduce TCP ULP support"7.8 HighlinuxDebianerofs: handle end of filesystem properly for file-backed mounts5.5 MediumlinuxDebianapparmor: fix rlimit for posix cpu timers7.3 HighlinuxDebiandm: fix unlocked test for dm_suspended_md7.8 HighlinuxDebianiio: pressure: mprls0025pa: fix spi_transfer struct initialisation8.4 HighlinuxDebianRDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE9.8 CriticallinuxDebiannetfilter: nf_tables: use list_del_rcu for netlink hooks7.8 HighlinuxDebiannet: gro: don't merge zcopy skbs7.8 HighlinuxDebiantun: free page on build_skb failure in tun_xdp_one()7.1 HighlinuxDebiantun: free page on short-frame rejection in tun_xdp_one()7.1 HighlinuxDebiantap: free page on error paths in tap_get_user_xdp()7.4 HighlinuxDebiannet/sched: act_ct: Only release RCU read lock after ct_ft7.8 HighlinuxDebianRevert "mm/hugetlbfs: update hugetlbfs to use mmap_prepare"5.5 MediumlinuxDebianKVM: arm64: Reassign nested_mmus array behind mmu_lock8.8 HighlinuxDebianKVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry9.3 CriticallinuxDebianArm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1,...9.1 CriticallinuxDebianio_uring/waitid: clear waitid info before copying it to userspace5.5 MediumlinuxDebiandrm/v3d: Reject empty multisync extension to prevent infinite loop5.5 MediumlinuxDebianmedia: intel/ipu6: fix error pointer dereference5.5 MediumlinuxDebianmedia: videobuf2: Set vma_flags in vb2_dma_sg_mmap5.5 MediumlinuxDebiandrm/amdgpu/userq: fix access to stale wptr mapping7.8 HighlinuxDebianmedia: renesas: vsp1: Fix NULL pointer deref on module unload5.5 MediumlinuxDebiandrm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise7.0 High- Show moreLoading…