linux vulnerabilities (Debian)
20,193 vulnerabilities.
linuxDebiannet: psp: require admin permission for dev-set and key-rotate5.5 MediumlinuxDebianfutex: Prevent lockup in requeue-PI during signal/ timeout wakeup5.5 MediumlinuxDebiandrm/xe: Fix error cleanup in xe_exec_queue_create_ioctl()7.8 HighlinuxDebianbonding: 3ad: implement proper RCU rules for port->aggregator7.8 HighlinuxDebiannet: tls: fix strparser anchor skb leak on offload RX setup failure7.5 HighlinuxDebianfutex: Drop CLONE_THREAD requirement for private default hash alloc7.8 HighlinuxDebiancrypto: af_alg - Cap AEAD AD length to 0x800000005.5 MediumlinuxDebiannet: ena: PHC: Fix potential use-after-free in get_timestamp7.8 HighlinuxDebiannetfilter: nft_ct: fix missing expect put in obj eval5.5 MediumlinuxDebianKVM: Reject wrapped offset in kvm_reset_dirty_gfn()7.8 HighlinuxDebianKVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic8.8 HighlinuxDebiansmb/client: fix possible infinite loop and oob read in symlink_data()8.1 HighlinuxDebiandrm: Replace old pointer to new idr5.5 MediumlinuxDebiandrm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure5.5 MediumlinuxDebianALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans5.5 MediumlinuxDebianALSA: usb-audio: Bound MIDI endpoint descriptor scans5.5 MediumlinuxDebianceph: fix a buffer leak in __ceph_setxattr()7.8 HighlinuxDebianceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size5.5 MediumlinuxDebianceph: put folios not suitable for writeback7.5 HighlinuxDebianvirt: sev-guest: Do not use host-controlled page order in cleanup path7.8 HighlinuxDebianlibceph: Fix potential out-of-bounds access in osdmap_decode()9.1 CriticallinuxDebianlibceph: Fix potential null-ptr-deref in decode_choose_args()7.5 HighlinuxDebianlibceph: Fix potential out-of-bounds access in __ceph_x_decrypt()7.5 HighlinuxDebianlibceph: Fix potential out-of-bounds access in crush_decode()9.8 CriticallinuxDebianlibceph: handle rbtree insertion error in decode_choose_args()7.5 HighlinuxDebianiommu/vt-d: Fix oops due to out of scope access7.1 HighlinuxDebianiommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to reset8.8 HighlinuxDebiandrm/xe/dma-buf: handle empty bo and UAF races7.8 HighlinuxDebiandrm/xe/dma-buf: fix UAF with retry loop7.8 HighlinuxDebiandrm/ttm: Fix ttm_bo_shrink() infinite LRU walk on backup failure5.5 MediumlinuxDebiani2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl5.5 MediumlinuxDebiannet: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove7.8 HighlinuxDebianfs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling7.5 HighlinuxDebianRevert "wireguard: device: enable threaded NAPI"7.5 HighlinuxDebianksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE5.5 MediumlinuxDebiannet: skbuff: fix missing zerocopy reference in pskb_carve helpers7.8 HighlinuxDebiannetfilter: nf_log: validate MAC header was set before dumping it7.1 HighlinuxDebiannet/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint5.5 MediumlinuxDebiantun: zero the whole vnet header in tun_put_user()5.5 MediumlinuxDebiannet/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion5.5 MediumlinuxDebianbpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths5.5 MediumlinuxDebiantap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR5.5 MediumlinuxDebiancrypto: jitterentropy - replace long-held spinlock with mutex5.5 MediumlinuxDebianxfrm: espintcp: do not reuse an in-progress partial send7.8 HighlinuxDebianbatman-adv: tvlv: reject oversized TVLV packets8.8 HighlinuxDebianio_uring/poll: fix signed comparison in io_poll_get_ownership()7.8 HighlinuxDebianxfrm: ipcomp: Free destination pages on acomp errors7.5 HighlinuxDebianbatman-adv: tp_meter: avoid use of uninit sender vars9.8 CriticallinuxDebianipc/shm: serialize orphan cleanup with shm_nattch updates5.5 MediumlinuxDebiansctp: stream: fully roll back denied add-stream state7.5 High- Show moreLoading…