linux vulnerabilities (Debian)
20,193 vulnerabilities.
linuxDebians390/uv: Prevent potential out-of-bounds read5.8 MediumlinuxDebianbpf: Fix divide-by-zero in btf_struct_walk()No scorelinuxDebiantcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context4.6 MediumlinuxDebianHID: winwing: fix use-after-free in force feedback teardown5.4 MediumlinuxDebianbpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch()6.8 MediumlinuxDebianbpf: Fix out-of-bounds read of rtt_min in sock_ops4.6 MediumlinuxDebianbpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk7.3 HighlinuxDebianbpf, arm64: set up the frame pointer for the exception callback7.1 HighlinuxDebianHID: amd_sfh: Validate PCI BAR size before mapping5.1 MediumlinuxDebianKVM: riscv: Fix NACL hfence entry update order2.1 LowlinuxDebianKVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve()No scorelinuxDebianKVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure5.6 MediumlinuxDebiansquashfs: Add dictionary size range check to prevent shift-out-of-bounds0.0 NonelinuxDebianscsi: block: Fix zones_cond out-of-bounds write on zone report7.0 HighlinuxDebianscsi: sd_zbc: Reject disks with too many zones7.0 HighlinuxDebianBluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump()No scorelinuxDebianBluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel7.1 HighlinuxDebianxsk: Use a 32-bit compare in xsk_map_gen_lookup6.8 MediumlinuxDebianeth: fbnic: Fix payload page pool error cleanup5.6 MediumlinuxDebiannet/sched: cls_u32: fix manual hash table handle IDR aliasing4.8 MediumlinuxDebianbpf: Make post-verification instruction rewrites killable6.7 MediumlinuxDebianbpf: Preserve packet pointer class displacement in regsafe()8.4 HighlinuxDebianbpf: Restrict CO-RE poisoning to relocatable instructions8.4 HighlinuxDebiannetfilter: flowtable: publish HW_DEAD after worker is done7.3 HighlinuxDebiannetfilter: nfnetlink_queue: hold nfnl mutex in event notifier7.3 HighlinuxDebiandrm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_updateNo scorelinuxDebiannet/sched: act_ct: don't WARN on benign flow_offload_alloc() failure5.7 MediumlinuxDebiannet: gue: reject invalid REMCSUM offsets9.2 CriticallinuxDebiannet: ethernet: mtk_eth_soc: unregister net_devices in case of probe failureNo scorelinuxDebiannet: ethtool: keep rtnl_lock for the ioctl self test7.1 HighlinuxDebianeth: fbnic: Handle maximum standalone channelsNo scorelinuxDebianeth: fbnic: use the Rx queue napi pointer to find the napi vectorNo scorelinuxDebianeth: fbnic: reset num_napi when the napi vectors are freedNo scorelinuxDebianeth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailboxNo scorelinuxDebiansctp: avoid livelock while updating retransmit path6.8 MediumlinuxDebianbpf: Bound ownership depth through local kptrs and graph roots6.8 MediumlinuxDebiannet: usb: catc: bound the RX packet length in catc_rx_done()5.1 MediumlinuxDebianbpf: Check params size before reading reserved fieldsNo scorelinuxDebiannet/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget6.8 MediumlinuxDebiandrm/virtio: fix object leak when drm_gem_handle_create() fails5.7 MediumlinuxDebiandrm/virtio: fix object leak in virtio_gpu_resource_create_ioctl()5.7 MediumlinuxDebiandrm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl()5.7 MediumlinuxDebiandrm/virtio: release the GEM object on virtio_gpu_vram_create() errors7.3 HighlinuxDebiandrm/bridge: samsung-dsim: fix TE GPIO lifetime for host attachNo scorelinuxDebianovpn: replace bind when learning local endpoint2.3 LowlinuxDebianovpn: replace bind when clearing stale local sourceNo scorelinuxDebianBluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough2.3 LowlinuxDebianBluetooth: btintel_pcie: validate device-supplied DMA indices7.0 HighlinuxDebianBluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame()5.3 MediumlinuxDebianbpf: Reject non-negative offsets in stack_slot_obj_get_spi()8.4 High- Show moreLoading…