linux vulnerabilities (Debian)
20,193 vulnerabilities.
linuxDebiannetfilter: ipset: mark the rcu locked areas properly7.8 HighlinuxDebiandrm/amd/pm/si: Don't schedule thermal work when queue isn't initializedNo scorelinuxDebianksmbd: don't hold ci->m_lock while waiting for a lease break ackNo scorelinuxDebianthunderbolt: Keep the domain reference while processing hotplugNo scorelinuxDebiannet/mlx5: HWS, Handle destroying table that has a miss table7.0 HighlinuxDebiandrm/amd/ras: reset CPER ring on corrupt entry sizeNo scorelinuxDebianfirmware: arm_scmi: Validate SENSOR_UPDATE payload sizeNo scorelinuxDebianfirmware: arm_scmi: Validate BASE_ERROR_EVENT payload sizeNo scorelinuxDebianwifi: mac80211: validate deauth frame length before reason accessNo scorelinuxDebianwifi: libertas: reject short monitor TX framesNo scorelinuxDebianwifi: iwlwifi: mvm: fix sched scan IE sizing7.8 HighlinuxDebianarm64: kprobes: Allow reentering kprobes while single-steppingNo scorelinuxDebianwifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFONo scorelinuxDebiandrm/gma500: return errors from Oaktrail HDMI I2C readsNo scorelinuxDebianima: return error early if file xattr cannot be changedNo scorelinuxDebianmmc: core: Add validation for host-provided max_segsNo scorelinuxDebianserial: 8250_port: recognize UPIO_AUNo scorelinuxDebianmedia: chips-media: wave5: Add range checks for dec_output_infoNo scorelinuxDebiannet: bridge: remove stale rcu_barrier() in br_multicast_dev_del()No scorelinuxDebianntfs3: handle set_blocksize failuresNo scorelinuxDebianisofs: handle set_blocksize failuresNo scorelinuxDebianirqchip/gic-v5: Immediately exec priority drop following activateNo scorelinuxDebianirqchip/gic-v4: Don't advertise VLPIs if no ITS is probedNo scorelinuxDebianhost1x: bus: Fix missing ops null check in error teardownNo scorelinuxDebiandrm/nouveau/gsp: add SEC2 to GA100 chip tableNo scorelinuxDebianwifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetectNo scorelinuxDebiannetfilter: nf_conntrack_expect: zero at allocation timeNo scorelinuxDebianfreevxfs: don't BUG() on unknown typed-extent typeNo scorelinuxDebiancrypto: ccp - Fix possible deadlock in SEV init failure pathNo scorelinuxDebianBluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID8.8 HighlinuxDebianbpf: Infer zext_dst based on static register liveness analysis7.8 HighlinuxDebiandm-pcache: reject a kset that overruns its segmentNo scorelinuxDebiandm-pcache: bound the logical key offset from persistent memoryNo scorelinuxDebiansched/cache: Introduce task_struct->sched_cache_grp to fix UAF7.3 HighlinuxDebiansched_ext: Don't run ops.dequeue() with a DSQ lock heldNo scorelinuxDebiansched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task5.7 MediumlinuxDebianKVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails8.4 HighlinuxDebianaudit: fix exe mark UAF in kill_rules()7.1 HighlinuxDebianfprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching()7.1 HighlinuxDebianHID: bpf: cast size to ssize_t when checking hid_bpf_hw_requestNo scorelinuxDebianHID: multitouch: stop the release timer from being rearmed on remove5.4 MediumlinuxDebianio_uring: fix task_work add use-after-free with SQPOLL7.3 HighlinuxDebianipvs: bound LBLCR and LBLC cache growth6.8 MediumlinuxDebiankprobes: Skip disarmed probes when checking optkprobe overlapNo scorelinuxDebianof/overlay: put property on deadprops only after changeset add succeedsNo scorelinuxDebianof/overlay: only treat a positive changeset id as registeredNo scorelinuxDebiannet: gso: limit recursive IP-in-IP segmentation6.8 MediumlinuxDebiannet: extend IPv6 exthdr detection of tunneled packets6.8 MediumlinuxDebiannetfilter: nft_flow_offload: drop flowtable reference on init error path2.0 LowlinuxDebiannet/packet: prevent TX_RING byte count overflow5.7 Medium- Show moreLoading…