Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxxfrm: prevent policy_hthresh.work from racing with netns teardown7.8 HighKernelLinuxaf_key: validate families in pfkey_send_migrate()5.5 MediumKernelLinuxerofs: set fileio bio failed in short read case5.5 MediumKernelLinuxBluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req8.1 HighKernelLinuxBluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv()5.5 MediumKernelLinuxBluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete7.8 HighKernelLinuxBluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb5.5 MediumKernelLinuxnfc: nci: fix circular locking dependency in nci_close_device5.5 MediumKernelLinuxnet: openvswitch: Avoid releasing netdev before teardown completes7.8 HighKernelLinuxnet/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer7.8 HighKernelLinuxnet: bcmasp: fix double free of WoL irq7.8 HighKernelLinuxiavf: fix out-of-bounds writes in iavf_get_ethtool_stats()7.8 HighKernelLinuxnet: fix fanout UAF in packet_release() via NETDEV_UP race7.8 HighKernelLinuxudp: Fix wildcard bind conflict check when using hash25.5 MediumKernelLinuxteam: fix header_ops type confusion with non-Ethernet ports7.8 HighKernelLinuxnet: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX path9.8 CriticalKernelLinuxBluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock7.8 HighKernelLinuxBluetooth: L2CAP: Fix deadlock in l2cap_conn_del()5.5 MediumKernelLinuxBluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop5.5 MediumKernelLinuxBluetooth: btusb: clamp SCO altsetting table indices5.5 MediumKernelLinuxnetfilter: nf_conntrack_expect: skip expectations in other netns via proc5.5 MediumKernelLinuxnetfilter: ctnetlink: use netlink policy range checks5.5 MediumKernelLinuxnet: macb: use the current queue number for stats7.8 HighKernelLinuxRDMA/efa: Fix use of completion ctx after free7.8 HighKernelLinuxRDMA/irdma: Initialize free_qp completion before using it5.5 MediumKernelLinuxRDMA/irdma: Harden depth calculation functions5.5 MediumKernelLinuxdrm/xe/pf: Fix use-after-free in migration restore7.8 HighKernelLinuxspi: meson-spicc: Fix double-put in remove path7.8 HighKernelLinuxdrm/amd/display: Do not skip unrelated mode changes in DSC validation7.8 HighKernelLinuxspi: use generic driver_override infrastructure5.5 MediumKernelLinuxhwmon: (pmbus/core) Protect regulator operations with mutex7.1 HighKernelLinuxspi: spi-fsl-lpspi: fix teardown order issue (UAF)7.8 HighKernelLinuxio_uring/fdinfo: fix OOB read in SQE_MIXED wrap check7.1 HighKernelLinuxs390/syscalls: Add spectre boundary for syscall dispatch table5.5 MediumKernelLinuxs390/entry: Scrub r12 register on kernel entry5.5 MediumKernelLinuxtracing: Drain deferred trigger frees if kthread creation fails5.5 MediumKernelLinuxtracing: Fix potential deadlock in cpu hotplug with osnoise5.5 MediumKernelLinuxdrm/xe: always keep track of remap prev/next7.8 HighKernelLinuxksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()9.8 CriticalKernelLinuxksmbd: fix memory leaks and NULL deref in smb2_lock()7.5 HighKernelLinuxksmbd: do not expire session on binding failure8.2 HighKernelLinuxASoC: sma1307: fix double free of devm_kzalloc() memory7.8 HighKernelLinuxcan: isotp: fix tx.buf use-after-free in isotp_sendmsg()7.8 HighKernelLinuxmedia: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex7.8 HighKernelLinuxxfrm: iptfs: validate inner IPv4 header length in IPTFS payload5.5 MediumKernelLinuxxfrm: iptfs: only publish mode_data after clone setup7.8 HighKernelLinuxvirt: tdx-guest: Fix handling of host controlled 'quote' buffer length7.1 HighKernelLinuxvirtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false7.8 HighKernelLinuxvfio/pci: Fix double free in dma-buf feature7.8 HighKernelLinuxerofs: add GFP_NOIO in the bio completion if needed7.5 High- Show moreLoading…