Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxusb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb()5.5 MediumKernelLinuxusb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete()5.5 MediumKernelLinuxusb: gadget: renesas_usb3: validate endpoint index in standard request handlers5.5 MediumKernelLinuxsmb: client: fix off-by-8 bounds check in check_wsl_eas()7.1 HighKernelLinuxsmb: client: fix OOB reads parsing symlink error response8.1 HighKernelLinuxksmbd: validate EaNameLength in smb2_get_ea()7.5 HighKernelLinuxksmbd: require 3 sub-authorities before reading sub_auth[2]8.6 HighKernelLinuxksmbd: fix mechToken leak when SPNEGO decode fails after token alloc5.5 MediumKernelLinuxsmb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush()9.8 CriticalKernelLinuxsmb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list()9.8 CriticalKernelLinuxusbip: validate number_of_packets in usbip_pack_ret_submit()9.8 CriticalKernelLinuxusb: gadget: f_hid: don't call cdev_init while cdev in use5.5 MediumKernelLinuxfbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO5.5 MediumKernelLinuxwifi: rtw88: fix device leak on probe failure5.5 MediumKernelLinuxstaging: sm750fb: fix division by zero in ps_to_hz()5.5 MediumKernelLinuxALSA: ctxfi: Limit PTP to a single page7.8 HighKernelLinuxvfio/xe: Reorganize the init to decouple migration from reset5.5 MediumKernelLinuxarm64: mm: Handle invalid large leaf mappings correctly7.5 HighKernelLinuxmedia: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections5.5 MediumKernelLinuxocfs2: fix possible deadlock between unlink and dio_end_io_write7.5 HighKernelLinuxocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY7.8 HighKernelLinuxocfs2: handle invalid dinode in ocfs2_group_extend5.5 MediumKernelLinuxPCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup5.5 MediumKernelLinuxPCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown5.5 MediumKernelLinuxKVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU5.5 MediumKernelLinuxKVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock5.5 MediumKernelLinuxKVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish5.5 MediumKernelLinuxKVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION5.5 MediumKernelLinuxmm: call ->free_folio() directly in folio_unmap_invalidate()9.8 CriticalKernelLinuxKVM: x86: Use scratch field in MMIO fragment to hold small write values8.8 HighKernelLinuxASoC: qcom: q6apm: move component registration to unmanaged version7.8 HighKernelLinuxmm: blk-cgroup: fix use-after-free in cgwb_release_workfn()7.8 HighKernelLinuxmedia: vidtv: fix nfeeds state corruption on start_streaming failure5.5 MediumKernelLinuxmedia: mediatek: vcodec: fix use-after-free in encoder release path7.8 HighKernelLinuxmedia: em28xx: fix use-after-free in em28xx_v4l2_open()7.8 HighKernelLinuxhwmon: (powerz) Fix use-after-free on USB disconnect7.8 HighKernelLinuxALSA: 6fire: fix use-after-free on disconnect7.8 HighKernelLinuxbcache: fix cached_dev.sb_bio use-after-free and crash7.8 HighKernelLinuxwireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit5.5 MediumKernelLinuxmedia: as102: fix to not free memory after the device is registered in as102_usb_probe()7.8 HighKernelLinuxnilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map5.5 MediumKernelLinuxmedia: hackrf: fix to not free memory after the device is registered in hackrf_probe()7.8 HighKernelLinuxmm/userfaultfd: fix hugetlb fault mutex hash calculation5.5 MediumKernelLinuxclockevents: Add missing resets of the next_event_forced flag5.5 MediumKernelLinuxmedia: verisilicon: Fix kernel panic due to __initconst misuse5.5 MediumKernelLinuxi2c: designware: amdisp: Fix resume-probe race condition issue4.7 MediumKernelLinuxdrm/i915: Unlink NV12 planes earlier5.5 MediumKernelLinuxcan: gw: fix OOB heap access in cgw_csum_crc8_rel()8.8 HighKernelLinuxLoongArch: KVM: Handle the case that EIOINTC's coremap is empty7.3 HighKernelLinuxs390/mm: Add missing secure storage access fixups for donated memory7.1 High- Show moreLoading…