Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxfs/ntfs3: validate rec->used in journal-replay file record check7.8 HighKernelLinuxf2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io()7.8 HighKernelLinuxf2fs: fix to avoid memory leak in f2fs_rename()5.5 MediumKernelLinuxfuse: abort on fatal signal during sync init5.5 MediumKernelLinuxksmbd: require minimum ACE size in smb_check_perm_dacl()8.3 HighKernelLinuxsmb: server: fix active_num_conn leak on transport allocation failure7.5 HighKernelLinuxsmb: client: fix dir separator in SMB1 UNIX mounts5.5 MediumKernelLinuxsmb: client: validate the whole DACL before rewriting it in cifsacl8.8 HighKernelLinuxsmb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path8.1 HighKernelLinuxksmbd: validate response sizes in ipc_validate_msg()7.1 HighKernelLinuxksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl()8.8 HighKernelLinuxksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment9.8 CriticalKernelLinuxksmbd: use check_add_overflow() to prevent u16 DACL size overflow5.5 MediumKernelLinuxwriteback: Fix use after free in inode_switch_wbs_work_fn()7.8 HighKernelLinuxf2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()7.8 HighKernelLinuxALSA: caiaq: take a reference on the USB device in create_card()5.5 MediumKernelLinuxnet/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()7.8 HighKernelLinuxcrypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed7.1 HighKernelLinuxcrypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed7.1 HighKernelLinuxcrypto: ccp: Don't attempt to copy ID to userspace if PSP command failed7.1 HighKernelLinuxrxrpc: Fix missing validation of ticket length in non-XDR key preparsing7.8 HighKernelLinuxwifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free7.8 HighKernelLinuxfuse: reject oversized dirents in page cache7.8 HighKernelLinuxcifs: some missing initializations on replay7.8 HighKernelLinuxrtnetlink: add missing netlink_ns_capable() check for peer netns5.5 MediumKernelLinuxxen/privcmd: fix double free via VMA splitting7.8 HighKernelLinuxBuffer overflow in drivers/xen/sys-hypervisor.c7.8 HighKernelLinuxigb: remove napi_synchronize() in igb_down()5.5 MediumKernelLinuxfirmware: thead: Fix buffer overflow and use standard endian macros7.8 HighKernelLinuxEDAC/mc: Fix error path ordering in edac_mc_alloc()5.5 MediumKernelLinuxgpio: omap: do not register driver in probe()5.5 MediumKernelLinuxmm/kasan: fix double free for kasan pXds7.8 HighKernelLinuxnetfilter: ip6t_eui64: reject invalid MAC header for all packets9.4 CriticalKernelLinuxnet: sched: act_csum: validate nested VLAN headers5.5 MediumKernelLinuxbatman-adv: avoid OGM aggregation when skb tailroom is insufficient7.8 HighKernelLinuxbridge: br_nd_send: linearize skb before parsing ND options9.1 CriticalKernelLinuxnetfilter: xt_multiport: validate range encoding in checkentry5.5 MediumKernelLinuxnet: ipv6: flowlabel: defer exclusive option free until RCU teardown7.8 HighKernelLinuxopenvswitch: validate MPLS set/set_masked payload length7.1 HighKernelLinuxopenvswitch: defer tunnel netdev_put to RCU release7.8 HighKernelLinuxcrypto: af_alg - limit RX SG extraction by receive buffer budget5.5 MediumKernelLinuxrxrpc: only handle RESPONSE during service challenge7.5 HighKernelLinuxnet/sched: sch_netem: fix out-of-bounds access in packet corruption7.8 HighKernelLinuxnetfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()7.1 HighKernelLinuxaf_unix: read UNIX_DIAG_VFS data under unix_state_lock7.8 HighKernelLinuxwifi: rt2x00usb: fix devres lifetime5.5 MediumKernelLinuxxfrm_user: fix info leak in build_report()5.5 MediumKernelLinuxnet: rfkill: prevent unlimited numbers of rfkill events from being created5.5 MediumKernelLinuxmptcp: fix slab-use-after-free in __inet_lookup_established9.8 CriticalKernelLinuxseg6: separate dst_cache for input and output paths in seg6 lwtunnel9.8 Critical- Show moreLoading…