Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxKVM: x86: check for nEPT/nNPT in slow flush hypercalls5.5 MediumKernelLinuxdm-verity-fec: fix reading parity bytes split across blocks (take 3)7.1 HighKernelLinuxbtrfs: fix double free in create_space_info() error path7.8 HighKernelLinuxipmi: Check event message buffer response for bad data5.5 MediumKernelLinuxRDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()5.5 MediumKernelLinuxRDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss()5.5 MediumKernelLinuxwifi: mac80211: remove station if connection prep fails8.8 HighKernelLinuxisofs: validate block number from NFS file handle in isofs_export_iget7.5 HighKernelLinuxBluetooth: virtio_bt: clamp rx length before skb_put7.7 HighKernelLinuxwifi: b43: enforce bounds check on firmware key index in b43_rx()7.8 HighKernelLinuxmm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock7.8 HighKernelLinuxip6_gre: Use cached t->net in ip6erspan_changelink().7.8 HighKernelLinuxlibceph: Fix slab-out-of-bounds access in auth message processing9.1 CriticalKernelLinuxpseries/papr-hvpipe: Fix null ptr deref in papr_hvpipe_dev_create_handle()5.5 MediumKernelLinuxRDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()7.8 HighKernelLinuxxfrm: defensively unhash xfrm_state lists in __xfrm_state_delete7.8 HighKernelLinuxblock: add pgmap check to biovec_phys_mergeable9.8 CriticalKernelLinuxRDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads7.5 HighKernelLinuxKVM: x86: Fix shadow paging use-after-free due to unexpected GFN8.8 HighKernelLinuxRDMA/hns: Fix unlocked call to hns_roce_qp_remove()7.8 HighKernelLinuxBluetooth: hci_conn: fix potential UAF in create_big_sync7.8 HighKernelLinuxnet: stmmac: Prevent NULL deref when RX memory exhausted7.5 HighKernelLinuxusb: ulpi: fix memory leak on ulpi_register() error paths5.5 MediumKernelLinuxipmi:si: Return state to normal if message allocation fails5.5 MediumKernelLinuxdm-thin: fix metadata refcount underflow7.8 HighKernelLinuxeventfs: Hold eventfs_mutex and SRCU when remount walks events5.5 MediumKernelLinuxscsi: mpt3sas: Limit NVMe request size to 2 MiB7.8 HighKernelLinuxselinux: use sk blob accessor in socket permission helpers5.5 MediumKernelLinuxsmb: client: validate dacloffset before building DACL pointers9.8 CriticalKernelLinuxcan: ucan: fix devres lifetime5.5 MediumKernelLinuxnet: strparser: fix skb_head leak in strp_abort_strp()7.5 HighKernelLinuxnetfilter: reject zero shift in nft_bitwise5.5 MediumKernelLinuxfs: afs: revert mmap_prepare() change7.8 HighKernelLinuxnet: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels8.1 HighKernelLinuxnet: caif: clear client service pointer on teardown5.5 MediumKernelLinuxInput: edt-ft5x06 - fix use-after-free in debugfs teardown7.8 HighKernelLinuxtpm2-sessions: Fix missing tpm_buf_destroy() in tpm2_read_public()5.5 MediumKernelLinuxmd/md-llbitmap: raise barrier before state machine transition5.5 MediumKernelLinuxext4: fix bounds check in check_xattrs() to prevent out-of-bounds access7.1 HighKernelLinuxmm/vmalloc: take vmap_purge_lock in shrinker7.8 HighKernelLinuxwifi: rtw88: check for PCI upstream bridge existence5.5 MediumKernelLinuxmedia: rc: igorplugusb: heed coherency rules5.5 MediumKernelLinuxALSA: aloop: Fix peer runtime UAF during format-change stop7.8 HighKernelLinuxzram: do not forget to endio for partial discard requests5.5 MediumKernelLinuxALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names()5.5 MediumKernelLinuxmm/damon/stat: fix memory leak on damon_start() failure in damon_stat_start()5.5 MediumKernelLinuxnet: bridge: use a stable FDB dst snapshot in RCU readers5.5 MediumKernelLinuxrxrpc: Fix rxkad crypto unalignment handling7.5 HighKernelLinuxRDMA/mana_ib: Disable RX steering on RSS QP destroy7.8 HighKernelLinuxspi: fix resource leaks on device setup failure5.5 Medium- Show moreLoading…