Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxiommu/vt-d: Fix oops due to out of scope access7.1 HighKernelLinuxiommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to reset8.8 HighKernelLinuxdrm/xe/dma-buf: handle empty bo and UAF races7.8 HighKernelLinuxdrm/xe/dma-buf: fix UAF with retry loop7.8 HighKernelLinuxdrm/ttm: Fix ttm_bo_shrink() infinite LRU walk on backup failure5.5 MediumKernelLinuxi2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl5.5 MediumKernelLinuxnet: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove7.8 HighKernelLinuxfs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling7.5 HighKernelLinuxRevert "wireguard: device: enable threaded NAPI"7.5 HighKernelLinuxksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE5.5 MediumKernelLinuxnet: skbuff: fix missing zerocopy reference in pskb_carve helpers7.8 HighKernelLinuxnetfilter: nf_log: validate MAC header was set before dumping it7.1 HighKernelLinuxnet/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint5.5 MediumKernelLinuxtun: zero the whole vnet header in tun_put_user()5.5 MediumKernelLinuxnet/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion5.5 MediumKernelLinuxbpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths5.5 MediumKernelLinuxtap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR5.5 MediumKernelLinuxcrypto: jitterentropy - replace long-held spinlock with mutex5.5 MediumKernelLinuxxfrm: espintcp: do not reuse an in-progress partial send7.8 HighKernelLinuxbatman-adv: tvlv: reject oversized TVLV packets8.8 HighKernelLinuxio_uring/poll: fix signed comparison in io_poll_get_ownership()7.8 HighKernelLinuxxfrm: ipcomp: Free destination pages on acomp errors7.5 HighKernelLinuxbatman-adv: tp_meter: avoid use of uninit sender vars9.8 CriticalKernelLinuxipc/shm: serialize orphan cleanup with shm_nattch updates5.5 MediumKernelLinuxsctp: stream: fully roll back denied add-stream state7.5 HighKernelLinuxaf_unix: Reject SIOCATMARK on non-stream sockets5.5 MediumKernelLinuxnetfilter: ebtables: fix OOB read in compat_mtw_from_user7.8 HighKernelLinuxbatman-adv: clear current gateway during teardown5.5 MediumKernelLinuxvrf: Fix a potential NPD when removing a port from a VRF5.5 MediumKernelLinuxsctp: purge outqueue on stale COOKIE-ECHO handling9.8 CriticalKernelLinuxipc: limit next_id allocation to the valid ID range7.8 HighKernelLinuxbatman-adv: dat: handle forward allocation error7.5 HighKernelLinuxnetfilter: ipset: stop hash:* range iteration at end5.5 MediumKernelLinuxnetfilter: xt_policy: fix strict mode inbound policy matching8.3 HighKernelLinuxbatman-adv: fix tp_meter counter underflow during shutdown7.8 HighKernelLinuxBluetooth: serialize accept_q access8.8 HighKernelLinuxsctp: diag: reject stale associations in dump_one path7.1 HighKernelLinuxbatman-adv: frag: disallow unicast fragment in fragment5.5 MediumKernelLinuxnetfilter: ip6t_hbh: reject oversized option lists7.1 HighKernelLinuxbatman-adv: fix fragment reassembly length accounting9.8 CriticalKernelLinuxbatman-adv: v: stop OGMv2 on disabled interface5.5 MediumKernelLinuxnetfilter: nf_queue: hold bridge skb->dev while queued7.8 HighKernelLinuxksmbd: scope conn->binding slowpath to bound sessions only8.8 HighKernelLinuxbpf: Free reuseport cBPF prog after RCU grace period.7.8 HighKernelLinuxip6_vti: set netns_immutable on the fallback device.7.8 HighKernelLinuxRDMA: During rereg_mr ensure that REREG_ACCESS is compatible7.8 HighKernelLinuxnet/sched: fix pedit partial COW leading to page cache corruption7.8 HighKernelLinuxmedia: rockchip: rkcif: fix off by one bugs7.8 HighKernelLinux9p: fix access mode flags being ORed instead of replaced7.7 HighKernelLinuxmm/damon/core: disallow non-power of two min_region_sz on damon_start()5.5 Medium- Show moreLoading…