Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxpppoe: drop PFC frames7.5 HighKernelLinuxnetfilter: conntrack: remove sprintf usage9.8 CriticalKernelLinuxnetfilter: xtables: restrict several matches to inet family5.5 MediumKernelLinuxnetfilter: nat: use kfree_rcu to release ops7.8 HighKernelLinuxnetfilter: nfnetlink_osf: fix out-of-bounds read on option matching9.1 CriticalKernelLinuxnetfilter: nfnetlink_osf: fix potential NULL dereference in ttl check7.5 HighKernelLinuxnet/sched: sch_dualpi2: drain both C-queue and L-queue in dualpi2_change()5.5 MediumKernelLinuxksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open5.5 MediumKernelLinuxnet/rds: zero per-item info buffer before handing it to visitors5.5 MediumKernelLinuxvsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting5.5 MediumKernelLinuxtipc: fix double-free in tipc_buf_append()9.8 CriticalKernelLinuxfs/adfs: validate nzones in adfs_validate_bblk()7.8 HighKernelLinuxsched/psi: fix race between file release and pressure write7.8 HighKernelLinuxfsnotify: fix inode reference leak in fsnotify_recalc_mask()5.5 MediumKernelLinuxnvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers9.8 CriticalKernelLinuxnetfilter: nf_tables: join hook list via splice_list_rcu() in commit phase7.1 HighKernelLinuxdrm/amdgpu: avoid double drm_exec_fini() in userq validate7.8 HighKernelLinuxnetfilter: nf_conntrack_sip: don't use simple_strtoul9.8 CriticalKernelLinuxnetdevsim: zero initialize struct iphdr in dummy sk_buff5.5 MediumKernelLinuxnet/sched: netem: fix queue limit check to include reordered packets5.5 MediumKernelLinuxnet: airoha: fix BQL imbalance in TX path7.5 HighKernelLinuxnet: usb: rtl8150: fix use-after-free in rtl8150_start_xmit()9.8 CriticalKernelLinuxneigh: let neigh_xmit take skb ownership7.5 HighKernelLinuxsched/fair: Clear rel_deadline when initializing forked entities5.5 MediumKernelLinuxnet: psp: check for device unregister when creating assoc5.5 MediumKernelLinuxnet: psp: require admin permission for dev-set and key-rotate5.5 MediumKernelLinuxfutex: Prevent lockup in requeue-PI during signal/ timeout wakeup5.5 MediumKernelLinuxdrm/xe: Fix error cleanup in xe_exec_queue_create_ioctl()7.8 HighKernelLinuxbonding: 3ad: implement proper RCU rules for port->aggregator7.8 HighKernelLinuxnet: tls: fix strparser anchor skb leak on offload RX setup failure7.5 HighKernelLinuxfutex: Drop CLONE_THREAD requirement for private default hash alloc7.8 HighKernelLinuxcrypto: af_alg - Cap AEAD AD length to 0x800000005.5 MediumKernelLinuxnet: ena: PHC: Fix potential use-after-free in get_timestamp7.8 HighKernelLinuxnetfilter: nft_ct: fix missing expect put in obj eval5.5 MediumKernelLinuxKVM: Reject wrapped offset in kvm_reset_dirty_gfn()7.8 HighKernelLinuxKVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic8.8 HighKernelLinuxsmb/client: fix possible infinite loop and oob read in symlink_data()8.1 HighKernelLinuxdrm: Replace old pointer to new idr5.5 MediumKernelLinuxdrm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure5.5 MediumKernelLinuxALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans5.5 MediumKernelLinuxALSA: usb-audio: Bound MIDI endpoint descriptor scans5.5 MediumKernelLinuxceph: fix a buffer leak in __ceph_setxattr()7.8 HighKernelLinuxceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size5.5 MediumKernelLinuxceph: put folios not suitable for writeback7.5 HighKernelLinuxvirt: sev-guest: Do not use host-controlled page order in cleanup path7.8 HighKernelLinuxlibceph: Fix potential out-of-bounds access in osdmap_decode()9.1 CriticalKernelLinuxlibceph: Fix potential null-ptr-deref in decode_choose_args()7.5 HighKernelLinuxlibceph: Fix potential out-of-bounds access in __ceph_x_decrypt()7.5 HighKernelLinuxlibceph: Fix potential out-of-bounds access in crush_decode()9.8 CriticalKernelLinuxlibceph: handle rbtree insertion error in decode_choose_args()7.5 High- Show moreLoading…