Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxaccel/ivpu: Add buffer overflow check in MS get_info_ioctl7.1 HighKernelLinuxaccel/ivpu: Fix signed integer truncation in IPC receive7.8 HighKernelLinuxRevert "drm/xe: Skip exec queue schedule toggle if queue is idle during suspend"7.8 HighKernelLinuxKVM: arm64: nv: Fix handling of XN[0] when !FEAT_XNX8.8 HighKernelLinuxhv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf7.5 HighKernelLinuxksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL8.8 HighKernelLinuxxfrm: iptfs: fix ABBA deadlock in iptfs_destroy_state()5.5 MediumKernelLinuxUSB: serial: io_ti: fix heap overflow in get_manuf_info()6.8 MediumKernelLinuxUSB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr()7.8 HighKernelLinuxUSB: serial: kl5kusb105: fix bulk-out buffer overflow7.8 HighKernelLinuxALSA: timer: Forcibly close timer instances at closing7.8 HighKernelLinuxALSA: timer: Fix UAF at snd_timer_user_params()7.8 HighKernelLinuxio_uring/net: inherit IORING_CQE_F_BUF_MORE across bundle recv retries7.8 HighKernelLinuxdrm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait()5.5 MediumKernelLinuxmm/huge_memory: update file PMD counter before folio_put()7.8 HighKernelLinuxRDMA/core: Validate the passed in fops for ib_get_ucaps()8.8 HighKernelLinuxRDMA/core: Validate cpu_id against nr_cpu_ids in DMAH alloc7.1 HighKernelLinuxRDMA/srp: bound SRP_RSP sense copy by the received length9.1 CriticalKernelLinuxzram: fix use-after-free in zram_bvec_write_partial()7.8 HighKernelLinuxudp: clear skb->dev before running a sockmap verdict7.5 HighKernelLinuxmptcp: allow subflow rcv wnd to shrink7.5 HighKernelLinuxwifi: nl80211: reject oversized EMA RNR lists7.8 HighKernelLinuxvsock/vmci: fix sk_ack_backlog leak on failed handshake5.5 MediumKernelLinuxtimers/migration: Fix livelock in tmigr_handle_remote_up()7.5 HighKernelLinuxstaging: rtl8723bs: fix buffer over-read in rtw_update_protection7.1 HighKernelLinuxstaging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction8.1 HighKernelLinuxbnxt_en: Fix NULL pointer dereference5.5 MediumKernelLinuxIB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN9.8 CriticalKernelLinuxinet: frags: fix use-after-free caused by the fqdir_pre_exit() flush9.8 CriticalKernelLinuxovl: keep err zero after successful ovl_cache_get()7.8 HighKernelLinuxaccel/ethosu: fix OOB write in ethosu_gem_cmdstream_copy_and_validate()7.8 HighKernelLinuxaccel/ethosu: fix IFM region index out-of-bounds in command stream parser7.8 HighKernelLinuxaccel/ethosu: fix arithmetic issues in dma_length()8.8 HighKernelLinuxaccel/ethosu: reject DMA commands with uninitialized length8.8 HighKernelLinuxaccel/ethosu: reject NPU_OP_RESIZE commands from userspace5.5 MediumKernelLinuxfuse: reject fuse_notify() pagecache ops on directories5.5 MediumKernelLinuxfuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios5.5 MediumKernelLinuxIn the Linux kernel, the following vulnerability has been resolved: futex/requeue: Prevent NULL...5.5 MediumKernelLinuxiomap: avoid potential null folio->mapping deref during error reporting7.5 HighKernelLinuxiommu/dma: Do not try to iommu_map a 0 length region in swiotlb5.5 MediumKernelLinuxlocking/rtmutex: Skip remove_waiter() when waiter is not enqueued5.5 MediumKernelLinuxmemcg: use round-robin victim selection in refill_stock7.8 HighKernelLinuxmisc: fastrpc: fix use-after-free of fastrpc_user in workqueue context7.8 HighKernelLinuxmisc: fastrpc: fix use-after-free race in fastrpc_map_create7.8 HighKernelLinuxmisc: fastrpc: fix DMA address corruption due to find_vma misuse8.8 HighKernelLinuxmisc: fastrpc: Fix NULL pointer dereference in rpmsg callback5.5 MediumKernelLinuxnet: phonet: free phonet_device after RCU grace period7.8 HighKernelLinuxnvmem: core: fix use-after-free bugs in error paths7.8 HighKernelLinuxmm/huge_memory: use correct flags for device private PMD entry5.5 MediumKernelLinuxmm/hugetlb: restore reservation on error in hugetlb folio copy paths5.5 Medium- Show moreLoading…