Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxBluetooth: bnep: reject short frames before parsing7.1 HighKernelLinuxBluetooth: fix memory leak in error path of hci_alloc_dev()5.5 MediumKernelLinuxBluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync5.5 MediumKernelLinuxxsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata()7.8 HighKernelLinuxipv4: restrict IPOPT_SSRR and IPOPT_LSRR options5.5 MediumKernelLinuxnet: airoha: Fix use-after-free in metadata dst teardown8.8 HighKernelLinuxnet: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown9.8 CriticalKernelLinuxsctp: validate cached peer INIT chunk length in COOKIE_ECHO processing9.8 CriticalKernelLinuxnet/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr5.5 MediumKernelLinuxVFS: fix possible failure to unlock in nfsd4_create_file()7.5 HighKernelLinuxrseq: Fix using an uninitialized stack variable in rseq_exit_user_update()5.5 MediumKernelLinuxALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams7.8 HighKernelLinuxALSA: seq: dummy: fix UMP event stack overread5.5 MediumKernelLinuxxfrm: iptfs: fix use-after-free on first_skb in __input_process_payload8.8 HighKernelLinuxxfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()7.8 HighKernelLinuxnetlabel: validate unlabeled address and mask attribute lengths5.5 MediumKernelLinuxgpio: mvebu: fix NULL pointer dereference in suspend/resume5.5 MediumKernelLinuxtcp: restrict SO_ATTACH_FILTER to priv users5.5 MediumKernelLinuxnet: add pskb_may_pull() to skb_gro_receive_list()7.5 HighKernelLinuxnet: ibm: emac: Fix use-after-free during device removal7.8 HighKernelLinuxnetdev: fix double-free in netdev_nl_bind_rx_doit()7.8 HighKernelLinuxnet: phy: clean the sfp upstream if phy probing fails8.8 HighKernelLinuxnet: phy: don't try to setup PHY-driven SFP cages when using genphy5.5 MediumKernelLinuxnet/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list8.7 HighKernelLinuxnet/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure7.5 HighKernelLinuxipv6: sit: reload inner IPv6 header after GSO offloads9.8 CriticalKernelLinuxnet: openvswitch: fix possible kfree_skb of ERR_PTR5.5 MediumKernelLinuxgpio: rockchip: fix generic IRQ chip leak on remove5.5 MediumKernelLinuxsctp: fix uninit-value in __sctp_rcv_asconf_lookup()9.1 CriticalKernelLinuxsctp: validate embedded INIT chunk and address list lengths in cookie9.1 CriticalKernelLinuxnet: guard timestamp cmsgs to real error queue skbs7.1 HighKernelLinuxptp: ocp: fix resource freeing order5.5 MediumKernelLinuxip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()9.8 CriticalKernelLinuxnetfilter: revalidate bridge ports5.5 MediumKernelLinuxnetfilter: x_tables: avoid leaking percpu counter pointers5.5 MediumKernelLinuxnetfilter: nft_exthdr: fix register tracking for F_PRESENT flag5.5 MediumKernelLinuxnet: mvpp2: sync RX data at the hardware packet offset8.6 HighKernelLinuxnet: mvpp2: limit XDP frame size to the RX buffer9.8 CriticalKernelLinuxnet: mvpp2: refill RX buffers before XDP or skb use9.8 CriticalKernelLinuxipv6: Fix a potential NPD in cleanup_prefix_route()5.5 MediumKernelLinuxdrm/vc4: fix krealloc() memory leak5.5 MediumKernelLinuxnetfilter: nft_tunnel: fix use-after-free on object destroy7.8 HighKernelLinuxnetfilter: nft_meta_bridge: fix stale stack leak via IIFHWADDR register5.5 MediumKernelLinuxtee: shm: fix shm leak in register_shm_helper()5.5 MediumKernelLinuxBluetooth: hci_sync: reject oversized Broadcast Announcement prepend7.8 HighKernelLinuxBluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig5.5 MediumKernelLinuxmm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison5.5 MediumKernelLinuxaccel/ivpu: Add bounds check for firmware runtime memory5.5 MediumKernelLinuxaccel/ivpu: Add bounds checks for firmware log indices7.1 HighKernelLinuxfirmware: stratix10-rsu: Fix NULL deref on rsu_send_msg() timeout in probe5.5 Medium- Show moreLoading…