Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxf2fs: protect extension_list reading with sb_lock in f2fs_sbi_show()7.1 HighKernelLinuxcrypto: eip93 - fix hmac setkey algo selection5.5 MediumKernelLinuxreset: amlogic: t7: Fix null reset ops5.5 MediumKernelLinuxnet: enetc: fix NTMP DMA use-after-free issue7.8 HighKernelLinuxnet: airoha: Move ndesc initialization at end of airoha_qdma_init_tx()5.5 MediumKernelLinuxnet: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_queue()5.5 MediumKernelLinuxnet: mana: Guard mana_remove against double invocation5.5 MediumKernelLinuxmailbox: mailbox-test: free channels on probe error7.8 HighKernelLinuxmailbox: add sanity check for channel array5.5 MediumKernelLinuxmailbox: mailbox-test: don't free the reused channel7.8 HighKernelLinuxdrm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG5.5 MediumKernelLinuxnet: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind5.5 MediumKernelLinuxALSA: hda/conexant: Fix missing error check for jack detection5.5 MediumKernelLinuxdrm/xe/eustall: Fix drm_dev_put called before stream disable in close7.8 HighKernelLinuxice: fix NULL pointer dereference in ice_reset_all_vfs()5.5 MediumKernelLinuxarm64: Reserve an extra page for early kernel mapping5.5 MediumKernelLinuxaudit: fix incorrect inheritable capability in CAPSET records5.5 MediumKernelLinuxidpf: fix double free and use-after-free in aux device error paths7.8 HighKernelLinuxdrm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED5.5 MediumKernelLinuxbtrfs: only release the dirty pages io tree after successful writes7.5 HighKernelLinuxiommu/amd: Bounds-check devid in __rlookup_amd_iommu()5.5 MediumKernelLinuxx86/kexec: Push kjump return address even for non-kjump kexec5.5 MediumKernelLinuxiommu/vt-d: Avoid NULL pointer dereference or refcount corruption8.8 HighKernelLinuxiommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_done()5.5 MediumKernelLinuxdrm/gma500/oaktrail_lvds: fix hang on init failure5.5 MediumKernelLinuxarm_mpam: Check whether the config array is allocated before destroying it5.5 MediumKernelLinuxKVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation8.8 HighKernelLinuxBluetooth: ISO: Fix a use-after-free of the hci_conn pointer7.8 HighKernelLinuxipv6: mcast: Fix use-after-free when processing MLD queries8.8 HighKernelLinuxnet/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS5.5 MediumKernelLinuxtee: optee: prevent use-after-free when the client exits before the supplicant7.8 HighKernelLinuxerofs: fix use-after-free on sbi->sync_decompress7.8 HighKernelLinuxksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifiers5.5 MediumKernelLinuxipvs: clear the svc scheduler ptr early on edit7.8 HighKernelLinuxnetfilter: synproxy: add mutex to guard hook reference counting5.5 MediumKernelLinuxnetfilter: conntrack_irc: fix possible out-of-bounds read8.2 HighKernelLinuxnetfilter: nft_ct: bail out on template ct in get eval7.8 HighKernelLinuxnetfilter: bridge: make ebt_snat ARP rewrite writable8.8 HighKernelLinuxdm cache policy smq: check allocation under invalidate lock7.8 HighKernelLinuxnet/sched: act_api: use RCU with deferred freeing for action lifecycle7.8 HighKernelLinux6lowpan: fix off-by-one in multicast context address compression5.5 MediumKernelLinuxl2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()7.8 HighKernelLinuxdevlink: Release nested relation on devlink free5.5 MediumKernelLinuxtcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req().9.8 CriticalKernelLinuxipv6: anycast: insert aca into global hash under idev->lock7.8 HighKernelLinuxwifi: fix leak if split 6 GHz scanning fails5.5 MediumKernelLinuxwifi: cfg80211: enforce HE/EHT cap/oper consistency5.5 MediumKernelLinuxBluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()8.0 HighKernelLinuxBluetooth: MGMT: validate advertising TLV before type checks7.1 HighKernelLinuxBluetooth: RFCOMM: validate skb length in MCC handlers8.1 High- Show moreLoading…