Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxfbdev: omap2: fix use-after-free in omapfb_mmap7.8 HighKernelLinuxi2c: core: fix adapter registration race7.8 HighKernelLinuxnfsd: release layout stid on setlease failure9.8 CriticalKernelLinuxNFSD: Fix SECINFO_NO_NAME decode error cleanup9.8 CriticalKernelLinuxnfsd: fix posix_acl leak on SETACL decode failure7.5 HighKernelLinuxnfsd: fix posix_acl leak and ignored error in nfsd4_create_file7.1 HighKernelLinuxnfsd: fix dead ACL conflict guard in nfsd4_create7.5 HighKernelLinuxnfsd: avoid leaking pre-allocated openowner on unconfirmed retry race7.5 HighKernelLinuxnfsd: reset write verifier on deferred writeback errors5.5 MediumKernelLinuxNFSv4/flexfiles: reject zero filehandle version count7.5 HighKernelLinuxNFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr7.5 HighKernelLinuxksmbd: fix out-of-bounds read in smb_check_perm_dacl()8.1 HighKernelLinuxnet/tcp-ao: fix use-after-free of key in del_async path7.8 HighKernelLinuxfuse: re-lock request before replacing page cache folio7.8 HighKernelLinuxiio: light: veml6075: add bounds check to veml6075_it_ms index7.1 HighKernelLinuxiio: adc: ti-ads1298: add bounds check to pga_settings index7.8 HighKernelLinuxvc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write5.5 MediumKernelLinuxserial: 8250_dw: unregister 8250 port if clk_notifier_register() fails9.8 CriticalKernelLinuxksmbd: reject non-VALID session in compound request branch7.5 HighKernelLinuxmedia: vidtv: fix NULL pointer dereference in vidtv_mux_push_si5.5 MediumKernelLinuxvirtiofs: fix UAF on submount umount7.8 HighKernelLinuxmedia: rzv2h-ivc: Fix concurrent buffer list access7.8 HighKernelLinuxmedia: i2c: ov8856: free control handler on error in ov8856_init_controls()5.5 MediumKernelLinuxdrm/colorop: Fix blob property reference tracking in state lifecycle5.5 MediumKernelLinuxdrm/msm: always recover the gpu5.5 MediumKernelLinuxdrm/amdkfd: Add upper bound check for num_of_nodes5.5 MediumKernelLinuxdrm/amdgpu/vce: Prevent partial address patches8.8 HighKernelLinuxdrm/amdgpu: zero-initialize GART table on allocation8.8 HighKernelLinuxmm/vma: do not try to unmap a VMA if mmap_prepare() invoked from mmap()7.8 HighKernelLinuxiommu/vt-d: Block PASID attachment to nested domain with dirty tracking5.5 MediumKernelLinuxRDMA/ionic: bound node_desc sysfs read with %.64s5.5 MediumKernelLinuxperf/x86/intel: Improve validation and configuration of ACR masks5.5 MediumKernelLinuxudf: reject descriptors with oversized CRC length8.4 HighKernelLinuxf2fs: fix fsck inconsistency caused by incorrect nat_entry flag usage7.1 HighKernelLinuxselinux: fix avdcache auditing5.5 MediumKernelLinuxxfs: resample the data fork mapping after cycling ILOCK7.8 HighKernelLinuxvsock/virtio: fix zerocopy completion for multi-skb sends5.5 MediumKernelLinuxBluetooth: hci_conn: Fix memory leak in hci_le_big_terminate()5.5 MediumKernelLinuxxfrm: iptfs: preserve shared-frag marker in iptfs_consume_frags()9.8 CriticalKernelLinuxcrypto: krb5 - filter out async aead implementations at alloc9.8 CriticalKernelLinuxaf_unix: Set gc_in_progress to true in unix_gc().7.1 HighKernelLinuxKVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use8.8 HighKernelLinuxKVM: x86: Fix shadow paging use-after-free due to unexpected role8.8 HighKernelLinuxipv4: account for fraggap on the paged allocation path7.8 HighKernelLinuxipv6: account for fraggap on the paged allocation path7.8 HighKernelLinuxBluetooth: L2CAP: use chan timer to close channels in cleanup_listen()8.8 HighKernelLinuxBluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()8.0 HighKernelLinuxdrm/i915/gem: Fix phys BO pread/pwrite with offset7.8 HighKernelLinuxnet: rds: clear i_sends on setup unwind9.8 CriticalKernelLinuxarm64: errata: Mitigate TLBI errata on various Arm CPUs8.8 High- Show moreLoading…