Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxKVM: SEV: Ignore Port I/O requests of length '0'9.3 CriticalKernelLinuxKVM: SEV: Compute the correct max length of the in-GHCB scratch area9.3 CriticalKernelLinuxKVM: SEV: Check PSC request indices against the actual size of the buffer9.3 CriticalKernelLinuxKVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer8.8 HighKernelLinuxiio: adc: mt6359: fix unchecked return value in mt6358_read_imp5.5 MediumKernelLinuxiio: adc: nxp-sar-adc: fix division by zero in write_raw5.5 MediumKernelLinuxiio: gyro: itg3200: fix i2c read into the wrong stack location7.1 HighKernelLinuxiio: gyro: adis16260: fix division by zero in write_raw5.5 MediumKernelLinuxiio: chemical: mhz19b: reject oversized serial replies5.5 MediumKernelLinuxiio: chemical: scd30: fix division by zero in write_raw5.5 MediumKernelLinuxiio: buffer: hw-consumer: fix use-after-free in error path7.8 HighKernelLinuxiio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf()5.5 MediumKernelLinuxUSB: serial: omninet: fix memory corruption with small endpoint7.8 HighKernelLinuxusb: dwc2: Fix use after free in debug code7.8 HighKernelLinuxbpf: sockmap: fix tail fragment offset in bpf_msg_push_data8.4 HighKernelLinuxmacsec: fix replay protection at XPN lower-PN wrap8.1 HighKernelLinuxipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()9.8 CriticalKernelLinuxocteontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify8.8 HighKernelLinuxipv6: exthdrs: refresh nh after handling HAO option9.8 CriticalKernelLinuxip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().8.8 HighKernelLinuxipv6: validate extension header length before copying to cmsg7.1 HighKernelLinuxxfrm: input: hold netns during deferred transport reinjection8.8 HighKernelLinuxl2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname7.8 HighKernelLinuxip6: vti: Use ip6_tnl.net in vti6_changelink().8.8 HighKernelLinuxHID: wacom: Fix OOB write in wacom_hid_set_device_mode()8.8 HighKernelLinuxnfc: hci: fix out-of-bounds read in HCP header parsing8.8 HighKernelLinuxxfrm: route MIGRATE notifications to caller's netns7.3 HighKernelLinuxnetfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check8.2 HighKernelLinuxxfrm: esp: restore combined single-frag length gate9.8 CriticalKernelLinuxxfrm: iptfs: reset runtime state when cloning SAs7.8 HighKernelLinuxdma-buf: fix UAF in dma_buf_fd() tracepoint7.8 HighKernelLinuxksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops8.1 HighKernelLinuxInput: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem5.5 MediumKernelLinuxuio: uio_pci_generic_sva: fix double free of devm_kzalloc() memory7.8 HighKernelLinuxusb: musb: omap2430: Fix use-after-free in omap2430_probe()8.4 HighKernelLinuxusbip: vudc: Fix use after free bug in vudc_remove due to race condition7.8 HighKernelLinuxusb: usbtmc: check URB actual_length for interrupt-IN notifications7.1 HighKernelLinuxUSB: serial: belkin_sa: validate interrupt status length7.1 HighKernelLinuxUSB: serial: cypress_m8: validate interrupt packet headers7.1 HighKernelLinuxUSB: serial: digi_acceleport: fix memory corruption with small endpoints7.8 HighKernelLinuxUSB: serial: keyspan: fix missing indat transfer sanity check5.5 MediumKernelLinuxUSB: serial: mxuport: fix memory corruption with small endpoint7.8 HighKernelLinuxUSB: serial: mct_u232: fix memory corruption with small endpoint7.8 HighKernelLinuxUSB: serial: mct_u232: fix missing interrupt-in transfer sanity check5.5 MediumKernelLinuxusb: gadget: composite: fix integer underflow in WebUSB GET_URL handling5.5 MediumKernelLinuxusb: gadget: f_fs: copy only received bytes on short ep0 readNo scoreKernelLinuxusb: gadget: f_fs: serialize DMABUF cancel against request completion7.8 HighKernelLinuxthunderbolt: property: Reject u32 wrap in tb_property_entry_valid()8.1 HighKernelLinuxthunderbolt: property: Reject dir_len < 4 to prevent size_t underflow5.1 MediumKernelLinuxthunderbolt: property: Cap recursion depth in __tb_property_parse_dir()5.5 Medium- Show moreLoading…