Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxcachefiles: Fix error return when vfs_mkdir() fails5.5 MediumKernelLinuxdrm/msm/snapshot: fix dumping of the unaligned regions7.7 HighKernelLinuxhwmon: (lm90) Stop work before releasing hwmon device4.7 MediumKernelLinuxwifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled9.8 CriticalKernelLinuxcgroup/rstat: validate cpu before css_rstat_cpu() access7.8 HighKernelLinuxigc: set tx buffer type for SMD frames9.8 CriticalKernelLinuxnet: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer9.3 CriticalKernelLinuxRDMA/rtrs: Fix use-after-free in path file creation cleanup9.8 CriticalKernelLinuxbridge: mcast: Fix a possible use-after-free when removing a bridge port7.8 HighKernelLinuxerofs: fix managed cache race for unaligned extents7.8 HighKernelLinuxwifi: mac80211: bounds-check link_id in ieee80211_ml_epcs8.8 HighKernelLinuxALSA: seq: Serialize UMP output teardown with event_input7.8 HighKernelLinuxtracing: Avoid NULL return from hist_field_name() on truncation5.5 MediumKernelLinuxnet: shaper: rework the VALID marking (again)7.8 HighKernelLinuxrxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg7.8 HighKernelLinuxbpf, skmsg: fix verdict sk_data_ready racing with ktls rx9.8 CriticalKernelLinuxtcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction9.4 CriticalKernelLinuxgpio: aggregator: fix a potential use-after-free7.8 HighKernelLinuxgpio: aggregator: remove the software node when deactivating the aggregator5.5 MediumKernelLinuxdrm/xe/oa: Fix exec_queue leak on width check in stream open5.5 MediumKernelLinuxnvme-pci: fix dma_vecs leak on p2p memory7.5 HighKernelLinuxnvme-pci: fix dma mapping leak on data setup error5.5 MediumKernelLinuxnet: mana: validate rx_req_idx to prevent out-of-bounds array access9.3 CriticalKernelLinuxblk-mq: pop cached request if it is usable7.8 HighKernelLinuxksmbd: fix durable reconnect error path file lifetime9.8 CriticalKernelLinuxsecurity/keys: fix missed RCU read section on lookup7.8 HighKernelLinuxInput: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size7.1 HighKernelLinuxACPI: button: Fix ACPI GPE handler leak during removal5.5 MediumKernelLinuxnet/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked5.5 MediumKernelLinuxnfc: llcp: Fix use-after-free in llcp_sock_release()7.8 HighKernelLinuxnfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc()8.8 HighKernelLinuxxfrm: Check for underflow in xfrm_state_mtu7.8 HighKernelLinuxaccel/rocket: fix UAF via dangling GEM handle in create_bo7.8 HighKernelLinuxnetfilter: synproxy: refresh tcphdr after skb_ensure_writable9.8 CriticalKernelLinuxnetfilter: nf_tables: fix dst corruption in same register operation5.5 MediumKernelLinuxnet/smc: Do not re-initialize smc hashtables7.8 HighKernelLinuxnet/iucv: fix locking in .getsockopt7.8 HighKernelLinuxscsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues7.5 HighKernelLinuxipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()7.8 HighKernelLinuxALSA: pcm: oss: Fix setup list UAF on proc write error7.8 HighKernelLinuxnet: hsr: fix potential OOB access in supervision frame handling9.8 CriticalKernelLinuxethtool: rss: fix indir_table and hkey leak on get_rxfh failure5.5 MediumKernelLinuxethtool: module: call ethnl_ops_complete() on module flash errors5.5 MediumKernelLinuxethtool: module: avoid leaking a netdev ref on module flash errors5.5 MediumKernelLinuxethtool: cmis: require exact CDB reply length7.8 HighKernelLinuxethtool: cmis: validate start_cmd_payload_size from module7.8 HighKernelLinuxtunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()9.8 CriticalKernelLinuxvxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu()9.8 CriticalKernelLinuxtunnels: do not assume transport header in iptunnel_pmtud_check_icmp()9.1 CriticalKernelLinuxBluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt()5.5 Medium- Show moreLoading…