Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxLoongArch: Report dying CPU to RCU in stop_this_cpu()5.5 MediumKernelLinuxfpga: region: fix use-after-free in child_regions_with_firmware()7.8 HighKernelLinuxMIPS: smp: report dying CPU to RCU in stop_this_cpu()5.5 MediumKernelLinuxKVM: x86: hyper-v: Bound the bank index when querying sparse banks8.4 HighKernelLinuxpower: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init()7.8 HighKernelLinuxfbdev: modedb: fix a possible UAF in fb_find_mode()7.8 HighKernelLinuxdrivers/base/memory: set mem->altmap after successful device registration5.5 MediumKernelLinuxASoC: codecs: simple-mux: Fix enum control bounds check7.1 HighKernelLinuxusb: gadget: net2280: Fix double free in probe error path7.8 HighKernelLinuxgpio: rockchip: teardown bugs and resource leaks5.5 MediumKernelLinuxmedia: rc: igorplugusb: fix control request setup packet5.5 MediumKernelLinuxmm/damon/sysfs-schemes: delete tried region in regions_rmdirs()7.8 HighKernelLinuxgpio: shared: fix deadlock on shared proxy's parent removal5.5 MediumKernelLinuxInput: elan_i2c - validate firmware size before use7.1 HighKernelLinuxi2c: davinci: fix division by zero on missing clock-frequency5.5 MediumKernelLinuxx86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines8.1 HighKernelLinuxtty: serial: pch_uart: add check for dma_alloc_coherent()5.5 MediumKernelLinuxusb: gadget: uvc: hold opts->lock across XU walks in uvc_function_bind5.5 MediumKernelLinuxblock: recompute nr_integrity_segments in blk_insert_cloned_request9.8 CriticalKernelLinuxdrm/msm/dsi: don't dump registers past the mapped region5.5 MediumKernelLinuxregulator: tps65219: fix irq_data.rdev not being assigned5.5 MediumKernelLinuxx86/mm: Disable broadcast TLB flush when PCID is disabled5.5 MediumKernelLinuxnet: ethtool: phy: avoid NULL deref when PHY driver is unbound5.5 MediumKernelLinuxACPI: driver: Check ACPI_COMPANION() against NULL during probe5.5 MediumKernelLinuxsched_ext: Avoid UAF in scx_root_enable_workfn() init failure path7.8 HighKernelLinuxocteontx2-af: CGX: add bounds check to cgx_speed_mbps index7.8 HighKernelLinuxocteontx2-pf: fix double free in rvu_rep_rsrc_init()7.8 HighKernelLinuxwifi: mac80211: consume only present negotiated TTLM maps8.1 HighKernelLinuxocteontx2-pf: avoid double free of pool->stack on AQ init failure7.0 HighKernelLinuxspi: ti-qspi: fix use-after-free after DMA setup failure7.8 HighKernelLinuxdevice property: set fwnode->secondary to NULL in fwnode_init()5.5 MediumKernelLinuxdrm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async7.0 HighKernelLinuxbatman-adv: bla: fix report_work leak on backbone_gw purge7.8 HighKernelLinuxnetfs: Fix overrun check in netfs_extract_user_iter()7.8 HighKernelLinuxnetfs: Fix potential UAF in netfs_unlock_abandoned_read_pages()9.8 CriticalKernelLinuxdrm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_table5.5 MediumKernelLinuxpowerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise()5.5 MediumKernelLinuxhwmon: (lm90) Add lock protection to lm90_alert5.5 MediumKernelLinuxwifi: iwlwifi: mld: don't dereference a pointer before NULL checking it5.5 MediumKernelLinuxsrcu: Don't queue workqueue handlers to never-online CPUs5.5 MediumKernelLinuxnet/mlx5e: xsk: Fix unlocked writing to ICOSQ7.5 HighKernelLinuxphy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config7.1 HighKernelLinuxcrypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks7.5 HighKernelLinuxKVM: x86: Check for invalid/obsolete root *after* making MMU pages available8.8 HighKernelLinuxcan: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF7.8 HighKernelLinuxnet/sched: dualpi2: fix GSO backlog accounting5.5 MediumKernelLinuxBluetooth: L2CAP: cancel pending_rx_work before taking conn->lock8.8 HighKernelLinuxi2c: i801: fix hardware state machine corruption in error path5.5 MediumKernelLinuxbpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized5.5 MediumKernelLinuxi2c: stub: Reject I2C block transfers with invalid length7.8 High- Show moreLoading…