Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxregulator: scmi: fix of_node refcount leak in scmi_regulator_probe()5.5 MediumKernelLinuxperf/aux: Fix page UAF in map_range()7.8 HighKernelLinuxtracing: Prevent out-of-bounds read in glob matching7.1 HighKernelLinuxNFSv4: include MAY_WRITE in open permission mask for O_TRUNC7.1 HighKernelLinuxmodule: decompress: check return value of module_extend_max_pages()5.5 MediumKernelLinuxexfat: bound uniname advance in exfat_find_dir_entry()7.8 HighKernelLinuxmm: page_ext: add count limit to page_ext_iter_next to prevent invalid PFN access5.5 MediumKernelLinuxmm: do file ownership checks with the proper mount idmap5.5 MediumKernelLinuxiommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read7.8 HighKernelLinuxiommufd: Move vevent memory allocation outside spinlock5.5 MediumKernelLinuxiommufd: Set veventq_depth upper bound5.5 MediumKernelLinuxiommufd: Break the loop on failure in iommufd_fault_fops_read()5.5 MediumKernelLinuxiommufd: Set upper bounds on cache invalidation entry_num and entry_len5.5 MediumKernelLinuxKVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB5.5 MediumKernelLinuxKVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU8.2 HighKernelLinuxKVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU8.2 HighKernelLinuxKVM: SEV: Pin source page for write when adding CPUID data for SNP guest5.5 MediumKernelLinuxKVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits7.1 HighKernelLinuxKVM: guest_memfd: Treat memslot binding offset+size as unsigned values7.0 HighKernelLinuxKVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier4.7 MediumKernelLinuxsvcrdma: wake sq waiters when the transport closes7.5 HighKernelLinuxfpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()8.8 HighKernelLinuxi2c: core: fix adapter deregistration race7.8 HighKernelLinuxi2c: imx-lpi2c: mark I2C adapter when hardware is powered down5.5 MediumKernelLinuxInput: synaptics-rmi4 - bound the F3A keymap to the GPIO count7.8 HighKernelLinuxInput: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count7.8 HighKernelLinuxInput: elan_i2c - prevent division by zero and arithmetic underflow5.5 MediumKernelLinuxInput: goodix - clamp the device-reported contact count7.8 HighKernelLinuxInput: iforce - bound the device-reported force-feedback effect index7.8 HighKernelLinuxInput: mms114 - fix touch indexing for MMS134S and MMS1367.8 HighKernelLinuxInput: touchwin - reset the packet index on every complete packet7.8 HighKernelLinuxInput: mms114 - reject an oversized device packet size7.8 HighKernelLinuxRDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg9.1 CriticalKernelLinuxRDMA/siw: bound Read Response placement to the RREAD length9.8 CriticalKernelLinuxfuse: avoid 32-bit prune notification count wrap5.5 MediumKernelLinuxfuse: re-lock request before returning from fuse_ref_folio()7.8 HighKernelLinuxfuse: clear intr_entry in fuse_resend and fuse_remove_pending_req7.8 HighKernelLinuxfuse-uring: fix EFAULT clobber in fuse_uring_commit5.5 MediumKernelLinuxfuse-uring: fix moving cancelled entry to ent_in_userspace list5.5 MediumKernelLinuxfuse-uring: end fuse_req on io-uring cancel task work5.5 MediumKernelLinuxfuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues7.8 HighKernelLinuxfuse-uring: Avoid queue->stopped races and set/read that value under lock7.8 HighKernelLinuxfuse-uring: make a fuse_req on SQE commit only findable after memcpy7.8 HighKernelLinuxfuse-uring: remove request-less entries from ent_w_req_queue to fix NULL deref5.5 MediumKernelLinuxxfs: don't wrap around quota ids in dqiterate5.5 MediumKernelLinuxwifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers8.8 HighKernelLinuxNTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and CONFIG share BAR5.5 MediumKernelLinuxkernel/fork: clear PF_BLOCK_TS in copy_process()5.5 MediumKernelLinuxMIPS: DEC: Prevent initial console buffer from landing in XKPHYS5.5 MediumKernelLinuxpwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()7.8 High- Show moreLoading…