Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxsctp: validate STALE_COOKIE cause length before reading staleness9.1 CriticalKernelLinuxnet: qualcomm: rmnet: validate MAP frame length before ingress parsing7.3 HighKernelLinuxBluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()2.4 LowKernelLinuxbpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()8.4 HighKernelLinuxnet: usb: net1080: validate packet_len before pad-byte access in rx_fixup8.1 HighKernelLinuxdrm/edid: fix OOB read in drm_parse_tiled_block()7.1 HighKernelLinuxnet, bpf: check master for NULL in xdp_master_redirect()7.5 HighKernelLinuxcrypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contentsNo scoreKernelLinuxtipc: fix use-after-free of the discoverer in tipc_disc_rcv()7.8 HighKernelLinuxipv6: ndisc: fix NULL deref in accept_untracked_na()5.7 MediumKernelLinuxnet/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket9.8 CriticalKernelLinuxusbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()8.1 HighKernelLinuxBluetooth: eir: Fix stack OOB write when prepending the Flags AD7.8 HighKernelLinuxipv6: Fix null-ptr-deref in fib6_nh_mtu_change().5.7 MediumKernelLinuxbridge: cfm: reject invalid CCM interval at configuration time6.8 MediumKernelLinuxstaging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop8.1 HighKernelLinuxnvmet-tcp: Fix potential UAF when ddgst mismatch9.8 CriticalKernelLinuxnvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path9.8 CriticalKernelLinuxfs/ntfs3: validate lcns_follow in log_replay conversion7.8 HighKernelLinuxfs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}7.8 HighKernelLinuxnet: openvswitch: reject oversized nested action attrs7.8 HighKernelLinuxnet: nexthop: Increase weight to u167.8 HighKernelLinuxnet/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle9.8 CriticalKernelLinuxcrypto: qat - remove unused character device and IOCTLs7.8 HighKernelLinuxtty: serial: samsung: Remove redundant port lock acquisition in rx helpers6.7 MediumKernelLinuxdrm/hyperv: validate VMBus packet size in receive callbackNo scoreKernelLinuxethtool: tsconfig: fix missing ethnl_ops_complete()4.8 MediumKernelLinuxxfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit6.8 MediumKernelLinuxdrm/hyperv: validate resolution_count and fix WIN8 fallback7.7 HighKernelLinuxnet/handshake: Take a long-lived file reference at submit9.8 CriticalKernelLinuxnet/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA8.8 HighKernelLinuxpinctrl: meson: amlogic-a4: fix deadlock issueNo scoreKernelLinuxfirmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies8.4 HighKernelLinuxNFSD: Fix infinite loop in layout state revocationNo scoreKernelLinuxtcp: Fix out-of-bounds access for twsk in tcp_ao_established_key().No scoreKernelLinuxdrm/xe/gsc: Fix double-free of managed BO in error pathNo scoreKernelLinuxdrm/amdgpu/vce1: Fix VCE 1 firmware size and offsets8.8 HighKernelLinuxwifi: mac80211: fix MLE defragmentation8.3 HighKernelLinuxuserfaultfd: gate must_wait writability check on pte_present()2.0 LowKernelLinuxKVM: x86: Unconditionally recompute CR8 intercept on PPR update2.1 LowKernelLinuxACPI: CPPC: Suppress UBSAN warning caused by field misuseNo scoreKernelLinuxACPI: NFIT: core: Fix possible NULL pointer dereference5.5 MediumKernelLinuxACPI: NFIT: core: Fix acpi_nfit_init() error cleanup7.0 HighKernelLinuxrust: block: fix GenDisk cleanup paths5.5 MediumKernelLinuxbpf: Support for hardening against JIT spraying5.5 MediumKernelLinuxx86/bugs: Enable IBPB flush on BPF JIT allocation5.5 MediumKernelLinuxwifi: rtw89: correct drop logic for malformed AMPDU frames5.5 MediumKernelLinuxusb: gadget: function: rndis: add length check for header5.5 MediumKernelLinuxiio: accel: bmc150: clamp the device-reported FIFO frame count5.5 MediumKernelLinuxiio: accel: kxsd9: fix runtime PM imbalance on write_raw() errorNo score- Show moreLoading…