Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxmisc: nsm: only unlock nsm_dev on post-lock error paths8.4 HighKernelLinuxmisc: nsm: pin the module while the device is open7.8 HighKernelLinuxtracing: Delay module ref count for "enable_event" trigger7.8 HighKernelLinuxtracing: Fix mmiotrace possible NULL dereferencing of hiter->devNo scoreKernelLinuxtracing: Fix resource leak on mmiotrace trace_pipe closeNo scoreKernelLinuxtracing: Fix union collision of module and refcnt for dynamic eventsNo scoreKernelLinuxublk: wait on ublk_dev_ready() instead of ub->completion7.1 HighKernelLinuxarm64: make huge_ptep_get handled unaligned addresses7.1 HighKernelLinuxIn the Linux kernel, the following vulnerability has been resolved: arm64: syscall: Ensure saved...No scoreKernelLinuxmptcp: fix stale skb->sk reference on subflow close9.8 CriticalKernelLinuxmptcp: pm: userspace: fix use-after-free in get_local_id5.8 MediumKernelLinuxafs: Fix afs_edit_dir_remove() to get, not find, block 0No scoreKernelLinuxbtrfs: do not try compression for data reloc inodesNo scoreKernelLinuxuserfaultfd: prevent registration of special VMAs4.8 MediumKernelLinuxmm/damon/core: validate ranges in damon_set_regions()No scoreKernelLinuxmm/damon/core: disallow overlapping input ranges for damon_set_regions()No scoreKernelLinuxmm/page_vma_mapped: fix device-private PMD handling7.8 HighKernelLinuxsctp: avoid auth_enable sysctl UAF during netns teardown7.8 HighKernelLinuxsctp: close UDP tunnel sockets during netns teardown9.8 CriticalKernelLinuxceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()9.8 CriticalKernelLinuxlibceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE9.8 CriticalKernelLinuxlibceph: Fix multiplication overflow in decode_new_up_state_weight()9.8 CriticalKernelLinuxlibceph: guard missing CRUSH type name lookup7.5 HighKernelLinuxlibceph: refresh auth->authorizer_buf{,_len} after authorizer update9.8 CriticalKernelLinuxlibceph: Reject monmaps advertising zero monitors7.5 HighKernelLinuxlibceph: reject zero bucket types in crush_decode9.8 CriticalKernelLinuxlibceph: remove debugfs files before client teardown7.8 HighKernelLinuxamt: fix use-after-free in AMT delayed works7.8 HighKernelLinuxbinfmt_elf_fdpic: only honour the first PT_INTERP6.8 MediumKernelLinuxfs/super: fix emergency thaw double-unlock of s_umountNo scoreKernelLinuxfs: preserve ACL_DONT_CACHE state in forget_cached_acl()8.4 HighKernelLinuxfscrypt: Add missing superblock check in find_or_insert_direct_key()7.8 HighKernelLinuxfscrypt: Avoid dynamic allocation in fscrypt_get_devices()7.8 HighKernelLinuxftrace: Add global mutex to serialize trace_parser accessNo scoreKernelLinuxiomap: fix out-of-bounds bitmap_set() with zero-length range7.8 HighKernelLinuxphonet: pep: fix use-after-free in pep_get_sb()9.8 CriticalKernelLinuxnet: slip: serialize receive against buffer reallocation7.8 HighKernelLinuxgeneve: require CAP_NET_ADMIN in the device netns for changelink8.8 HighKernelLinuxnet/af_iucv: fix NULL deref in afiucv_hs_callback_syn()7.5 HighKernelLinuxnet/iucv: fix use-after-free of a severed iucv_path8.8 HighKernelLinuxnet/mlx5e: Use sender devcom for MPV master-upNo scoreKernelLinuxnet/sched: serialize qdisc_rtab_list against concurrent get/put7.8 HighKernelLinuxnet/x25: fix use-after-free in x25_kill_by_neigh()9.8 CriticalKernelLinuxnet: gro: fix double aggregation of flush-marked skbs9.8 CriticalKernelLinuxnet: hip04: fix RX buffer leak on build_skb failure8.2 HighKernelLinuxptp: ptp_s390: Add missing facility check7.3 HighKernelLinuxice: fix PTP Call Trace during PTP releaseNo scoreKernelLinuxsuper: fix emergency thaw deadlock on frozen block devicesNo scoreKernelLinuxrbd: Reset positive result codes to zero in object map update path7.5 HighKernelLinuxksmbd: defer destroy_previous_session() until after NTLM authentication6.9 Medium- Show moreLoading…