Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxtcp: fix TIME_WAIT socket reference leak on PSP policy failure7.5 HighKernelLinuxdpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync()No scoreKernelLinuxnet/sched: act_tunnel_key: Defer dst_release to RCU callback7.8 HighKernelLinuxsctp: fix auth_hmacs array size in struct sctp_cookie8.1 HighKernelLinuxbnxt_en: Handle partially initialized auxiliary devicesNo scoreKernelLinuxusb: core: sysfs: add lock to bos_descriptors_read()7.8 HighKernelLinuxwifi: at76c50x-usb: avoid length underflow in at76_guess_freq()8.1 HighKernelLinuxusb: core: port: Deattach Type-C connector on component unbind4.3 MediumKernelLinuxusb: musb: omap2430: Do not put borrowed of_node in probe8.4 HighKernelLinuxusb: gadget: dummy_hcd: prevent fifo_req reuse during giveback7.8 HighKernelLinuxusb: gadget: printer: fix infinite loop in printer_read()No scoreKernelLinuxusb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()2.4 LowKernelLinuxusb: gadget: f_tcm: synchronize delayed set_alt with teardown5.4 MediumKernelLinuxusb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer1.0 LowKernelLinuxUSB: serial: io_edgeport: cap received transmit credits7.0 HighKernelLinuxdrm/amd/display: Fix ISM dc_lock deadlock during suspendNo scoreKernelLinuxwifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request4.1 MediumKernelLinuxwifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_beginNo scoreKernelLinuxhwmon: (corsair-psu) Stop device IO before calling hid_hw_stop5.4 MediumKernelLinuxhwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop5.4 MediumKernelLinuxhwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop5.4 MediumKernelLinuxhwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop7.0 HighKernelLinuxwatchdog: pretimeout: Fix UAF in watchdog_unregister_governor()9.8 CriticalKernelLinuxwatchdog: airoha: Prevent division by zero when clock frequency is zeroNo scoreKernelLinuxwifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()6.0 MediumKernelLinuxfirewire: net: Fix fragmented datagram reassembly8.8 HighKernelLinuxwifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler8.1 HighKernelLinuxwifi: ath6kl: fix OOB read from firmware IE lengths in connect event8.3 HighKernelLinuxwifi: carl9170: bound memcpy length in cmd callback to prevent OOB read5.4 MediumKernelLinuxwifi: carl9170: fix OOB read from off-by-two in TX status handler2.4 LowKernelLinuxwifi: carl9170: fix buffer overflow in rx_stream failover path7.0 HighKernelLinuxASoC: tas2781: bound firmware description string parsing7.1 HighKernelLinuxiommu/amd: Fix IRQ unsafe locking in gdom allocationNo scoreKernelLinuxALSA: hda: cs35l41: validate and free ACPI mute objectNo scoreKernelLinuxarm_mpam: guard MBWU state before adding it to garbageNo scoreKernelLinuxusb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect5.2 MediumKernelLinuxsmb: client: validate DFS referral PathConsumed9.1 CriticalKernelLinuxovpn: avoid putting unrelated P2P peer on socket releaseNo scoreKernelLinuxovpn: fix use after free in unlock_ovpn()8.8 HighKernelLinuxhwmon: occ: validate poll response sensor blocks7.7 HighKernelLinuxBluetooth: btusb: validate Realtek vendor event length2.4 LowKernelLinuxnet/packet: avoid fanout hook re-registration after unregister7.8 HighKernelLinuxbpf: Reject redirect helpers without a bpf_net_context6.8 MediumKernelLinuxbonding: fix devconf_all NULL dereference when IPv6 is disabled5.7 MediumKernelLinuxrds: drop incoming messages that cross network namespace boundaries7.8 HighKernelLinuxrxrpc: fix io_thread race in rxrpc_wake_up_io_thread()5.7 MediumKernelLinuxdpaa2-switch: put MAC endpoint device on disconnectNo scoreKernelLinuxnet: airoha: Fix potential use-after-free in airoha_ppe_deinit()No scoreKernelLinuxdpaa2-eth: put MAC endpoint device on disconnectNo scoreKernelLinuxnet: airoha: Fix DMA direction for NPU mailbox buffer7.8 High- Show moreLoading…