Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxdrm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe()No scoreKernelLinuxKVM: x86/mmu: Fix use-after-free on vendor module reloadNo scoreKernelLinuxgpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings7.8 HighKernelLinuxxfrm: fix stale skb->prev after async crypto steals a GSO segment9.8 CriticalKernelLinuxIB/mad: Drop unmatched RMPP responses before reassembly7.1 HighKernelLinuxmtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy_joins()No scoreKernelLinuxmtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy()No scoreKernelLinuxbtrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()No scoreKernelLinuxsched_ext: Don't warn on core-sched forced idle in put_prev_task_scx()5.7 MediumKernelLinuxxfrm: reject optional IPTFS templates in outbound policies7.1 HighKernelLinuxRDMA/irdma: Prevent rereg_mr for non-mem regions7.8 HighKernelLinuxRDMA/irdma: Prevent user-triggered null deref on QP create6.8 MediumKernelLinuxRDMA/siw: publish QP after initialization7.8 HighKernelLinuxmtd: fix double free and WARN_ON in add_mtd_device() error pathsNo scoreKernelLinuxxfrm: clear mode callbacks after failed mode setup7.8 HighKernelLinuxwifi: cfg80211: cancel sched scan results work on unregister7.5 HighKernelLinuxwifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one()No scoreKernelLinuxwifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan()6.7 MediumKernelLinuxwifi: mac80211_hwsim: clamp virtio RX length before skb_putNo scoreKernelLinuxwifi: libertas: fix memory leak in helper_firmware_cb()2.4 LowKernelLinuxwifi: mac80211: defer link RX stats percpu free to RCU8.8 HighKernelLinuxwifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock5.7 MediumKernelLinuxwifi: nl80211: free RNR data on MBSSID mismatch6.8 MediumKernelLinuxwifi: cfg80211: validate PMSR FTM preamble range4.8 MediumKernelLinuxwifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lockNo scoreKernelLinuxwifi: cfg80211: use wiphy work for socket owner autodisconnect7.8 HighKernelLinuxwifi: brcmfmac: initialize SDIO data work before cleanupNo scoreKernelLinuxwifi: cfg80211: bound element ID read when checking non-inheritance7.1 HighKernelLinuxfirmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit()7.8 HighKernelLinuxfirmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation7.8 HighKernelLinuxbpf: Fix UAF in sock clone early bailouts7.8 HighKernelLinuxppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF7.8 HighKernelLinuxnet/iucv: take a reference on the socket found in afiucv_hs_rcv()8.8 HighKernelLinuxscsi: core: wake eh reliably when using scsi_schedule_ehNo scoreKernelLinuxata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registeredNo scoreKernelLinuxBluetooth: MGMT: revalidate LOAD_CONN_PARAM queued update7.8 HighKernelLinuxBluetooth: hci_sync: extend conn_hash lookup critical sections8.8 HighKernelLinuxBluetooth: mgmt: fix locking in unpair_device/disconnect_sync7.8 HighKernelLinuxBluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds7.8 HighKernelLinuxBluetooth: hci_sync: hold hdev->lock for hci_conn_params lookups8.8 HighKernelLinuxBluetooth: hci_qca: Clear memdump state on invalid dump size8.8 HighKernelLinuxsmb/client: handle overlapping allocated ranges in fallocate9.8 CriticalKernelLinuxcan: raw: add locking for raw flags bitfield7.8 HighKernelLinuxbpf, sockmap: Reject unhashed UDP sockets on sockmap update5.6 MediumKernelLinuxs390/checksum: Fix csum_partial() without vector facility9.8 CriticalKernelLinuxdrm/xe/vf: Fix VF CCS attach/detach race with in-flight BO moves7.8 HighKernelLinuxdrm/xe/guc: Keep scheduler timeline name alive7.8 HighKernelLinuxdrm/xe/guc: Hold device ref until queue teardown completes7.8 HighKernelLinuxksmbd: pin conn during async oplock break notification9.8 CriticalKernelLinuxaccel/amdxdna: Fix use-after-free of mm_struct in job scheduler7.8 High- Show moreLoading…