Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxBluetooth: btrtl: validate firmware patch bounds7.8 HighKernelLinuxmemstick: ms_block: reject a card that reports too many blocks7.0 HighKernelLinuxipvs: fix more places with wrong ipv6 transport offsets9.8 CriticalKernelLinuxipvs: reload ip header after head reallocation9.8 CriticalKernelLinuxreset: sunxi: fix memory region leak on ioremap failureNo scoreKernelLinuxpowerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access()7.8 HighKernelLinuxpowerpc/uaccess: correct check for CONFIG_PPC_E500 in mask_user_address()7.8 HighKernelLinuxwifi: cfg80211: validate EHT MLE before MLD ID read8.1 HighKernelLinuxwifi: ieee80211: validate MLE common info length8.8 HighKernelLinuxwifi: mac80211: validate extension-frame layout before RX8.8 HighKernelLinuxwifi: mwifiex: fix permanently busy scans after multiple roam iterationsNo scoreKernelLinuxmtd: virt-concat: free duplicate generated nameNo scoreKernelLinuxmtd: mchp23k256: use SPI match data for chip caps7.8 HighKernelLinuxmtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout8.8 HighKernelLinuxmmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore5.7 MediumKernelLinuxmmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interruptNo scoreKernelLinuxmmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspendNo scoreKernelLinuxbpf: Reject negative const offsets for buffer pointers7.8 HighKernelLinuxdevice property: initialize the remaining fields of fwnode_handle in fwnode_init()7.8 HighKernelLinuxf2fs: fix potential deadlock in f2fs_balance_fs()5.7 MediumKernelLinuxf2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs()5.7 MediumKernelLinuxbinder: cache secctx size before release zeroes it7.8 HighKernelLinuxksmbd: use opener credentials for FSCTL mutations9.1 CriticalKernelLinuxusb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()4.1 MediumKernelLinuxliveupdate: validate session type before performing operationNo scoreKernelLinuxKVM: s390: pci: Fix handling of AIF enable without AISB8.8 HighKernelLinuxs390/zcrypt: Fix buffer over-read in cca_cipher2protkey7.1 HighKernelLinuxs390/zcrypt: Validate length for CCA AES cipher key requests7.8 HighKernelLinuxs390/zcrypt: Validate length for CCA ECC private key requests7.8 HighKernelLinuxbtrfs: free mapping node on duplicate reloc root insertNo scoreKernelLinuxata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning5.7 MediumKernelLinuxovl: check access to copy_file_range source with src mounter creds2.0 LowKernelLinuxdrm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size7.1 HighKernelLinuxdrm/vmwgfx: Validate vmw_surface_metadata::array_size7.8 HighKernelLinuxdrm/vc4: Prevent shader BO mappings from becoming writable7.8 HighKernelLinuxfirmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()No scoreKernelLinuxhwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop5.4 MediumKernelLinuxbtrfs: don't propagate EXTENT_FLAG_LOGGING to split extent maps7.8 HighKernelLinuxnet/sched: Handle TC_ACT_REDIRECT from qdisc filter chains1.8 LowKernelLinuxnet: txgbe: fix heap overflow when reading module EEPROM7.8 HighKernelLinuxwifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925_mcu_bss_he_tlv()No scoreKernelLinuxsmp: Make CSD lock acquisition atomic for debug mode5.7 MediumKernelLinuxdrm/imagination: Fit paired fragment job in the correct CCCB5.7 MediumKernelLinuxdrm/amd/display: use kvzalloc to allocate struct dcNo scoreKernelLinuxLoongArch: Fix address space mismatch in kexec command line lookupNo scoreKernelLinuxserial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platformsNo scoreKernelLinuxlibceph: bound get_version reply decode to front len8.6 HighKernelLinuxvxlan: require CAP_NET_ADMIN in the device netns for changelink8.8 HighKernelLinuxksmbd: validate minimum PDU size for transform requests9.1 CriticalKernelLinuxdrm/amdgpu/gfx8: drop unecessary BUG_ON()No score- Show moreLoading…