Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxnet: ipip: require CAP_NET_ADMIN in the device netns for changelink8.8 HighKernelLinuxnet: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink8.8 HighKernelLinuxnet: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink8.8 HighKernelLinuxocteontx2-af: Free BPID bitmap on setup failureNo scoreKernelLinuxieee802154: admin-gate legacy LLSEC dump operations7.1 HighKernelLinuxieee802154: ca8210: fix cas_ctl leak on spi_async failure5.7 MediumKernelLinuxieee802154: ca8210: fix pointer truncation in kfifo on 64-bitNo scoreKernelLinuxgve: fix header buffer corruption with header-split and HW-GRO9.8 CriticalKernelLinuxocteontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF8.8 HighKernelLinuxLoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect()7.1 HighKernelLinuxipmi: Fix user refcount underflow in event delivery7.8 HighKernelLinuxespintcp: use sk_msg_free_partial to fix partial send9.8 CriticalKernelLinuxipmi: fix refcount leak in i_ipmi_request()No scoreKernelLinuxbnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()No scoreKernelLinuxnet: liquidio: fix BAR resource leak on PF number failureNo scoreKernelLinuxnet: lan743x: Initialize eth_syslock spinlock before useNo scoreKernelLinuxnet/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked7.8 HighKernelLinuxnet/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked8.2 HighKernelLinuxfhandle: reject detached mounts in capable_wrt_mount()7.8 HighKernelLinuxorangefs: keep the readdir entry size 64-bit in fill_from_part()9.8 CriticalKernelLinuxnet/mlx5: HWS, fix matcher leak on resize target setup failure5.6 MediumKernelLinuxata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSDNo scoreKernelLinuxata: libata-core: Reject an invalid concurrent positioning ranges count7.0 HighKernelLinuxnet: wwan: iosm: bound device offsets in the MUX downlink decoder8.8 HighKernelLinuxriscv: probes: save original sp in rethook trampolineNo scoreKernelLinuxmm/compaction: handle free_pages_prepare() properly in compaction_free()7.8 HighKernelLinuxirqchip/irq-riscv-imsic-early: Fix fwnode leak on state setup failureNo scoreKernelLinuxs390/monwriter: Reject buffer reuse with different data lengthNo scoreKernelLinuxmac802154: remove interfaces with RCU list deletion7.8 HighKernelLinuxocteontx2-pf: fix SQB pointer leak on init failureNo scoreKernelLinuxllc: fix SAP refcount leak in llc_ui_autobind()4.6 MediumKernelLinuxipvs: use parsed transport offset in SCTP state lookup8.2 HighKernelLinuxipvs: reset full ip_vs_seq structs in ip_vs_conn_new9.8 CriticalKernelLinuxmacsec: don't read an unset MAC header in macsec_encrypt()7.3 HighKernelLinuxdibs: loopback: validate offset and size in move_data()7.8 HighKernelLinuxnet: macb: drop in-flight Tx SKBs on close5.6 MediumKernelLinuxcpu/hotplug: Fix NULL kobject warning in cpuhp_smt_enable()No scoreKernelLinuxfs/resctrl: Fix double-add of pseudo-locked region's RMID to free listNo scoreKernelLinuxdrbd: reject data replies with an out-of-range payload size9.8 CriticalKernelLinuxriscv: Prevent NULL pointer dereference in machine_kexec_prepare()6.7 MediumKernelLinuxtracing/osnoise: Call synchronize_rcu() when unregistering7.8 HighKernelLinuxs390/diag: Add missing array_index_nospec() call to memtop_get_page_count()5.7 MediumKernelLinuxcgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowedNo scoreKernelLinuxpmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI7.8 HighKernelLinuxpmdomain: mediatek: Fix possible nullptr KP in HWV cleanup/on-checkNo scoreKernelLinuxpmdomain: imx: Fix i.MX8MP VC8000E power up sequence5.7 MediumKernelLinuxnet/mlx5: free mlx5_st_idx_data on final dealloc6.8 MediumKernelLinuxwifi: rt2x00: avoid full teardown before work setup in probe7.8 HighKernelLinuxwifi: mac80211: fix memory leak in ieee80211_register_hw()No scoreKernelLinuxwifi: brcmfmac: cyw: fix heap overflow on a short auth frame8.8 High- Show moreLoading…