Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxdm: avoid leaking the caller's thread keyring via the table device file7.3 HighKernelLinuxdm_early_create: fix freeing used table on dm_resume failure7.8 HighKernelLinuxdm-integrity: fix leaking uninitialized kernel memoryNo scoreKernelLinuxdm-integrity: fix a bug if the bio is out of limits8.8 HighKernelLinuxdm-integrity: don't increment hash_offset twice7.1 HighKernelLinuxdm-verity: fix buffer overflow in FEC calculation9.8 CriticalKernelLinuxdm-verity: fix a possible NULL pointer dereferenceNo scoreKernelLinuxdm-verity: make error counter atomicNo scoreKernelLinuxdma-fence: Make dma_fence_dedup_array() robust against 0-count input7.8 HighKernelLinuxdma-buf: dma-fence: Fix potential NULL pointer dereference5.7 MediumKernelLinuxaccel/amdxdna: Fix use-after-free in amdxdna_gem_dmabuf_mmap()7.8 HighKernelLinuxaccel/amdxdna: reject command submission on devices without a submit op6.8 MediumKernelLinuxaccel/amdxdna: reject user command submission without a command BO6.8 MediumKernelLinuxaccel/amdxdna: Use caller client for debug BO sync7.8 HighKernelLinuxaccel/ivpu: Reject firmware log with size smaller than header7.1 HighKernelLinuxscsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset pathNo scoreKernelLinuxscsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()No scoreKernelLinuxscsi: xen: scsiback: Free the command tag on the TMR submit-failure path2.1 LowKernelLinuxscsi: xen: scsiback: Free unsubmitted command instead of double-putting it9.3 CriticalKernelLinuxscsi: target: Bound PR-OUT TransportID parsing to the received buffer9.8 CriticalKernelLinuxscsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE9.8 CriticalKernelLinuxscsi: elx: efct: Fix refcount leak in efct_hw_io_abort()No scoreKernelLinuxscsi: elx: efct: Fix I/O leak on unsupported additional CDB7.1 HighKernelLinuxfs/resctrl: Fix use-after-free during unmount7.8 HighKernelLinuxInput: ims-pcu - fix use-after-free and double-free in disconnect7.0 HighKernelLinuxInput: ims-pcu - validate control endpoint type5.2 MediumKernelLinuxInput: ims-pcu - fix firmware leak in async update1.0 LowKernelLinuxInput: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug loggingNo scoreKernelLinuxInput: ims-pcu - fix race condition in reset_device sysfs callbackNo scoreKernelLinuxInput: ims-pcu - fix type confusion in CDC union descriptor parsing7.0 HighKernelLinuxmmc: vub300: fix use-after-free on probe failure5.4 MediumKernelLinuxnet/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete7.8 HighKernelLinuxtracing/user_events: Fix use-after-free in user_event_mm_dup()7.8 HighKernelLinuxwifi: libertas_tf: fix use-after-free in lbtf_free_adapter()5.4 MediumKernelLinuxlocking/rt: Fix the incorrect RCU protection in rt_spin_unlock()9.8 CriticalKernelLinuxposix-cpu-timers: Use u64 multiplication in update_rlimit_cpu()2.0 LowKernelLinuxcpu: hotplug: Preserve per instance callback errors7.8 HighKernelLinuxcpu: hotplug: Bound hotplug states sysfs output7.8 HighKernelLinuxnet: mana: Validate the packet length reported by the NIC9.8 CriticalKernelLinuxnet: mana: Sync page pool RX frags for CPU9.8 CriticalKernelLinuxgpio: tegra: do not call pinctrl for GPIO directionNo scoreKernelLinuxgpio: mt7621: avoid corruption of shared interrupt trigger stateNo scoreKernelLinuxnet: sit: require CAP_NET_ADMIN in the device netns for changelink8.8 HighKernelLinuxnet: ethernet: ti: icssg: guard PA stat lookupsNo scoreKernelLinuxnet: wwan: t7xx: destroy DMA pool on CLDMA late init failureNo scoreKernelLinuxnet: ixp4xx_hss: fix duplicate HDLC netdev allocationNo scoreKernelLinuxnet/sched: act_ct: preserve tc_skb_cb across defragmentation8.2 HighKernelLinuxnet: ena: clean up XDP TX queues when regular TX setup fails5.6 MediumKernelLinuxnet: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink8.8 HighKernelLinuxnet: ip_vti: require CAP_NET_ADMIN in the device netns for changelink8.8 High- Show moreLoading…