Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxnetfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst7.8 HighKernelLinuxnetfilter: nft_fib: reject fib expression on the netdev egress hook7.5 HighKernelLinuxnetfilter: nf_conntrack_sip: validate skb_dst() before accessing it7.5 HighKernelLinuxnetfilter: nft_set_pipapo: don't leak bad clone into future transaction7.8 HighKernelLinuxnetfilter: nf_nat_sip: reload possible stale data pointer9.8 CriticalKernelLinuxnetfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag7.8 HighKernelLinuxnetfilter: flowtable: use dst in this direction when pushing IPIP header9.8 CriticalKernelLinuxnetfilter: flowtable: support IPIP tunnel with direct xmit9.8 CriticalKernelLinuxnetfilter: nf_conncount: fix zone comparison in tuple dedup7.5 HighKernelLinuxgpu: host1x: Fix device reference leak in host1x_device_parse_dt() error pathNo scoreKernelLinuxgpu/buddy: bail out of try_harder when alignment cannot be honoured7.8 HighKernelLinuxselinux: check connect-related permissions on TCP Fast Open8.4 HighKernelLinuxselinux: avoid sk_socket dereference in selinux_sctp_bind_connect()7.5 HighKernelLinuxleds: uleds: Fix potential buffer overreadNo scoreKernelLinuxmfd: sm501: Fix reference leak on failed device registrationNo scoreKernelLinuxx86/virt/sev: Revert "Drop WBINVD before setting MSR_AMD64_SYSCFG_SNP_EN"9.3 CriticalKernelLinuxx86/boot: Validate console=uart8250 baud rate to fix early boot hangNo scoreKernelLinuxperf/x86/amd/brs: Fix kernel address leakage4.8 MediumKernelLinuxs390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init()5.7 MediumKernelLinuxbatman-adv: retrieve ethhdr after potential skb realloc on RX8.8 HighKernelLinuxbatman-adv: access unicast_ttvn skb->data only after skb realloc9.8 CriticalKernelLinuxbatman-adv: bla: reacquire gw address after skb realloc8.8 HighKernelLinuxbatman-adv: ensure minimal ethernet header on TX7.8 HighKernelLinuxbatman-adv: tt: avoid request storms during pending request7.5 HighKernelLinuxbatman-adv: frag: free unfragmentable packet6.8 MediumKernelLinuxbatman-adv: clean untagged VLAN on netdev registration failure2.0 LowKernelLinuxbatman-adv: frag: fix primary_if leak on failed linearization5.7 MediumKernelLinuxbatman-adv: mcast: avoid OOB read of num_dests header8.1 HighKernelLinuxbatman-adv: tt: prevent TVLV OOB check overflow9.8 CriticalKernelLinuxjbd2: fix integer underflow in jbd2_journal_initialize_fast_commit()7.8 HighKernelLinuxnvdimm/btt: Free arenas on btt_init() error pathsNo scoreKernelLinuxnvdimm/btt: Free arena sub-allocations on discover_arenas() error pathNo scoreKernelLinuxsunrpc: pin svc_xprt across the asynchronous TLS handshake callback9.8 CriticalKernelLinuxsunrpc: wait for in-flight TLS handshake callback when cancel loses race9.8 CriticalKernelLinuxsunrpc: harden rq_procinfo lifecycle to prevent double-free9.8 CriticalKernelLinuxlockd: Plug nlm_file leak when nlm_do_fopen() fails8.7 HighKernelLinuxlockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure8.2 HighKernelLinuxSUNRPC: Bound-check xdr_buf_to_bvec() stores before writing9.8 CriticalKernelLinuxremoteproc: qcom: Fix leak when custom dump_segments addition failsNo scoreKernelLinuxMIPS: DEC: Ensure 32-bit stack location for o32 prom_printf()No scoreKernelLinuxpower: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak4.8 MediumKernelLinuxmm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch7.1 HighKernelLinuxmm/memory_hotplug: fix incorrect altmap passing in error pathNo scoreKernelLinuxntfs: grow index root value before reparent header update9.8 CriticalKernelLinuxntfs: fix off-by-one in mapping pairs decoding bounds checks9.8 CriticalKernelLinuxntfs: validate attribute values on lookup9.8 CriticalKernelLinuxntfs: add bounds check before accessing EA entries9.8 CriticalKernelLinuxntfs: not change 0-byte $DATA attribute to non-resident9.8 CriticalKernelLinuxntfs: validate index block header more strictly9.8 CriticalKernelLinuxntfs: free volume-wide resources on fill_super failureNo score- Show moreLoading…