Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxnetfs: Fix barriering when walking subrequest list9.8 CriticalKernelLinuxntfs: avoid stale runlist element dereference in MFT writeback8.8 HighKernelLinuxntfs: avoid stale runlist element dereference in fallocate8.8 HighKernelLinuxHID: bpf: Fix hid_bpf_get_data() range check7.8 HighKernelLinuxgue: validate REMCSUM private option length9.8 CriticalKernelLinuxnetfilter: xt_u32: reject invalid shift counts7.8 HighKernelLinuxnetfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()6.3 MediumKernelLinuxnetfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop9.1 CriticalKernelLinuxnetfilter: xt_connmark: reject invalid shift parameters7.3 HighKernelLinuxplatform/x86: bitland-mifs-wmi: Fix NULL pointer dereference during suspend/resume6.8 MediumKernelLinuxnet/mlx5: LAG, Fix off-by-one in single-FDB error rollback7.8 HighKernelLinuxnet/mlx5e: TC, skip peer flow cleanup when LAG seq is unavailable7.8 HighKernelLinuxnet/mlx5e: Fix HV VHCA stats zero-sized buffer allocation8.4 HighKernelLinuxnet/mlx5e: Fix HV VHCA stats agent registration race8.4 HighKernelLinuxnet/mlx5e: Fix publication race for priv->channel_stats[]No scoreKernelLinuxnet: microchip: vcap: fix races on the shared Super VCAP block7.8 HighKernelLinuxqede: fix off-by-one in BD ring consumption on build_skb failure9.8 CriticalKernelLinuxnet/sched: act_pedit: fix TOCTOU heap OOB write in tc offload7.8 HighKernelLinuxBluetooth: 6lowpan: avoid untracked enable workNo scoreKernelLinuxBluetooth: 6lowpan: hold L2CAP conn across debugfs controlNo scoreKernelLinuxBluetooth: MGMT: Fix adv monitor add failure cleanup7.8 HighKernelLinuxBluetooth: ISO: fix malformed ISO_END/CONT handling8.8 HighKernelLinuxBluetooth: L2CAP: fix tx ident leak for commands without a response5.3 MediumKernelLinuxaccel/amdxdna: Prevent PM resume deadlock in hwctx_sync_debug_bo()6.8 MediumKernelLinuxaccel/amdxdna: Fix VMA access race7.8 HighKernelLinuxnet/tls: Consume empty data records in tls_sw_read_sock()7.5 HighKernelLinuxnet/liquidio: drop cached VF pci_dev LUT9.3 CriticalKernelLinuxaccel/amdxdna: Fix potential amdxdna_umap lifetime race7.8 HighKernelLinuxdrm/v3d: Reject invalid indirect BO handle in indirect CSD setup6.8 MediumKernelLinuxnet/sched: cake: reject overhead values that underflow length6.8 MediumKernelLinuxperf/x86/amd/core: Avoid enabling BRS from the SVM reload path5.6 MediumKernelLinuxgpio: mvebu: free generic chips on unbindNo scoreKernelLinuxipv4: igmp: Fix potential UAF in igmp_gq_start_timer()9.8 CriticalKernelLinuxipv6: mcast: Fix potential UAF in MLD delayed work9.8 CriticalKernelLinuxipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer()5.7 MediumKernelLinuxnetfilter: nft_lookup: fix catchall element handling with inverted lookups9.1 CriticalKernelLinuxipvs: ensure inner headers in ICMP errors are in headroom9.8 CriticalKernelLinuxcifs: validate DFS referral string offsets9.4 CriticalKernelLinuxSUNRPC: pin upper rpc_clnt across the TLS connect_worker9.8 CriticalKernelLinuxdm era: fix NULL pointer dereference in metadata_open()9.8 CriticalKernelLinuxsmb: client: fix busy dentry warning on unmount after DIO7.8 HighKernelLinuxregulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK7.8 HighKernelLinuxdrm/fb-helper: Only consider active CRTCs for vblank syncNo scoreKernelLinuxocteontx2-af: fix VF bringup affecting PF promiscuous state7.9 HighKernelLinuxdrm/xe: free madvise VMA array on L2 flush failure6.8 MediumKernelLinuxsmb: client: fix overflow in passthrough ioctl bounds check8.1 HighKernelLinuxtracing/remotes: Fix leak in trace_remote_alloc_buffer() error pathNo scoreKernelLinuxmlxsw: fix refcount leak in mlxsw_sp_port_lag_join()No scoreKernelLinuxmlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace()No scoreKernelLinuxvduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iterNo score- Show moreLoading…