Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxapparmor: fix uninitialised pointer passed to audit_log_untrustedstring()7.1 HighKernelLinuxi3c: mipi-i3c-hci: Fix race in i3c_hci_addr_to_dev()7.8 HighKernelLinuxregcache: Do not overwrite error code when finalizing cache after errorNo scoreKernelLinuxdrm/i915: clear CRTC color blob pointers after dropping refs7.8 HighKernelLinuxxfrm: Fix xfrm state cache insertion race9.8 CriticalKernelLinuxxfrm: validate selector family and prefixlen during match7.8 HighKernelLinuxdrm/amdkfd: fix list_del corruption in kfd_criu_resume_svm7.8 HighKernelLinuxocteontx2-pf: Fix leak of SQ timestamp buffer on teardownNo scoreKernelLinuxsctp: hold socket lock when dumping endpoints in sctp_diag2.0 LowKernelLinuxALSA: usb-audio: qcom: reject stream disable with no active interface7.8 HighKernelLinuxALSA: usb-audio: qcom: clear opened when stream enable fails4.8 MediumKernelLinuxflow_dissector: check device type before reading ETH_ADDRS7.8 HighKernelLinuxALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints5.4 MediumKernelLinuxnetfilter: flowtable: fix and simplify IP6IP6 tunnel handling9.8 CriticalKernelLinuxieee802154: fix kernel-infoleak in dgram_recvmsg()2.0 LowKernelLinuxmd/raid1: fix writes_pending and barrier reference leaks on write failures7.1 HighKernelLinuxmd/raid10: fix writes_pending leak on write request failures2.0 LowKernelLinuxmd/raid10: fix writes_pending and barrier reference leaks on discard failures7.5 HighKernelLinuxmd/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retryNo scoreKernelLinuxnetfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types9.8 CriticalKernelLinuxnetfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()7.8 HighKernelLinuxnetfilter: ipset: make sure gc is properly stopped7.8 HighKernelLinuxnetfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leakNo scoreKernelLinuxtpm_crb: Check ACPI_COMPANION() against NULL during probeNo scoreKernelLinuxalloc_tag: fix use-after-free in /proc/allocinfo after module unloadNo scoreKernelLinuxnet/sched: act_ct: fix nf_connlabels leak on two error paths2.0 LowKernelLinuxipv6: ioam: fix type confusion of dst_entry9.8 CriticalKernelLinuxbpf: Fix stack slot index in nospec checks5.7 MediumKernelLinuxbpf: Fix effective prog array index with BPF_F_PREORDER7.8 HighKernelLinuxbpf: Preserve pointer spill metadata during half-slot cleanup8.4 HighKernelLinuxice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()7.1 HighKernelLinuxrtc: msc313: fix NULL deref in shared IRQ handler at probeNo scoreKernelLinuxbpf: Guard conntrack opts error writes8.8 HighKernelLinuxksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE9.8 CriticalKernelLinuxipv4: fib: Don't ignore error route in local/main tables.10.0 CriticalKernelLinuxmd/raid5: avoid R5_Overlap races while breaking stripe batches8.8 HighKernelLinuxnetfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()7.8 HighKernelLinuxnetfilter: nf_conncount: prevent connlimit drops for early confirmed ct7.5 HighKernelLinuxnetfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto()9.8 CriticalKernelLinuxnetfilter: nft_compat: ebtables emulation must reject non-bridge targets7.3 HighKernelLinuxASoC: SDCA: Validate written enum value in ge_put_enum_double()7.1 HighKernelLinuxnet: dsa: sja1105: round up PTP perout pin durationNo scoreKernelLinuxsctp: fix err_chunk memory leaks in INIT handling8.7 HighKernelLinuxs390/mm: Fix handling of _PAGE_UNUSED pte bit9.3 CriticalKernelLinuxnet: dsa: mxl862xx: fix use-after-free of DSA ports in crc_err_work7.8 HighKernelLinuxocteontx2-af: Validate NIX maximum LFs correctly7.8 HighKernelLinuxnet: mvneta: re-enable percpu interrupt on resume7.5 HighKernelLinuxgeneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint10.0 CriticalKernelLinuxgeneve: validate inner network offset in geneve_gro_complete()10.0 CriticalKernelLinuxnet: sungem: fix probe error cleanup7.8 High- Show moreLoading…