Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxsockmap: Fix use-after-free in udp_bpf_recvmsg()7.8 HighKernelLinuxbpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check8.4 HighKernelLinuxtipc: fix UAF in tipc_l2_send_msg()9.8 CriticalKernelLinuxtcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)7.5 HighKernelLinuxRDMA/bnxt_re: Initialize dpi variable to zero4.8 MediumKernelLinuxRDMA/bnxt_re: Free SRQ toggle page after firmware teardown8.8 HighKernelLinuxRDMA/bnxt_re: Free CQ toggle page after firmware teardown8.8 HighKernelLinuxRDMA/bnxt_re: Avoid displaying the kernel pointer2.0 LowKernelLinuxRDMA/bnxt_re: Add a max slot check for SQ8.8 HighKernelLinuxRDMA/bnxt_re: Proper rollback if the ioremap fails9.2 CriticalKernelLinuxRDMA/bnxt_re: Avoid repeated requests to allocate WC pages9.3 CriticalKernelLinuxRDMA/irdma: Replace waitqueue and flag with completion9.8 CriticalKernelLinuxnet: serialize netif_running() check in enqueue_to_backlog()9.9 CriticalKernelLinuxksmbd: fix use-after-free in same_client_has_lease()8.8 HighKernelLinuxnet/9p: fix race condition on rdma->state in trans_rdma.c9.8 CriticalKernelLinuxstaging: rtl8723bs: fix stainfo check in rtw_aes_decrypt7.1 HighKernelLinuxstaging: nvec: fix use-after-free in nvec_rx_completed()8.4 HighKernelLinuxsoundwire: fix bug in sdw_add_element_group_count found by syzkaller7.8 HighKernelLinuxPCI: Check ROM header and data structure addr before accessing7.7 HighKernelLinuxmailbox: mtk-adsp: fix UAF during device teardownNo scoreKernelLinuxcoresight: platform: defer connection counter increment until alloc succeeds7.8 HighKernelLinuxstaging: most: video: avoid double free on video register failureNo scoreKernelLinuxusb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control()7.8 HighKernelLinuxgpib: fix double decrement of descriptor_busy in command_ioctl()7.8 HighKernelLinuxiio: magnetometer: ak8975: fix potential kernel stack memory leakNo scoreKernelLinuxiio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling7.8 HighKernelLinuxiio: accel: mma8452: handle I2C read error(s) in mma8452_read()No scoreKernelLinuxfs/ntfs3: add bounds check to run_get_highest_vcn()8.4 HighKernelLinuxfs/ntfs3: call _ntfs_bad_inode() when failing to rename9.8 CriticalKernelLinuxdmaengine: Fix possible use after free7.8 HighKernelLinuxdmaengine: dma-axi-dmac: Properly free struct axi_dmac_desc2.0 LowKernelLinuxdmaengine: dma-axi-dmac: use DMA pool to manange DMA descriptorNo scoreKernelLinuxxprtrdma: Decouple req recycling from RPC completion9.8 CriticalKernelLinuxnfs: use nfsi->rwsem to protect traversal of the file lock list9.8 CriticalKernelLinuxfs/ntfs3: prevent potential lcn remains uninitialized7.1 HighKernelLinuxfs/ntfs3: resize log->one_page_buf when adopting on-disk page size7.8 HighKernelLinuxxprtrdma: Fix ep kref imbalance on ADDR_CHANGE8.8 HighKernelLinuxxprtrdma: Initialize re_id before removal registrationNo scoreKernelLinuxxprtrdma: Check frwr_wp_create() during connectNo scoreKernelLinuxxprtrdma: Fix bcall rep leak and unbounded peek9.8 CriticalKernelLinuxxprtrdma: Sanitize the reply credit grant after parsing7.5 HighKernelLinuxxprtrdma: Repost Receive buffers for malformed replies7.5 HighKernelLinuxxfrm: Fix dev use-after-free in xfrm async resumption9.8 CriticalKernelLinuxapparmor: fix race in unix socket mediation when peer_path is used8.8 HighKernelLinuxapparmor: fix refcount leak when updating the sk_ctx7.8 HighKernelLinuxapparmor: check label build before no_new_privs test7.1 HighKernelLinuxapparmor: aa_label_alloc use aa_label_free on alloc failure7.8 HighKernelLinuxapparmor: fix NULL pointer dereference in unpack_pdbNo scoreKernelLinuxapparmor: fail policy unpack on accept2 allocation failureNo scoreKernelLinuxapparmor: release exe file resources on path failure6.8 Medium- Show moreLoading…