Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxext4: validate donor file superblock early in EXT4_IOC_MOVE_EXTNo scoreKernelLinuxvfio/qat: fix f_pos race in qat_vf_resume_write()7.8 HighKernelLinuxbpf: Tighten cgroup storage cookie checks for prog arrays7.8 HighKernelLinuxBluetooth: hci_qca: fix NULL pointer dereference in qca_setup() for non-serdev deviceNo scoreKernelLinuxBluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device5.6 MediumKernelLinuxBluetooth: hci_core: Fix UAF in hci_unregister_dev()7.8 HighKernelLinuxBluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path5.7 MediumKernelLinuxBluetooth: hci: validate codec capability element length8.8 HighKernelLinuxRDMA/core: Fix FRMR aging push to queue error flowNo scoreKernelLinuxRDMA/core: Fix FRMR set pinned push error pathNo scoreKernelLinuxRDMA/mlx5: Fix undefined shift of user RQ WQE size7.8 HighKernelLinuxRDMA/mlx5: Release the HW‑provided UAR index rather than the SW one7.8 HighKernelLinuxASoC: codecs: hdac_hdmi: Validate written enum value7.1 HighKernelLinuxASoC: meson: aiu: Validate written enum values7.3 HighKernelLinuxASoC: fsl: fsl_audmix: Validate written enum values7.8 HighKernelLinuxASoC: tegra: tegra210_ahub: Validate written enum value7.1 HighKernelLinuxASoC: topology: Check PCM and DAI name strings before use7.0 HighKernelLinuxnet/sched: cls_flow: Dont expose folded kernel pointers4.8 MediumKernelLinuxipv4: fib: Don't dump dying fib_info in fib_leaf_notify().7.8 HighKernelLinuxnet: fib_rules: Don't dump dying fib_rule in fib_rules_dump().7.8 HighKernelLinuxsctp: validate embedded address parameter length9.1 CriticalKernelLinuxnet: pfcp: allocate per-cpu tstats for PFCP netdevs6.8 MediumKernelLinuxnet: Stop leased rxq before uninstalling its memory provider8.8 HighKernelLinuxnet/sched: sch_hfsc: Don't make class passive twice4.8 MediumKernelLinuxtipc: require net admin for TIPCv2 netlink mutators7.8 HighKernelLinuxtipc: prevent snt_unacked underflow on CONN_ACK7.5 HighKernelLinuxtipc: reject inverted service ranges from peer bindings7.5 HighKernelLinuxcrypto: marvell/octeontx - fix DMA cleanup using wrong loop index10.0 CriticalKernelLinuxcrypto: cavium/cpt - fix DMA cleanup using wrong loop index10.0 CriticalKernelLinuxALSA: seq: Fix kernel heap address leak in bounce_error_event()4.8 MediumKernelLinuxiommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path8.8 HighKernelLinuxspi: xilinx: use FIFO occupancy register to determine buffer size6.7 MediumKernelLinuxcxl/region: Fix out-of-bounds access in cxl_cancel_auto_attach()8.4 HighKernelLinuxcxl/region: Fill first free targets[] slot during auto-discoveryNo scoreKernelLinuxcxl/region: Block region delete during region creationNo scoreKernelLinuxcxl/region: Resolve region deletion racesNo scoreKernelLinuxpower: supply: core: fix supplied_from allocations9.8 CriticalKernelLinuxhandshake: Require admin permission for DONE command7.8 HighKernelLinuxbnxt: fix head underflow on XDP head-grow9.8 CriticalKernelLinuxtcp: clear sock_ops cb flags before force-closing a child socket9.8 CriticalKernelLinuxnet/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen9.8 CriticalKernelLinuxnet/sched: sch_dualpi2: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen6.8 MediumKernelLinuxnet: mana: initialize gdma queue id to INVALID_QUEUE_IDNo scoreKernelLinuxnet: watchdog: fix refcount tracking races7.8 HighKernelLinuxnet: wwan: t7xx: check skb_clone in control TXNo scoreKernelLinuxkcm: use WRITE_ONCE() when changing lower socket callbacks7.8 HighKernelLinuxALSA: seq: avoid stale FIFO cells during resize5.7 MediumKernelLinuxnetfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them7.8 HighKernelLinuxIn the Linux kernel, the following vulnerability has been resolved: cifs: remove all cifs files...8.4 HighKernelLinuxbpf: Guard __get_user acesss with access_ok for uprobe_multi data7.8 High- Show moreLoading…