Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxBluetooth: HIDP: validate numbered report payloads7.1 HighKernelLinuxafs: Fix UAF when sending a message7.8 HighKernelLinuxALSA: 6fire: Fix UAF at error handling during probe7.0 HighKernelLinuxALSA: seq: Fix division by zero in initialize_timer()6.8 MediumKernelLinuxALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes7.8 HighKernelLinuxALSA: ump: fix double free of out_cvts on rawmidi error7.0 HighKernelLinuxALSA: usb-audio: fix use-after-free in ump_to_endpoint()5.4 MediumKernelLinuxALSA: usb-audio: fix stack info leak in RME Digiface status2.4 LowKernelLinuxALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output()7.0 HighKernelLinuxALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set7.3 HighKernelLinuxALSA: usb-audio: Clamp frame size in implicit-feedback mode8.4 HighKernelLinuxfou: Fix use-after-free in fou_create()7.8 HighKernelLinuxigbvf: Fix leak in TX DMA error cleanup9.8 CriticalKernelLinuxksmbd: reject repeated SMB2 NEGOTIATE requests8.7 HighKernelLinuxnet/smc: fix socket use-after-free during link group termination9.8 CriticalKernelLinuxnetfilter: ipset: do not update comments from kernel-side hash adds8.4 HighKernelLinuxof/address: Fix NULL bus dereference in of_pci_range_parser_one()No scoreKernelLinuxtipc: avoid use-after-free in poll trace queue dumps8.8 HighKernelLinuxwifi: mac80211: fix tid_tx use-after-free on BA session stop8.8 HighKernelLinuxwifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames8.8 HighKernelLinuxbinfmt_misc: restore write access when removing an entry4.8 MediumKernelLinuxbinfmt_misc: use exe_file_deny_write_access() for the interpreter cloneNo scoreKernelLinuxbinfmt_misc: reject a flag character as the field delimiter7.1 HighKernelLinuxbinfmt_misc: don't let an 'F' entry pin its own instance6.8 MediumKernelLinuxbinfmt_misc: don't leak the user namespace when the mount fails5.7 MediumKernelLinuxmm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios7.8 HighKernelLinuxmm/page_reporting: use system_freezable_wq to fix UAF during suspend7.8 HighKernelLinuxnet: bridge: stop fast-leave after deleting a port group9.8 CriticalKernelLinuxnet: pktgen: fix proc entry use-after-free7.8 HighKernelLinuxum: vector: fix use-after-free in vector_mmsg_rx()9.8 CriticalKernelLinuxuprobes: Fix NULL pointer dereference in hprobe_expire()No scoreKernelLinuxveth: convert frag_list skbs before running XDP9.1 CriticalKernelLinuxvxlan: use neigh_ha_snapshot() in route_shortcircuit()10.0 CriticalKernelLinuxvxlan: use pskb_network_may_pull() for transmit path header pulls9.8 CriticalKernelLinuxvxlan: use pskb_network_may_pull() in route_shortcircuit()9.8 CriticalKernelLinuxublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev()6.8 MediumKernelLinuxtracing: Check return value of __register_event() in trace_module_add_events()7.8 HighKernelLinuxscsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write7.8 HighKernelLinuxsctp: prevent peer transport count overflow8.8 HighKernelLinuxgpio: pch: use raw_spinlock_t for the register lockNo scoreKernelLinuxs390/qeth: Check CAP_NET_ADMIN for private ioctls7.8 HighKernelLinuxs390/zcrypt: Close speculative mem read possibilityNo scoreKernelLinuxnet: openvswitch: fix potential UAF on meter attach failure7.8 HighKernelLinuxnet: openvswitch: fix skb leak on flow key update failure during ct6.8 MediumKernelLinuxi2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock5.7 MediumKernelLinuxi2c: imx: mark I2C adapter when hardware is powered downNo scoreKernelLinuxi2c: imx: Cancel hrtimer before clearing slave pointer8.4 HighKernelLinuxcan: ems_usb: validate CPC message lengths5.2 MediumKernelLinuxcan: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure1.0 LowKernelLinuxcan: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents7.0 High- Show moreLoading…