Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxscsi: libiscsi: Fix stale-data leak into the SCSI sense buffer7.5 HighKernelLinuxscsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer9.8 CriticalKernelLinuxscsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake raceNo scoreKernelLinuxwifi: ath12k: fix out-of-bounds clear_bit in ath12k_mac_dp_peer_cleanup()8.8 HighKernelLinuxhwmon: (nct6775-core) Fix number of temperature registers for NCT6116No scoreKernelLinuxhwmon: (lm90) Only report alarms if driver is readyNo scoreKernelLinuxhwmon: (nzxt-smart2) DMA-align output buffer7.8 HighKernelLinuxnet: do not send ICMP/NDISC Redirects when peer allocation fails7.5 HighKernelLinuxhwmon: (nct6775-core) Prevent access to unsupported weight registers7.8 HighKernelLinuxforcedeth: fix UAF of txrx_stats in nv_remove7.8 HighKernelLinuxhwmon: (adt7470) Fix busy-loop and I2C flooding in update threadNo scoreKernelLinuxhwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed readNo scoreKernelLinuxrtase: fix double free of multi-frag skb on DMA map failure9.8 CriticalKernelLinuxnet/sched: cls_u32: validate offshift to prevent shift-out-of-bounds7.8 HighKernelLinuxnet: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister()10.0 CriticalKernelLinuxnetfs: Fix folio_queue ENOMEM in writeback by adding a mempool5.7 MediumKernelLinuxBluetooth: ISO: clear iso_data always when detaching conn from hcon8.8 HighKernelLinuxBluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp8.8 HighKernelLinuxBluetooth: ISO: lock sk in iso_sock_getname8.0 HighKernelLinuxBluetooth: ISO: lock sk in iso_connect_ind8.8 HighKernelLinuxBluetooth: ISO: hold sk properly in iso_conn_ready8.8 HighKernelLinuxBluetooth: ISO: fix leaking sk after socket release6.8 MediumKernelLinuxBluetooth: ISO: avoid deadlocks in iso_sock_timeout8.8 HighKernelLinuxBluetooth: ISO: fix refcounting of iso_conn8.8 HighKernelLinuxBluetooth: ISO: fix race of kfree vs kref_get_unless_zero8.8 HighKernelLinuxBluetooth: btintel: Validate length before parsing diagnostics TLV2.4 LowKernelLinuxBluetooth: hci_conn: hold conn reference in abort_conn_sync()8.8 HighKernelLinuxBluetooth: hci_sync: hold conn in hci_connect_big_sync() callback8.8 HighKernelLinuxBluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback7.8 HighKernelLinuxBluetooth: hci_sync: hold conn in hci_past_sync() callback8.0 HighKernelLinuxocteontx2-af: Block VFs from clobbering special CGX PKIND state8.8 HighKernelLinuxscsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit5.6 MediumKernelLinuxnet: sxgbe: free TX rings on RX allocation failureNo scoreKernelLinuxriscv: mm: Fix out-of-bounds page-table walk during memory hot-removeNo scoreKernelLinuxqede: sync udp_tunnel ports outside qede_lock in the recovery path7.5 HighKernelLinuxksmbd: fix use-after-free in __close_file_table_ids()8.8 HighKernelLinuxksmbd: use memcmp() to compare ClientGUIDs9.1 CriticalKernelLinuxiommu/iommufd: Fix IOPF group ownership UAF8.8 HighKernelLinuxpinctrl: devicetree: don't free uninitialized dev_name on error path7.8 HighKernelLinuxmm/hugetlb: fix list corruption in allocate_file_region_entries()7.8 HighKernelLinuxKVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs9.3 CriticalKernelLinuxKVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active8.2 HighKernelLinuxKVM: s390: pci: Reject adapter interrupt forwarding if already enabled8.8 HighKernelLinuxKVM: s390: pci: Fix memory accounting for pinned/unpinned pages10.0 CriticalKernelLinuxdibs: fix use-after-free of dmb_node in loopback attach/detach/unregister7.8 HighKernelLinuxaudit: fix potential use-after-free in audit_del_rule()7.8 HighKernelLinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix pending...7.8 HighKernelLinuxBluetooth: mgmt: fix UAF in pair command cancellation7.8 HighKernelLinuxBluetooth: hci_sync: Fix advertising data UAFs8.8 HighKernelLinuxBluetooth: HIDP: reject frames without a transaction header8.8 High- Show moreLoading…