Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxKVM: SVM: Serialize accesses to the owner and mirror list with separate lock8.8 HighKernelLinuxeventfs: Fix use-after-free in eventfs_remove_rec()7.8 HighKernelLinuxeventfs: Use children field for rcu head and add memory barriers7.8 HighKernelLinuxRevert "thermal/drivers/hwmon: Cleanup coding style a bit"8.4 HighKernelLinuxptp: ocp: Fix board ID over-read7.1 HighKernelLinuxring-buffer: Initialise reader page order in rb_allocate_cpu_buffer()No scoreKernelLinuxring-buffer: Use current_context for safe per-CPU buffer swap7.8 HighKernelLinuxmm/page_table_check: skip special zero mappings5.7 MediumKernelLinuxmm/ptdump: always stabilise against page table freeing using init_mmNo scoreKernelLinuxipv6: fix Route Information option length validation7.5 HighKernelLinuxip6_tunnel: clear skb2->cb[] in ip6ip6_err()9.8 CriticalKernelLinuxfs,fsverity: remove check for fsverity being enabled in setattr_prepare()2.0 LowKernelLinuxfscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()7.8 HighKernelLinuxsched/psi: Shut down rtpoll_timer in psi_cgroup_free()7.8 HighKernelLinuxsched_ext: Take cgroup_lock() first in scx_cgroup_lock()5.6 MediumKernelLinuxima: Instantiate file_truncate and path_truncate hooks8.1 HighKernelLinuxmm/filemap: __filemap_add_folio() restore index before retrying9.8 CriticalKernelLinuxfsverity: Fix bpf_get_fsverity_digest() dynptr assumptions7.8 HighKernelLinuxbpf, sockmap: Fix sk_redir use-after-free in send verdict8.4 HighKernelLinuxsctp: keep chunk->transport in step with the list it is queued on9.8 CriticalKernelLinuxsctp: fix use-after-free of cached ASCONF chunk9.8 CriticalKernelLinuxsctp: clear new_transport when removing a peer9.8 CriticalKernelLinuxthunderbolt: Bound the DROM dual link port number before indexing sw->ports7.0 HighKernelLinuxRDMA/bnxt_re: zero shared page before exposing to userspace7.1 HighKernelLinuxnet/sched: cls_route: fix fastmap use-after-free on filter7.8 HighKernelLinuxpacket: use consistent hard_header_len in non-ring send paths7.8 HighKernelLinuxnet: ipv6: clear suppressed fib6 rule result9.8 CriticalKernelLinuxnetfilter: nft_payload: fix mask build for partial field offload7.1 HighKernelLinuxvhost: reset the vring metadata cache on vring reconfiguration8.8 HighKernelLinuxcrypto: algif_skcipher - force synchronous processing on trees without ctx->state7.1 HighKernelLinuxnet: mpls: initialize rtm_tos in mpls_getroute()4.8 MediumKernelLinuxmm/slab: prevent unbounded recursion in free path with new kmalloc type7.5 HighKernelLinuxthunderbolt: Prevent XDomain delayed work use-after-free on disconnect8.8 HighKernelLinuxdmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open()7.8 HighKernelLinuxiommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for a vDEVICE9.3 CriticalKernelLinuxbtrfs: zoned: fix deadlock between metadata writeback and transaction commit7.5 HighKernelLinuxbtrfs: skip global block reserve accounting for rescue mountsNo scoreKernelLinuxntfs: harden runlist realloc size calculations9.8 CriticalKernelLinuxnetfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()9.8 CriticalKernelLinuxKVM: arm64: vgic: Fix race between LPI release and re-registration9.3 CriticalKernelLinuxkeys: fix out-of-bounds read in keyring_get_key_chunk()7.1 HighKernelLinuxkeys: make keyring key-chunk byte order agree with keyring_diff_objects()6.9 MediumKernelLinuxnetfilter: nf_tables: make nft_object rhltable per table7.8 HighKernelLinuxnetfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH7.1 HighKernelLinuxrds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check()7.8 HighKernelLinuxnexthop: take nh->lock for f6i_list walks in replace check and notify8.8 HighKernelLinuxnexthop: avoid unlocked f6i_list walk in nh_rt_cache_flush8.8 HighKernelLinuxxsk: fix buffer leak in xsk_drop_skb() for AF_XDP multi-buffer Tx4.8 MediumKernelLinuxxsk: drain continuation descs after overflow in xsk_build_skb()4.8 MediumKernelLinuxxsk: reclaim invalid Tx descriptors in ZC batch path6.7 Medium- Show moreLoading…