Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops4.8 MediumKernelLinuxipv4: fix use-after-free in fib_nhc_update_mtu()7.8 HighKernelLinuxserial: qcom-geni: fix TX DMA buffer flush8.8 HighKernelLinuxserial: 8250_dma: Clear stale RX state on shutdown5.6 MediumKernelLinuxserial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xxNo scoreKernelLinuxserial: amba-pl011: cancel RS485 hrtimers after freeing IRQ7.8 HighKernelLinuxstaging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()8.1 HighKernelLinuxstaging: rtl8723bs: fix OOB read in WMM_param_handler()5.3 MediumKernelLinuxstaging: rtl8723bs: fix missing shared-key auth challenge length check8.8 HighKernelLinuxstaging: rtl8723bs: validate monitor transmit frame lengths7.8 HighKernelLinuxmisc: fastrpc: Remove buffer from list prior to unmap operation7.8 HighKernelLinuxmisc: fastrpc: take fl->lock when moving mmaps on interrupted invoke7.8 HighKernelLinuxmm/damon/lru_sort: error out for >10000 active_mem_bpNo scoreKernelLinuxmm/damon/ops-common: putback folios on invalid migrate nidNo scoreKernelLinuxsamples/damon/mtier: error out for zero quota goal target valuesNo scoreKernelLinuxALSA: usb: Fix UAF at delayed release of MIDI2 EPs5.4 MediumKernelLinuxALSA: usx2y: bound the hwdep mmap fault offset7.8 HighKernelLinuxALSA: FCP: fix OOB write in fcp_meter_ctl_get()7.8 HighKernelLinuxALSA: us144mkii: re-anchor capture URBs on resubmission7.0 HighKernelLinuxdrm/v3d: Serialize the scheduler timeout handlers5.7 MediumKernelLinuxperf/core: Fix group leader use-after-free after sibling detach7.8 HighKernelLinuxtracing: Fix race between update_event_fields and, event_define_fields10.0 CriticalKernelLinuxfbdev: bitblit: bound-check glyph index in bit_cursor()7.8 HighKernelLinuxring-buffer: Prevent subbuf order change when resizing is disabled7.8 HighKernelLinuxtracing: Fix NULL pointer dereference in module event cache removalNo scoreKernelLinuxmm/huge_memory: fix huge_zero_pfn race7.8 HighKernelLinuxnet: smc: fix splice entry lifetime imbalance in smc_rx_splice8.4 HighKernelLinuxipv6: prevent in6_dev_get() from resurrecting inet6_dev7.8 HighKernelLinuxnet/dibs: Correct freeing of dmb_clientid_arr8.8 HighKernelLinuxnet/x25: fix use-after-free of the socket by its timers9.8 CriticalKernelLinuxnet: devmem: prevent net-iov / page mixing7.8 HighKernelLinuxNTB: ntb_netdev: Preserve RX queue depth on allocation failure7.5 HighKernelLinuxnetfilter: bridge: release template ct on non-IP path7.5 HighKernelLinuxnetfilter: nf_conntrack: defer invalid log until after unlock7.5 HighKernelLinuxnet: atlantic: free stranded TX buffers on ring deinit10.0 CriticalKernelLinuxnet: atlantic: free RX pages of consumed but not refilled buffers6.7 MediumKernelLinuxnet/sched: act_ct: fix sk_buff leak when the header checks reject a packet7.5 HighKernelLinuxnet/sched: act_gact, act_police: range check the fallback control action6.8 MediumKernelLinuxovl: don't warn when the mount is completed from another user namespace6.8 MediumKernelLinuxbinfmt_misc: don't warn when the mount is completed from another user namespace6.8 MediumKernelLinuxdibs: initialise dibs->lock in dibs_dev_alloc()9.8 CriticalKernelLinuxxdp: reject clones that overrun skb_shared_info tailroom9.8 CriticalKernelLinuxvxlan: do not arm the ageing timer on a device that is down8.8 HighKernelLinuxvsock/virtio: read virtqueues under worker locks8.4 HighKernelLinuxvsock/virtio: avoid refilling the RX queue after teardown7.8 HighKernelLinuxveth: fix skb length accounting after XDP frag adjustment10.0 CriticalKernelLinuxtls: rx: restore msg_iter before TLS 1.3 optimistic retry9.8 CriticalKernelLinuxtls: don't leave a full plaintext sk_msg ring unpushed7.8 HighKernelLinuxtipc: read le->link under the node lock in tipc_node_link_down()7.8 HighKernelLinuxsmb: client: Fix use-after-free in cifs_try_adding_channels()9.8 Critical- Show moreLoading…