Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxxsk: validate metadata when processing requests7.8 HighKernelLinuxbnge: Fix NULL pointer dereference in aux device releaseNo scoreKernelLinuxudp: fix potential use-after-free in tunnel segmentation10.0 CriticalKernelLinuxnet/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter8.2 HighKernelLinuxvhost-scsi: Validate T10 PI scatterlist counts7.1 HighKernelLinuxvhost-scsi: reject feature changes after endpoint8.8 HighKernelLinuxnet/openvswitch: check Ethernet header length in key_extract()7.8 HighKernelLinuxnet/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers7.8 HighKernelLinuxdrm/xe: Fix memory leak in exec_queue_set_hang_replay_state()6.8 MediumKernelLinuxnet/mlx5e: fix BQL reset on SQ re-activation6.7 MediumKernelLinuxbnxt_en: Disable EOP for TPA on all chips to prevent data corruption8.2 HighKernelLinuxtcp: fix TFO max_qlen accounting across reuseport migration7.5 HighKernelLinuxnetfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()7.5 HighKernelLinuxnet/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload lengthNo scoreKernelLinuxnet: prestera: validate firmware header lengthNo scoreKernelLinuxnet/smc: fix TOCTOU race between smc_listen_out() and listener close7.5 HighKernelLinuxnet: thunderbolt: Tear down DMA paths before stopping the rings8.8 HighKernelLinuxs390/ism: Fix UAF of sba and ieq during ism_dev_exit()8.4 HighKernelLinuxnet/atm: fix slab-out-of-bounds read in vcc_setsockopt()7.1 HighKernelLinuxsctp: clear control chunk transport if it is being removed9.8 CriticalKernelLinuxwatchdog: at91sam9_wdt: prevent timer rearm during teardown7.8 HighKernelLinuxrqspinlock: Reset tail when preserving queue on deadlockNo scoreKernelLinuxhwmon: (ltc4282) Clamp negative current limitsNo scoreKernelLinuxnet: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp()7.1 HighKernelLinuxInput: evdev - sanitize event type index when fetching event masks1.8 LowKernelLinuxALSA: usb-audio: fix OOB write on Type II inbound URBs7.0 HighKernelLinuxusb: misc: usbio: check ibuf_len against rxbuf_len in bulk msgNo scoreKernelLinuxusb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()2.4 LowKernelLinuxusb: gadget: f_ncm: Use unsigned int for ndp_index5.1 MediumKernelLinuxnet: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()7.5 HighKernelLinuxnet: usb: ipheth: fix carrier_work UAF on disconnect7.0 HighKernelLinuxvt: add permission check for KDSKBMETA ioctl4.6 MediumKernelLinuxvt: stabilize tty reference in kbd_keycode with tty_port_tty_get7.8 HighKernelLinuxmm: fix incorrect flush address in direct page table reclaim7.8 HighKernelLinuxInput: evdev - fix information leak in evdev_pass_values()4.6 MediumKernelLinuxmm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAFNo scoreKernelLinuxima: fix out-of-bounds read in xattr_verify()5.3 MediumKernelLinuxipvs: stop estimator after disabled calc phase7.8 HighKernelLinuxipvs: clear IPv4 options after rebasing tunnel ICMP errors9.8 CriticalKernelLinuxpacket: use consistent hard_header_len in TX_RING send path7.8 HighKernelLinuxnet/packet: reset the MAC header on the packet-socket transmit path7.8 HighKernelLinuxpacket: synchronize pressure clearing with ring reconfiguration7.8 HighKernelLinuxnet: fix skb length accounting after generic XDP frag adjustment9.1 CriticalKernelLinuxnet: openvswitch: reallocate update replies for mismatched IDs6.8 MediumKernelLinuxnet/sched: reject overly deep qdisc hierarchies7.8 HighKernelLinuxinet: frags: publish queues before arming timer9.8 CriticalKernelLinuxmac802154: fix netdev use-after-free in beacon worker7.8 HighKernelLinuxnetfilter: ebt_nflog: pin the NFLOG backend7.8 HighKernelLinuxnet: bridge: mrp: fix uninitialised bytes on the wire4.8 MediumKernelLinuxfutex: Prevent robust futex exit race some more5.7 Medium- Show moreLoading…