Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxaf_unix: Unlink scc_entry in unix_del_edge().7.8 HighKernelLinuxovpn: fix NULL dereference when killing missing key7.5 HighKernelLinuxovpn: finish crypto callback cleanup before peer release9.8 CriticalKernelLinuxscsi: core: pair EH runtime PM get and putNo scoreKernelLinuxperf: Reject exited events as group leaders7.8 HighKernelLinuxsctp: validate cookie AUTH state before use9.8 CriticalKernelLinuxriscv: lib: Fix ZBB strnlen reading past count boundary9.4 CriticalKernelLinuxovpn: defer key slot crypto freeing to workqueue7.5 HighKernelLinuxrseq: Prevent hard lockup on granted time slice extension5.7 MediumKernelLinuxnetfilter: ipset: fix refcount race between list:set GC and swap7.8 HighKernelLinuxipvs: revalidate ihl to prevent out-of-bounds access7.8 HighKernelLinuxnetfilter: flowtable: publish GC-visible tuple last9.8 CriticalKernelLinuxeth: bnxt: avoid deadlock when canceling IRQ affinity notifier7.5 HighKernelLinuxipvlan: inherit needed_headroom and needed_tailroom from phy_dev9.8 CriticalKernelLinuxmacvlan: inherit needed_headroom and needed_tailroom from lowerdev9.8 CriticalKernelLinuxveth: fix queue index used to wake the peer txq in veth_poll7.5 HighKernelLinuxnet: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling7.5 HighKernelLinuxnet/sched: act_api: fix TOCTOU NULL deref on a->goto_chain5.7 MediumKernelLinuxnet/sched: cls_u32: skip hash tables in u32_bind_class()7.8 HighKernelLinuxregmap: sdw-mbq: don't call an unset readable_reg callback5.7 MediumKernelLinuxnet: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG9.8 CriticalKernelLinuxnet/sched: cls_bpf: reject dev-bound programs bound to a different device7.8 HighKernelLinuxl2tp: fix tunnel and session refcount leak on seq_file release6.8 MediumKernelLinuxfirewire: ohci: fix NULL pointer dereference in ar_context_release5.1 MediumKernelLinuxgpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock7.8 HighKernelLinuxIn the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check for...No scoreKernelLinuxsched_ext: Skip sub-disable teardown for never-linked sub-schedulers7.8 HighKernelLinuxNFS: Pin the 'struct nfs_server' during a FREE_STATEID call9.8 CriticalKernelLinuxsoc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_readNo scoreKernelLinuxxfs: handle NULL b_addr in xfs_buf_freeNo scoreKernelLinuxovpn: skip rehash for peers already removed from by_id9.8 CriticalKernelLinuxbonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor7.3 HighKernelLinuxenic: fix tx_hang_reset use-after-free on device removal7.8 HighKernelLinuxipvs: avoid out-of-bounds write in ip_vs_nat_icmp7.8 HighKernelLinuxbtrfs: lzo: reject inline extents without valid headers9.8 CriticalKernelLinuxbtrfs: fix memory leak in btrfs_do_encoded_write()No scoreKernelLinuxaccel/amxdna: Fix page-insertion errors in amdxdna_insert_pages()7.8 HighKernelLinuxbpf: Preserve pointer state for commuted arithmetic7.8 HighKernelLinuxnet/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()8.2 HighKernelLinuxdevlink: fix net namespace reference leak in reload6.7 MediumKernelLinuxnet/mlx5: fw_tracer, return NULL on create error7.5 HighKernelLinuxaccel/amdxdna: Fix locally exploitable BUG_ON in amdxdna_insert_pages()6.8 MediumKernelLinuxbpf: Fix netns reference imbalance in conntrack kfuncs7.8 HighKernelLinuxbpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()7.8 HighKernelLinuxvhost_iotlb: bound map allocation in add_range7.1 HighKernelLinuxvdpa/mlx5: Fix buffer length in create_direct_keys()9.3 CriticalKernelLinuxhwmon: (pmbus) Fix type confusion in notification logic8.4 HighKernelLinuxxsk: require at least 16 bytes of TX metadata7.8 HighKernelLinuxxsk: clear metadata pointer when no timestamp is requested2.0 LowKernelLinuxxsk: validate launch-time metadata size7.8 High- Show moreLoading…