Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxPCI: dwc: Avoid dwc_pcie_rasdes_debugfs_deinit() NULL dereference when no RAS DES capabilityNo scoreKernelLinuxRevert "PCI/MSI: Unmap MSI-X region on error"No scoreKernelLinuxapparmor: fix potential UAF in aa_replace_profiles7.8 HighKernelLinuxdrm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free4.8 MediumKernelLinuxnet: airoha: fix foe_check_time allocation size9.8 CriticalKernelLinuxieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns()1.8 LowKernelLinuxnet: dst_metadata: fix false-positive memcpy overflow in tun_dst_unclone8.2 HighKernelLinuxnet: emac: Fix NULL pointer dereference in emac_probe7.5 HighKernelLinuxveth: fix NAPI leak in XDP enable error path7.8 HighKernelLinuxnet: lwtunnel: Drop skb metadata before LWT encapsulation9.8 CriticalKernelLinuxACPI: processor_idle: Mark LPI enter functions as __cpuidle10.0 CriticalKernelLinuxnet: enetc: fix potential divide-by-zero when num_vsi is zeroNo scoreKernelLinuxqede: fix out-of-bounds check for cqe->len_list[]9.8 CriticalKernelLinuxaccel/amdxdna: Fix iommu domain lifetime race during device removal8.8 HighKernelLinuxtracing/probes: Remove WARN_ON_ONCE from parse_btf_arg10.0 CriticalKernelLinuxdrm/xe/userptr: Hold notifier_lock for write on inject test path7.8 HighKernelLinuxHID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait()4.1 MediumKernelLinuxHID: core: Fix OOB read in hid_get_report for numbered reports8.8 HighKernelLinuxnetfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read9.1 CriticalKernelLinuxperf/x86/amd/lbr: Fix kernel address leakage4.8 MediumKernelLinuxbatman-adv: gw: acquire ethernet header only after skb realloc8.8 HighKernelLinuxbatman-adv: dat: acquire ARP hw source only after skb realloc9.8 CriticalKernelLinuxbatman-adv: dat: ensure accessible eth_hdr proto field8.1 HighKernelLinuxntfs3: fix out-of-bounds read in decompress_lznt7.8 HighKernelLinuxmtd: maps: vmu-flash: fix NULL pointer dereference in initialization5.1 MediumKernelLinuxInput: ims-pcu - only expose sysfs attributes on control interface8.4 HighKernelLinuxInput: ims-pcu - add response length checks5.2 MediumKernelLinuxInput: ims-pcu - fix potential infinite loop in CDC union descriptor parsing5.1 MediumKernelLinuxhwmon: (asus_atk0110) Check package count before accessing element8.4 HighKernelLinuxsamples/damon/mtier: fail early if address range parameters are invalidNo scoreKernelLinuxf2fs: fix listxattr handling of corrupted xattr entries7.8 HighKernelLinuxinet: frags: strip GSO state from fragments before reassembly8.6 HighKernelLinuxblock: stop the timeout timer when releasing a never added disk9.8 CriticalKernelLinuxmptcp: reclaim forward-allocated memory on RX path errors7.5 HighKernelLinuxmptcp: avoid combining some incoming suboptions9.8 CriticalKernelLinuxmptcp: options: reset DSS fields in case of unexpected size9.8 CriticalKernelLinuxmptcp: fastopen: only mark MPTFO subflows with SYN data9.4 CriticalKernelLinuxs390/qeth: validate user buffer length in SNMP and ARP query ioctls8.4 HighKernelLinuxASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses7.8 HighKernelLinuxdrm/shmem_helper: Check VMA boundaries for PMD mappings7.8 HighKernelLinuxASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeoutNo scoreKernelLinuxfbdev: bound mode sysfs output to the sysfs buffer7.8 HighKernelLinuxfbdev: clear fb_info->mode before deleting a videomode7.8 HighKernelLinuxfbdev: core: Fix pointer desynchronization in fb_io_read()7.3 HighKernelLinuxdrm/panthor: skip zero-sized firmware sectionsNo scoreKernelLinuxdrm/amdgpu: reject oversized IBs with per-ring packet limits8.8 HighKernelLinuxInput: cs40l50-vibra - validate custom data from user space7.8 HighKernelLinuxInput: focaltech - fix array out-of-bounds in focaltech_process_rel_packet8.4 HighKernelLinuxInput: iforce - validate input packet lengths5.2 MediumKernelLinuxInput: byd - synchronize timer deletion before freeing private data7.8 High- Show moreLoading…