Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxBluetooth: ISO: ensure no dangling hcon references in iso_conn8.8 HighKernelLinuxiomap: add a separate bio_set for iomap_split_ioend7.5 HighKernelLinuxmm: mglru: fix stale batch updates after memcg reparenting5.7 MediumKernelLinuxmm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk()7.8 HighKernelLinuxsctp: validate Adaptation Indication parameter length7.5 HighKernelLinuxALSA: pcm: wake linked drain waiters on unlink7.8 HighKernelLinuxigc: remove napi_synchronize() in igc_down()6.7 MediumKernelLinuxipvs: do not propagate one-packet flag to synced conns9.8 CriticalKernelLinuxio_uring: preserve task restrictions across exec8.4 HighKernelLinuxspi: spi-qpic-snand: write the feature value before executing SET_FEATURE8.4 HighKernelLinuxpower: supply: max17040: handle missing status supplier2.0 LowKernelLinuxs390/dasd: Fix undersized format-check buffer7.8 HighKernelLinuxs390/zcrypt: Fix wrong domain value verification with EP11 CPRBs7.8 HighKernelLinuxs390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()2.0 LowKernelLinuxcan: j1939: transport: j1939_session_fresh_new(): initialize receive buffer7.5 HighKernelLinuxcan: softing: fw_parse(): validate firmware record spans7.8 HighKernelLinuxdrm/amd/display: check if dml21_add_phantom_plane() is successful5.7 MediumKernelLinuxdrm/amd/display: use proper context for loggingNo scoreKernelLinuxdrm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE4.8 MediumKernelLinuxdrm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size7.8 HighKernelLinuxdrm/vmwgfx: enforce cursor size limits for MOB cursors6.8 MediumKernelLinuxdrm/vmwgfx: validate external BO copy bounds for both stride paths7.8 HighKernelLinuxKVM: arm64: vgic: Avoid double-deactivate of IRQs in the nested context5.6 MediumKernelLinuxdmaengine: idxd: fix double free of wq, engine, and group structs7.0 HighKernelLinuxerofs: ensure valid f_path for page cache sharing5.7 MediumKernelLinuxhwmon: (ltc4282) Fix reading the minimum alarm voltage7.8 HighKernelLinuxhwmon: (sht3x) Fix unaligned accesses5.7 MediumKernelLinuxnet: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller9.8 CriticalKernelLinuxidpf: bound interrupt-vector register fill to the allocated array9.3 CriticalKernelLinuxBluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks8.8 HighKernelLinuxscsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE7.5 HighKernelLinuxscsi: ufs: core: Initialize hba->rpmbs list in ufshcdNo scoreKernelLinuxtracing/mmiotrace: Add NULL check for mmio_trace_array in logging functionsNo scoreKernelLinuxriscv: drop __init from vec_check_unaligned_access_speed_all_cpusNo scoreKernelLinuxiommufd/viommu: Release the igroup lock on the vdevice_size error pathNo scoreKernelLinuxmm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE4.8 MediumKernelLinuxmm/util: don't read __page_2 for order-1 folios in snapshot_page()7.1 HighKernelLinuxKVM: s390: pci: Fix NULL dereference on AIBV allocation failure9.3 CriticalKernelLinuxBluetooth: SCO: give the socket its own sco_conn reference8.8 HighKernelLinuxriscv/mm: use physical alignment for vmemmap_start_pfn7.8 HighKernelLinuxvxlan: re-fetch eth header after route_shortcircuit()9.8 CriticalKernelLinuxi2c: amd-mp2: Unregister callback on adapter add failure7.8 HighKernelLinuxs390/dasd: Fix potential NULL pointer dereferenceNo scoreKernelLinuxi2c: imx: Fix slave registration race and error handling8.4 HighKernelLinuxdriver core: use READ_ONCE() for dev->driver in dev_has_sync_state()7.8 HighKernelLinuxDrivers: hv: vmbus: use generic driver_override infrastructureNo scoreKernelLinuxlibbpf: Reject non-exclusive metadata maps in the signed loader7.1 HighKernelLinuxntfs: validate resident attribute lists and harden the validator9.8 CriticalKernelLinuxntfs: bound the look-ahead attribute-list entry in ntfs_external_attr_find()9.8 CriticalKernelLinuxntfs: fix u16 truncation of restart-area length check8.8 High- Show moreLoading…