Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxnvmet: pci-epf: put CQ ref on create_cq mapping failure5.1 MediumKernelLinuxxfs: don't livelock in scrub on a circular unlinked listNo scoreKernelLinuxBluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept6.0 MediumKernelLinuxiommu/tegra241-cmdqv: Fix CMD_SYNC use-after-free on teardownNo scoreKernelLinuxiommu/iommufd: Fix NULL pointer deref in iommufd_ioas_change_process when racing with iopt_map_file_pages5.7 MediumKernelLinuxALSA: FCP: Use a private URB for the notification endpointNo scoreKernelLinuxALSA: scarlett2: Use a private URB for the notification endpoint5.1 MediumKernelLinuxrndis_host: add overflow check in rndis_rx_fixup()5.2 MediumKernelLinuxnvmet: fix NULL pointer dereference in nvmet_execute_identify_nslist()8.7 HighKernelLinuxALSA: dummy: Check card index validity at probeNo scoreKernelLinuxIn the Linux kernel, the following vulnerability has been resolved: io_uring/cmd: fix iovec leak...No scoreKernelLinuxio_uring/rsrc: fix folio size overflow in io_vec_fill_bvec()7.3 HighKernelLinuxocfs2: fix missing metadata reservation for large xattrs5.7 MediumKernelLinuxext4: stop retrying saturated xattr cache entries7.1 HighKernelLinuxnilfs2: reject invalid block index in GC ioctlNo scoreKernelLinuxext4: don't enable DAX on new encrypted files4.8 MediumKernelLinuxxfs: validate attr entry pointer before field access5.3 MediumKernelLinuxxfs: restore nofs context unconditionally in xfs_trans_rollNo scoreKernelLinuxnfc: digital: clamp SENSF_RES length to the destination buffer7.7 HighKernelLinuxnfc: fdp: bound the device-reported read length and fix an skb leak5.4 MediumKernelLinuxnfc: microread: validate target discovery payload lengths6.9 MediumKernelLinuxnfc: llcp: bound the connect_sn TLV walk to the skb7.1 HighKernelLinuxnfc: llcp: fix OOB read and u8 offset wrap in TLV parsers7.1 HighKernelLinuxnfc: llcp: reject PDUs shorter than the LLCP header7.1 HighKernelLinuxnfc: pn533: purge fragmented skbs during cleanup1.0 LowKernelLinuxnfc: nci: add data_len bound checks to activation parameter extractors6.0 MediumKernelLinuxnfc: nci: fix out-of-bounds write in nci_target_auto_activated()7.0 HighKernelLinuxnfc: nci: fix uninit-value in the RF discover/activated NTF handlersNo scoreKernelLinuxipv4: reject undersized MTUs in ip_do_fragment()6.8 MediumKernelLinuxipv6: fix use-after-free in ip6_finish_output2()8.4 HighKernelLinuxnvmet-auth: zero the AUTH_RECEIVE response buffer6.9 MediumKernelLinuxnvmet-fc: fix invalid free in LS IOD error pathNo scoreKernelLinuxnvmet-tcp: bound SGL data length before allocating command buffers8.7 HighKernelLinuxnvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations8.7 HighKernelLinuxnvmet: pci-epf: fix use-after-free in nvmet_pci_epf_exec_iod_work()4.1 MediumKernelLinuxfbdev: Wrap user-invoked calls to fb_set_var() in helper9.8 CriticalKernelLinuxfbdev: serialize mode sysfs access with lock_fb_info()No scoreKernelLinuxmptcp: pm: fix memory leak from alloc-during-teardown race5.7 MediumKernelLinuxHID: magicmouse: prevent unbounded recursion in magicmouse_raw_event()5.1 MediumKernelLinuxHID: magicmouse: do not keep a stale msc->input if no input is claimed5.4 MediumKernelLinuxHID: core: fix OOB read of field->usage in hid_set_field()2.4 LowKernelLinuxHID: pidff: fix OOB write when hid->inputs is empty7.0 HighKernelLinuxnet/ionic: avoid OOB TX partner lookup for hwstamp RXQ8.4 HighKernelLinuxfutex/pi: Reject cross-mm private futex owners7.3 HighKernelLinuxfutex/pi: Plug private futex exec() race7.3 HighKernelLinuxfutex: Fix race in futex_pivot_pending() during private hash resize5.7 MediumKernelLinuxfutex: Fix race on the initial mm->futex.phash.ref allocation7.3 HighKernelLinuxHID: asus: fix missing hid_is_usb() checkNo scoreKernelLinuxHID: huawei: fix missing hid_is_usb() check6.8 MediumKernelLinuxHID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()5.3 Medium- Show moreLoading…