Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxSUNRPC: Reject krb5 v2 wrap tokens with oversized ec field9.8 CriticalKernelLinuxSUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v29.1 CriticalKernelLinuxSUNRPC: wait for in-flight client TLS handshake callback9.8 CriticalKernelLinuxsvcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id8.1 HighKernelLinuxsvcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails8.8 HighKernelLinuxsvcrdma: Fix offset arithmetic in read_chunk_range9.8 CriticalKernelLinuxsvcrdma: Fix pcl_for_each_segment for empty chunks9.1 CriticalKernelLinuxsvcrdma: Reject connection when transport allocation fails8.2 HighKernelLinuxsvcrdma: Reject inline replies that overflow the pull-up buffer9.8 CriticalKernelLinuxsvcrdma: Reject oversized Read segments at decode time8.7 HighKernelLinuxsvcrdma: Reject Read lists that exceed the page budget7.5 HighKernelLinuxsvcrdma: Use svc_xprt_put to free listener on create failure4.6 MediumKernelLinuxsvcrdma: Validate Read chunk positions before reconstruction9.8 CriticalKernelLinuxudf: reject VAT indexes equal to the entry count7.1 HighKernelLinuxwifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets8.1 HighKernelLinuxwifi: mt76: mt7925: cancel pending mlo_pm_work7.8 HighKernelLinuxmedia: staging/ipu7: fix async notifier UAF on probe error path7.8 HighKernelLinuxsched/core: Handle pick_task() releasing the rq lock7.3 HighKernelLinuxsched/core: Make core-sched flips wait for in-flight selections7.8 HighKernelLinuxsched_ext: Replace SCX_RQ_BAL_KEEP with a dispatch verdict return5.7 MediumKernelLinuxsched_ext: Fix this_rq() assumptions in dispatch kfuncs5.7 MediumKernelLinuxsched_ext: Fix rq->core_pick corruption under core scheduling5.7 MediumKernelLinuxsched_ext: Don't BUG_ON a destroyed DSQ in process_deferred_reenq_usersNo scoreKernelLinuxscsi: core: Fill in DMA padding bytes in scsi_alloc_sgtables()0.0 NoneKernelLinuxscsi: fnic: Use GFP_ATOMIC for VLAN alloc under spinlock6.0 MediumKernelLinuxRISC-V: KVM: Fix PMU event info array size overflow8.8 HighKernelLinuxremoteproc: scp: Fix device reference leak on failed lookupNo scoreKernelLinuxqede: Fix NULL pointer dereference in TPA fragment processing7.5 HighKernelLinuxRDMA/cxgb4: Cancel reg_work before freeing device on remove7.8 HighKernelLinuxRDMA/ionic: Embed counter driver data in rdma_counter allocation6.7 MediumKernelLinuxRDMA/ucma: Lock the handler in ucma_set_ib_path()7.8 HighKernelLinuxRDMA/ucma: Lock the handler in ucma_write_cm_event()7.8 HighKernelLinuxRDMA/uverbs: Add UVERBS_ATTR_UHW to UVERBS_METHOD_REG_MR6.8 MediumKernelLinuxRDMA/uverbs: Guard legacy bundles without method_elm5.7 MediumKernelLinuxregulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer8.4 HighKernelLinuxring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page()7.8 HighKernelLinuxring-buffer: Free cpu_buffer::free_page with subbuf_orderNo scoreKernelLinuxring-buffer: Hold cpu_buffer::lock when resizing a subbuf7.8 HighKernelLinuxring-buffer: Make cpu_buffer::free_page a buffer_data_read_page7.8 HighKernelLinuxring-buffer: Stop remote reader update when page swap fails7.8 HighKernelLinuxorangefs: fix double-free of trailer_buf on readdir copy failureNo scoreKernelLinuxorangefs: skip leading spaces before parsing client debug masks7.8 HighKernelLinuxocfs2: always run deallocs on copy-on-write completion6.8 MediumKernelLinuxocfs2: bound namelen in dlm_migrate_request_handler9.8 CriticalKernelLinuxocfs2: validate lengths in dlm_mig_lockres_handler9.8 CriticalKernelLinuxocfs2: validate rl_used against rl_count in refcount block validator8.8 HighKernelLinuxocfs2: validate directory-index entry counts when reading metadata9.8 CriticalKernelLinuxocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin()No scoreKernelLinuxocfs2: fix readdir position truncation on 32-bit kernels2.0 LowKernelLinuxopenrisc: fix arbitrary kernel memory access via or1k_atomic syscall7.8 High- Show moreLoading…