Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxACPI: APEI: GHES: fix ARM section length accounting after header8.4 HighKernelLinuxACPI: pfr_update: fix stack buffer overflow in query_capability()7.8 HighKernelLinuxata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes8.2 HighKernelLinuxauxdisplay: charlcd: cancel backlight work on registration failure7.8 HighKernelLinuxblock: validate user space vectors during extraction7.8 HighKernelLinuxBluetooth: eir: Fix OOB read in eir_get_service_data()8.1 HighKernelLinuxbnx2x: fix double free in bnx2x_init_firmware() error path7.1 HighKernelLinuxbpf, x86: Fix per-CPU address resolution into an extended register7.8 HighKernelLinuxbpf: Disable preemption in __bpf_get_stack7.8 HighKernelLinuxbpf: Harden bloom filter sizing and indexing on 32-bit kernels7.8 HighKernelLinuxdm-io: clone the source bio instead of copying its biovec6.8 MediumKernelLinuxdm-io: report non-retryable errors separatedly5.8 MediumKernelLinuxdm-era: fix shadowed superblock leak on take-snap failureNo scoreKernelLinuxdm raid1: reserve space for NUL-terminator in build_constructor_string()No scoreKernelLinuxdm array: validate array block headers on read7.8 HighKernelLinuxdm array: reject an array block whose value size is not the caller's7.8 HighKernelLinuxcpufreq: apple-soc: Fix OPP table cleanupNo scoreKernelLinuxcxl/features: bound fwctl command payload to the input buffer7.1 HighKernelLinuxcxl/mce: Make the MCE notifier per-region7.8 HighKernelLinuxBluetooth: RFCOMM: serialize security confirmation handling8.8 HighKernelLinuxkho: fix size calculation in kho_preserved_memory_reserve()No scoreKernelLinuxjbd2: bound shrinker scans by examined checkpoint buffers5.7 MediumKernelLinuxjbd2: check need_resched() when skipping busy checkpoint buffers5.7 MediumKernelLinuxipip: fix skb leak in collect_md mode when metadata_dst allocation fails8.2 HighKernelLinuxip: orphan prefetched skbs before multicast forwarding7.8 HighKernelLinuxip6_tunnel: use skb_cow_head() in ip6_tnl_xmit()7.8 HighKernelLinuxip6_gre: fix hardware header length for NBMA tunnels7.8 HighKernelLinuxipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv()7.5 HighKernelLinuxlandlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation8.4 HighKernelLinuxlibnvdimm/labels: Prevent integer overflow in __nd_label_validate()7.8 HighKernelLinuxmd/raid10: fix still_degraded being inverted in raid10_sync_request()9.8 CriticalKernelLinuxmd: do overflow check for sb->bblog_shift in super_1_load()7.8 HighKernelLinuxmodule: validate string table section typesNo scoreKernelLinuxmpls: reload header after pskb_may_pull()9.8 CriticalKernelLinuxmptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction8.2 HighKernelLinuxnouveau/gem: reserve the bo in the info ioctl around the vma lookup7.8 HighKernelLinuxparams: fix charp corruption on allocation failureNo scoreKernelLinuxSUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow9.8 CriticalKernelLinuxSUNRPC: svcauth_gss: enforce krb5 token minimum length9.8 CriticalKernelLinuxsunrpc: route to a populated pool in svc_pool_for_cpu()7.5 HighKernelLinuxSUNRPC: always drain cache_cleaner before destroying a cache_detail7.8 HighKernelLinuxSUNRPC: Check svc pool percpu counter allocation8.1 HighKernelLinuxSUNRPC: close backchannel before destroying callback service9.8 CriticalKernelLinuxsunrpc: defer rq_argp and rq_resp free until after RCU grace period7.8 HighKernelLinuxSUNRPC: fix gssx_dec_option_array error path bugs7.5 HighKernelLinuxsunrpc: fix use-after-free in __rpc_clnt_handle_event and __rpc_clnt_remove_pipedirNo scoreKernelLinuxSUNRPC: harden gss_krb5_unwrap_v2 against short tokens9.8 CriticalKernelLinuxSUNRPC: harden gss_unwrap_resp_priv length checks9.8 CriticalKernelLinuxsunrpc: init gssp_lock before publishing proc entry7.8 HighKernelLinuxSUNRPC: reject duplicate CREDS_VALUE optionsNo score- Show moreLoading…