Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxsmb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions7.8 HighKernelLinuxsmb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T29.8 CriticalKernelLinuxsmb: client: clear ce->tgthint in free_tgts()9.8 CriticalKernelLinuxksmbd: only rebind the reopened file's own oplock on durable reconnect9.8 CriticalKernelLinuxsmb: client: fix ALIGN() overflow in symlink_data() error context loop9.1 CriticalKernelLinuxsmb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()9.8 CriticalKernelLinuxsmb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr()8.2 HighKernelLinuxsmb: client: reject a tree connect response whose byte count is too small9.1 CriticalKernelLinuxsmb: client: restore the data_offset bound in is_valid_oplock_break()9.1 CriticalKernelLinuxHID: corsair-void: Check size of status and firmware events before reading them5.2 MediumKernelLinuxHID: picolcd: clamp eeprom debugfs read to bytes actually receivedNo scoreKernelLinuxHID: roccat: free buffered reports when destroying device2.4 LowKernelLinuxHID: sensor: custom: Fix field sysfs group cleanup on failure8.8 HighKernelLinuxHID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind5.4 MediumKernelLinuxHID: universal-pidff: stop the device when force-feedback init fails7.8 HighKernelLinuxHID: mcp2221: stop device IO before hid_hw_stop5.4 MediumKernelLinuxHID: mcp2221: clear rxbuf after I2C/SMBus transfer completes7.8 HighKernelLinuxHID: mcp2221: validate report size in mcp2221_raw_event()2.4 LowKernelLinuxHID: intel-thc-hid: intel-quickspi: validate report size before copy7.8 HighKernelLinuxHID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer7.8 HighKernelLinuxeventfs: Initialize ei->children and ei->list in init_ei()9.8 CriticalKernelLinuxfs/ntfs3: validate dirty page table on log replay7.8 HighKernelLinuxfs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame()7.5 HighKernelLinuxfs/ntfs3: bound page_lcns[] index by the log record8.4 HighKernelLinuxntfs: bound the free-cluster bitmap scan to the volume9.8 CriticalKernelLinuxntfs: reject invalid empty mapping pairs9.8 CriticalKernelLinuxntfs: reject invalid MFT LCNs from boot sector9.8 CriticalKernelLinuxntfs: validate non-resident attribute offsets9.8 CriticalKernelLinuxntfs: verify run length exceeding volume boundary9.8 CriticalKernelLinuxecryptfs: hold msg ctx list lock when cleaning daemon queue7.8 HighKernelLinuxecryptfs: pass packet set buffer size to parser7.1 HighKernelLinuxecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet7.8 HighKernelLinuxecryptfs: reject too-small tag 70 packets7.8 HighKernelLinuxecryptfs: release message context on send failure7.8 HighKernelLinuxefivarfs: Rate limit statfs() handler6.8 MediumKernelLinuxIn the Linux kernel, the following vulnerability has been resolved: entry: Fix seccomp bypass...8.4 HighKernelLinuxerofs: skip sufficiently large global buffers when resizing7.8 HighKernelLinuxext2: Fix lost inode updates for IS_SYNC inodes8.8 HighKernelLinuxfanotify: fix use-after-free of file range info7.8 HighKernelLinuxfbdev: omapfb: panel-dsi-cm: initialize lock before registering display8.4 HighKernelLinuxfbdev: ssd1307fb: defer I2C transfers from damage callbacks6.8 MediumKernelLinuxfbdev: uvesafb: unregister connector callback on init failure7.8 HighKernelLinuxforcedeth: fix off-by-one when saving/restoring non-PCI config space7.1 HighKernelLinuxfsnotify: Fix stale object mask after concurrent mark updates2.0 LowKernelLinuxhsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device7.8 HighKernelLinuxhugetlb: only adjust reservation during unmapping if mapcount is 07.1 HighKernelLinuxaccel/rocket: fix NULL dereference and integer overflow in rocket_job_push()5.7 MediumKernelLinuxaccel/rocket: initialize job domain before cleanup paths6.8 MediumKernelLinuxaccel/rocket: Fix error path handling in rocket_job_run()5.7 MediumKernelLinuxacpi/apei/ghes: Use raw_spinlock_t for CXL CPER work locksNo score- Show moreLoading…