Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxkprobes: Protect kprobe_blacklist with RCU7.8 HighKernelLinuxmm/huge_memory: transfer the pmd dirty bit to the folio on zap5.7 MediumKernelLinuxmm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave()7.8 HighKernelLinuxmemcg: keep folio's objcg same as its node7.8 HighKernelLinuxperf/x86/intel: Fix kernel address leakages in LBR stack4.8 MediumKernelLinuxi2c: core: fix debugfs UAF on adapter removalNo scoreKernelLinuxi2c: mux: Fix channel node leak on adapter add failureNo scoreKernelLinuxarm64: Don't read GMID_EL1 when MTE is disabledNo scoreKernelLinuxALSA: harmony: initialize locks before requesting IRQ8.4 HighKernelLinuxALSA: pcm: Fix race between non-atomic ops and trigger-start7.8 HighKernelLinuxaccel/amdxdna: return early from a zero-length flush6.8 MediumKernelLinuxaccel/ethosu: check MMIO mapping errors in probeNo scoreKernelLinuxaccel/ethosu: fix job completion fence cleanup6.8 MediumKernelLinuxnvme-fabrics: fix DHCHAP secret leak on parse failureNo scoreKernelLinuxnvme-fc: fix double free of fabrics options when nvme_add_ctrl() fails7.5 HighKernelLinuxnvme-tcp: check the data direction of a C2HData PDU8.2 HighKernelLinuxnvme: add missing SRCU grace period in error path9.8 CriticalKernelLinuxnvme: skip the zoned limits update if the zone info query failed7.5 HighKernelLinuxnvmet-auth: Synchronize timeout work during SQ teardown9.8 CriticalKernelLinuxnvmet-tcp: fix out-of-bounds write when receiving an over-long PDU9.8 CriticalKernelLinuxnvmet-tcp: reject unsolicited H2CData PDUs7.5 HighKernelLinuxmm/migrate_device: avoid out-of-bounds writes for compound folios7.8 HighKernelLinuxmm/hugetlb_cma: fix null nodemask dereference in hugetlb_cma_alloc_frozen_folio5.7 MediumKernelLinuxnvdimm/btt: reject an arena whose nfree is below the lane count7.8 HighKernelLinuxparisc: eisa: Fix infinite loop when parsing invalid IRQ valueNo scoreKernelLinuxpowerpc/kexec_file: Fix null-ptr-def in extra size calculationNo scoreKernelLinuxpowerpc/kexec_file: Prevent kexec range truncationNo scoreKernelLinuxpowerpc/mm: fix wrong addr_pfn tracking in compound vmemmap population7.8 HighKernelLinuxs390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm()8.8 HighKernelLinuxs390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove8.8 HighKernelLinuxs390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULLNo scoreKernelLinuxs390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed8.8 HighKernelLinuxs390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects8.8 HighKernelLinuxs390/vfio-ap: Fix NULL deref in status_show() during queue probeNo scoreKernelLinuxmtd: afs: validate v2 image info bounds8.0 HighKernelLinuxmtd: mtdoops: free page bitmap when the backing MTD is removedNo scoreKernelLinuxmtd: rawnand: validate ONFI extended parameter page sections5.2 MediumKernelLinuxbatman-adv: fix stale receive device on merged fragments8.8 HighKernelLinuxbatman-adv: mcast: linearize skbuff for packet generation5.7 MediumKernelLinuxbatman-adv: dat: avoid unaligned fault in IP extraction6.0 MediumKernelLinuxbatman-adv: bla: fix freeing of claims on meshif deletion6.8 MediumKernelLinuxclk: meson: align gxbb_32k_clk_sel number of parents with actual count8.0 HighKernelLinuxASoC: cs35l33: drain threaded IRQ before runtime suspendNo scoreKernelLinuxASoC: cs35l34: drain threaded IRQ before runtime suspendNo scoreKernelLinuxASoC: hdac_hda: Fix hlink refcount leak on component registration failureNo scoreKernelLinuxASoC: loongson: Fix error handling in ACPI property parsing8.4 HighKernelLinuxiio: buffer: Fix potential use-after-free in anonymous buffer release7.8 HighKernelLinuxiio: buffer: Make IIO DMA fence release RCU-safe7.8 HighKernelLinuxiio: buffer: Tie IIO dma fence lock lifetime to the fence7.8 HighKernelLinuxiio: chemical: atlas-sensor: fix PM reference leak in buffer postenableNo score- Show moreLoading…