Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxNFSD: Prevent client use-after-free during export state revocation9.8 CriticalKernelLinuxNFSD: Prevent client use-after-free during close_lru reaping9.8 CriticalKernelLinuxNFSD: Prevent client use-after-free during blocked-lock reaping9.8 CriticalKernelLinuxdrm/amd/display: fix division by zero in get_estimated_bw()5.1 MediumKernelLinuxusb: image: mdc800: change kmalloc() to kzalloc()2.4 LowKernelLinuxALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()7.0 HighKernelLinuxmedia: usbtv: keep device alive while ALSA card exists7.8 HighKernelLinuxusb-storage: ene_ub6250: fix race between scan work and probe4.3 MediumKernelLinuxusb: dwc3: clear forceRM when issuing EndTransfer7.8 HighKernelLinuxusb: storage: realtek_cr: fix use-after-free on disconnect5.4 MediumKernelLinuxusb: typec: hd3ss3220: track VBUS enable state per consumerNo scoreKernelLinuxusb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stop7.8 HighKernelLinuxusb: typec: qcom-pmic: cancel reset_work on stop7.8 HighKernelLinuxusb: typec: ucsi: displayport: Fix OOB altmode array index7.7 HighKernelLinuxusb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs5.1 MediumKernelLinuxusb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()No scoreKernelLinuxusb: gadget: f_midi2: fix use-after-free in string attribute show path7.8 HighKernelLinuxusb: gadget: f_midi: initialize work in f_midi_alloc()No scoreKernelLinuxUSB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()No scoreKernelLinuxusb: gadget: fix null pointer dereference in usb_put_function_instance()No scoreKernelLinuxstaging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr()8.8 HighKernelLinuxstaging: rtl8723bs: fix OOB read in rtw_action_frame_parse()7.1 HighKernelLinuxstaging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie()7.1 HighKernelLinuxxhci: fix lost bounce buffers on TDs spanning several ring segments2.0 LowKernelLinuxtracing: Have show_event_filters/triggers files take trace array ref7.8 HighKernelLinuxtracing: Take trace_array reference when opening options file7.8 HighKernelLinuxspi: Fix DMA mapping ownership on partial map failure9.8 CriticalKernelLinuxscsi: target: iscsi: Reserve a terminator byte for the login payload9.1 CriticalKernelLinuxscsi: bsg: Cap io_uring sense copy to max_response_len7.8 HighKernelLinuxscsi: bsg: Fix TOCTOU in io_uring passthrough command setup7.8 HighKernelLinuxscsi: megaraid_sas: Limit NVMe request size to the PRP chain frame7.8 HighKernelLinuxscsi: pm8001: Use rollback index when freeing MSI-X vectors7.8 HighKernelLinuxsamples/damon/mtier: handle damon_stop() failureNo scoreKernelLinuxsamples/damon/wsse: handle damon_start() failureNo scoreKernelLinuxmm/damon/core: handle region split failure in apply_min_nr_regions()7.3 HighKernelLinuxfutex: Prevent rcuwait use-after-free during requeue PI7.8 HighKernelLinuxftrace: Take trace_array reference before accessing its ftrace_ops7.8 HighKernelLinuxHID: bpf: serialize device reference release in struct_ops destroy path7.8 HighKernelLinuxHID: rmi: fix OOB access with undersized RMI reports8.8 HighKernelLinuxHID: wacom: validate report length in wacom_intuos_pro2_bt_irq8.1 HighKernelLinuxdm: fix race when loading and unloading a table7.8 HighKernelLinuxdm: fix resume-vs-remove race7.8 HighKernelLinuxdma-buf: dma-heap: don't publish fd before copy_to_user() succeedsNo scoreKernelLinuxdma-direct: return struct page from dma_direct_alloc_from_pool()8.8 HighKernelLinuxdmaengine: fsl-edma: tracing: no ptr dereference during log output7.8 HighKernelLinuxdmaengine: dw-edma: Initialize IRQ data before requesting IRQsNo scoreKernelLinuxcpuidle: dt_idle_genpd: kfree() the original name allocation8.4 HighKernelLinuxbpf: Fix infinite loop in pcpu_freelist push with one possible CPU5.6 MediumKernelLinuxceph: lock mutex in ceph_mds_check_access()9.8 CriticalKernelLinuxima: Check for ERR_PTR from dentry_path() in validate_hash_algo()No score- Show moreLoading…