Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxBluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path4.8 MediumKernelLinuxBluetooth: btnxpuart: Validate the FW dump header length7.1 HighKernelLinuxBluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop7.1 HighKernelLinuxBluetooth: do not leak an hci_conn when a second LE connect is rejected6.8 MediumKernelLinuxxsk: honor XDP_TX_METADATA in zero-copy path4.6 MediumKernelLinuxocteontx2-af: fix NULL deref in NIX TM tree debugfs read pathNo scoreKernelLinuxocteontx2-vf: fix workqueue and netdev race in probe/removeNo scoreKernelLinuxnet/sched: act_ife: Only operate on Ethernet frames6.8 MediumKernelLinuxnet: mana: Cap MSI-X vectors to the device MSI-X table sizeNo scoreKernelLinuxnet/rds: use wq_has_sleeper() in rds_cong_map_updated()2.0 LowKernelLinuxocteontx2-pf: fix NULL deref of af_xdp_zc_qidx on rep setupNo scoreKernelLinuxocteontx2-af: fix cn20k mailbox lifetime on repeated rvu_mbox_init()No scoreKernelLinuxnet/sched: act_skbmod: fix length calculations and avoid invalid header warnings4.8 MediumKernelLinuxnet: fix a resource leak in copy_net_ns() error handling path5.7 MediumKernelLinuxnet/sched: fq: add overflow bounds to quantum and initial quantum6.8 MediumKernelLinuxnet/sched: fq_codel: clamp default quantum and mtu6.8 MediumKernelLinuxnet/sched: fq_pie: clamp default quantum to avoid signed overflow6.8 MediumKernelLinuxnet/sched: hhf: clamp quantum before hhf_change() to avoid overflow6.8 MediumKernelLinuxnet/sched: sfq: clamp quantum to avoid signed overflow soft lockup6.8 MediumKernelLinuxnet/sched: sch_teql: restore skb->dev on the slave failure path7.8 HighKernelLinuxtpm: st33zp24: Return zero on status read failureNo scoreKernelLinuxcrypto: acomp - allocate async request context when cloning7.8 HighKernelLinuxASoC: dapm: Fix off-by-one check on the second enum channel0.0 NoneKernelLinuxlibceph: validate banner payload length7.5 HighKernelLinuxsamples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modifyNo scoreKernelLinuxnet/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure6.7 MediumKernelLinuxdrm/xe: Reject page faults from non-fault-mode scratch VMs6.8 MediumKernelLinuxvirtio-net: Ensure that TCP packets don't overflow gso_segs6.9 MediumKernelLinuxnetfilter: nf_tables: move hardware offload step after building the chain blob7.1 HighKernelLinuxnetfilter: nf_tables: skip double clone set expressions on element insert6.8 MediumKernelLinuxALSA: control: Don't add invalid kcontrols to LED layerNo scoreKernelLinuxnet: stmmac: restore NET_IP_ALIGN in the RX DMA offset7.5 HighKernelLinuxnet/sched: bound qdisc_pkt_len to prevent qdisc soft lockup6.8 MediumKernelLinuxslip: remove slip_hangup() to fix use-after-free in slip_receive_buf()7.8 HighKernelLinuxnet: fec: only stop PTP if it was initializedNo scoreKernelLinuxusb: atm: usbatm: fix invalid ci_range initialization0.0 NoneKernelLinuxtcp: fix corruption of urgent data on multi-segment retransmit6.3 MediumKernelLinuxnet/sched: sch_htb: limit htb_classify inner-class filter hops6.8 MediumKernelLinuxtcp: reject non zerocopy devmem tx7.8 HighKernelLinuxnet: skbuff: don't skb_tx_error() the source skb in skb_zerocopy()9.3 CriticalKernelLinuxfs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()9.8 CriticalKernelLinuxdrm/xe: Don't hand out the flat CCS storage as usable VRAM7.8 HighKernelLinuxmm/page_alloc: don't spin_trylock() in NMI on UP7.8 HighKernelLinuxUSB: gadget: ffs: fix mm lifetime handling7.8 HighKernelLinuxusb: gadget: f_fs: Fix Use-After-Free in AIO error path7.8 HighKernelLinuxzram: fix slot lock bit position on big-endian 64-bit7.8 HighKernelLinuxceph: properly decrypt filenames in vmalloc() buffers9.8 CriticalKernelLinuxHID: sony: clean up device list on probe failure8.8 HighKernelLinuxKVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped6.7 MediumKernelLinuxNFSD: Guard admin state-revocation walks with NFSD_NET_UP6.7 Medium- Show moreLoading…