Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxcuse: wait for pending RCU callbacks on module exitNo scoreKernelLinuxfuse: check for NULL root inode in fuse_fill_super_submount5.7 MediumKernelLinuxvsock: don't check the listener's sk_err in vsock_accept()6.8 MediumKernelLinuxplatform/x86: hp-bioscfg: fix password encoding bounds check7.7 HighKernelLinuxplatform/x86/amd/hsmp: Reject negative power cap writes in hwmonNo scoreKernelLinuxnet: add missing ref_tracker_dir_exit() to alloc_netdev_mqs()No scoreKernelLinuxntfs: fix kmap_local_page() usage in compressNo scoreKernelLinuxntfs: Fix index_root heap OOB write in ntfs_ir_to_ib()7.8 HighKernelLinuxntfs: reject unprivileged writes to reserved $LX* xattrs7.1 HighKernelLinuxntfs: serialize resident iomap reads with mrec_lock7.1 HighKernelLinuxvdpa_sim: fix cleanup after worker creation failureNo scoreKernelLinuxvirtio_balloon: quiesce balloon work before device shutdownNo scoreKernelLinuxvdpa/mlx5: fix wrong list iterated in add_direct_chain error pathNo scoreKernelLinuxvirtio: rtc: time out alarm requestsNo scoreKernelLinuxrtc: pcf8563: fix clock provider leak on unbindNo scoreKernelLinuxsmb: client: fix request buffer leak in smb2_new_read_req()5.7 MediumKernelLinuxirqchip/renesas-rzg2l: Fix loss of interrupt2.0 LowKernelLinuxirqchip/ast2700-intc: Avoid allocating in the irq_domain activate() callbackNo scoreKernelLinuxclk: visconti: Make sure clk_init_data is fully initializedNo scoreKernelLinuxirqchip/gic-v5: Clear per-CPU IRS data on teardownNo scoreKernelLinuxirqchip/gic-v5: Check get_logical_index() return value in MADT IAFFID parsing8.4 HighKernelLinuxALSA: ice1712: Fix the card leak at probe error with the auto-cleanup5.1 MediumKernelLinuxntfs: fix off-by-one page overflow in ntfs_decompress()7.8 HighKernelLinuxntfs: validate usa_ofs before preserving the update sequence number7.1 HighKernelLinuxALSA: mtpav: shut down output timer before card teardown9.8 CriticalKernelLinuxxsk: fix NULL pointer dereference in __xsk_rcv()6.7 MediumKernelLinuxnet: bridge: Reject descending VLAN tunnel ranges4.8 MediumKernelLinuxnetdevsim: update queue NAPI association on queue resetNo scoreKernelLinuxnet: qlcnic: validate unified ROM sections before loadingNo scoreKernelLinuxip6mr: do not clone dst in ip6mr_cache_report()7.8 HighKernelLinuxinetpeer: randomize RB-tree node comparison using SipHash9.4 CriticalKernelLinuxnet: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue6.8 MediumKernelLinuxnet/smc: free stashed qentry before overwrite in REQ_ADD_LINK to ADD_LINK transition8.2 HighKernelLinuxnet/smc: free pending qentry in smc_llc_flow_stop() before memset8.2 HighKernelLinuxnet: bridge: arp/nd proxy: fix reading neigh ha2.3 LowKernelLinuxvxlan: fix reading neigh ha2.0 LowKernelLinuxNFSv4.1: zero referring call lists before decoding9.8 CriticalKernelLinuxNFSv4.2: fix LAYOUTSTATS send buffer exhaustion7.5 HighKernelLinuxNFSv4/pnfs: key the data server cache on the NFS version7.5 HighKernelLinuxbnxt_en: Fix call to hardware monitoring event handlerNo scoreKernelLinuxptp: netc: fix period truncation and potential divide-by-zero in PEROUTNo scoreKernelLinuxnet/sched: account classifier filter allocations to memcg6.8 MediumKernelLinuxnet: sparx5: fix sleep in atomic context in MAC table access6.8 MediumKernelLinuxDrivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partitionNo scoreKernelLinuxfuse: invalidate the correct range after O_APPEND direct write4.8 MediumKernelLinuxfuse: Fix the condition to enable over-io-uring5.7 MediumKernelLinuxarm64: process: Fix context switching MTE store-only tag check2.0 LowKernelLinuxBluetooth: L2CAP: access chan->conn safely in get/setsockopt7.8 HighKernelLinuxBluetooth: L2CAP: reject accept queue add unless BT_LISTEN8.0 HighKernelLinuxBluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan8.0 High- Show moreLoading…