Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxiommu/vt-d: Flush context cache with correct SID when tearing down aliases8.8 HighKernelLinuxmedia: amd: isp4: release partial allocations in isp4if_alloc_fw_gpumem()5.7 MediumKernelLinuxmedia: amd: isp4: fix self-deadlock in isp4sd_pwron_and_init() error path5.7 MediumKernelLinuxnetfilter: nft_ct: move custom expectation support to helper7.8 HighKernelLinuxNFSD: Release the export reference when reaping open stateids7.1 HighKernelLinuxsunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE9.8 CriticalKernelLinuxNFS: Return a delegation the client fails to record7.5 HighKernelLinuxnvme-pci: release descriptor pools on probe failureNo scoreKernelLinuxamt: Don't support cross-netns setup.6.8 MediumKernelLinuxapparmor: fix unconfined user namespace restriction forced stack8.4 HighKernelLinuxnvmet: fix heap out-of-bounds read in nvmet_auth_negotiate()9.1 CriticalKernelLinuxnvme-apple: Destroy the admin queue on removal7.4 HighKernelLinuxnvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns()7.5 HighKernelLinuxnvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()7.8 HighKernelLinuxnfc: llcp: avoid userspace overflow on invalid optlen0.0 NoneKernelLinuxnfc: llcp: read llcp_sock->local under the socket lock in getsockopt7.8 HighKernelLinuxnfc: nci: fix double completion race in nci_data_exchange_complete7.5 HighKernelLinuxnfc: llcp: bound SNL TLV parsing to the skb and add length checks7.1 HighKernelLinuxnfc: pn533: hold a reference to the request skb during send_frame7.1 HighKernelLinuxnfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsingNo scoreKernelLinuxALSA: seq: Don't leak the extension cell pointer in the bounce payload4.8 MediumKernelLinuxRDMA/cxgb4: Free debugfs on registration failureNo scoreKernelLinuxRDMA/cma: Fix WARNING in res_to_rt4.8 MediumKernelLinuxbpf: Compare iterator types during state pruning7.8 HighKernelLinuxubi: Fix rollback for explicit UBI device numbersNo scoreKernelLinuxmtd: ubi: Release device reference on busy detach4.6 MediumKernelLinuxASoC: xilinx: formatter_pcm: fix stream_data leak on open error9.8 CriticalKernelLinuxfirewire: core: fix memory leak in error path of build_tree()5.1 MediumKernelLinuxarm64/efi: Avoid voluntary preemption with efi_mm installed5.7 MediumKernelLinuxbpf, s390: Clear fetch destination on faulting arena atomic4.6 MediumKernelLinuxbpf: Fix UAF in bpf_trampoline_multi_attach_free on update failure7.8 HighKernelLinuxs390/debug: Fix deadlock during unregisterNo scoreKernelLinuxclocksource/drivers/samsung_pwm: Switch to raw_spinlock_t typeNo scoreKernelLinuxALSA: seq: midi: Serialize input teardown with event_input7.8 HighKernelLinuxnvmet: fix max_qid race between configfs and controller allocationNo scoreKernelLinuxocfs2: validate orphan slot during inode read7.8 HighKernelLinuxocfs2: validate DIO orphan slot during inode read7.8 HighKernelLinuxSquashfs: check block offset is not negative7.1 HighKernelLinuxscsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffersNo scoreKernelLinuxnet: page_pool: fix UAF in __page_pool_release_netmem_dma on xa_cmpxchg race7.1 HighKernelLinuxfs/ntfs3: fix integer overflow in MFT cluster validation7.1 HighKernelLinuxfs/ntfs3: reject out-of-range evcn in mi_enum_attr()7.8 HighKernelLinuxALSA: core: Fix use-after-free in snd_card_do_free()No scoreKernelLinuxHID: haptic: don't write an uninitialized value to unhandled usages4.8 MediumKernelLinuxASoC: SOF: validate topology volume range before allocationNo scoreKernelLinuxriscv, bpf: Fix missing sign-ext for signed 1-byte and 2-byte kfunc argsNo scoreKernelLinuxACPI: scan: fix bus ID cleanup on device_add() failuresNo scoreKernelLinuxmailbox: qcom-cpucp: fix PREEMPT_RT self-deadlock in IRQ handler5.7 MediumKernelLinuxmailbox: qcom-cpucp: handle NULL data in send_data callbackNo scoreKernelLinuxmailbox: riscv-sbi-mpxy: validate RPMI notification lengths8.4 High- Show moreLoading…