Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxfirmware: arm_scmi: Publish channel state before callbacksNo scoreKernelLinuxfirmware: arm_scmi: Unregister device notifier before IDR teardownNo scoreKernelLinuxfirmware: arm_scmi: Quiesce notifications before teardownNo scoreKernelLinuxfirmware: arm_scmi: Clean up channels on setup failureNo scoreKernelLinuxfirmware: arm_scmi: Free transport channel on IDR failureNo scoreKernelLinuxfirmware: arm_scmi: Avoid IDR updates while cleaning channelsNo scoreKernelLinuxfirmware: arm_scmi: Reject out of range DT protocol IDsNo scoreKernelLinuxfirmware: arm_scmi: Drop handle on protocol bind failuresNo scoreKernelLinuxfirmware: arm_scmi: Unwind TX receiver mailbox setup failureNo scoreKernelLinuxfirmware: arm_scmi: Unwind P2A receiver mailbox setup failureNo scoreKernelLinuxfirmware: arm_scmi: Fix SCMI device destroy lifetimesNo scoreKernelLinuxfirmware: arm_scmi: Fix transport device teardown lookupNo scoreKernelLinuxcxl/features: Reject Get Feature count larger than the output buffer7.8 HighKernelLinuxcxl/features: Reject Set Features output buffer smaller than the headerNo scoreKernelLinuxcxl/features: Clamp Get Feature output size to the remaining bufferNo scoreKernelLinuxdax/fsdev: clear vmemmap_shift when binding static pgmapNo scoreKernelLinuxdax/fsdev: clear pgmap ops and owner on unbindNo scoreKernelLinuxdax/fsdev: use __va(phys) for kaddr in direct_access7.8 HighKernelLinuxdax: read holder_ops once in dax_holder_notify_failure()No scoreKernelLinuxirqchip/renesas-irqc: Fix generic interrupt chip leak on removeNo scoreKernelLinuxmedia: bcm2835-unicam: Fix asc leaked in error/remove pathNo scoreKernelLinuxmedia: ipu6: Do not free aux device pdata after init7.8 HighKernelLinuxOPP: Fix cleanup orderingNo scoreKernelLinuxdrm/amd/display: Fix DM I2C teardown raceNo scoreKernelLinuxdrm/bridge: tc358767: clamp the reported AUX read size to the request7.0 HighKernelLinuxx86/mm/pat: Take cpa_lock around large-page collapseNo scoreKernelLinuxwifi: iwlwifi: fix counter type in iwl_fwrt_dump_error_logsNo scoreKernelLinuxwifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiserNo scoreKernelLinuxwifi: iwlwifi: mei: check SAP message length before reading it8.4 HighKernelLinuxwifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragmentsNo scoreKernelLinuxgpu: host1x: Avoid stack over-read in debug output helpersNo scoreKernelLinuxdrm/msm/adreno: fix use after free on error path in a6xx_gpu_init()No scoreKernelLinuxdrm/msm: Fix task_struct reference leak in recover_worker4.8 MediumKernelLinuxdrm/msm: Only fini scheduler after successful initNo scoreKernelLinuxscsi: ufs: core: Avoid possible memory reclaim deadlock in TX EQTR contextNo scoreKernelLinuxusb: gadget: f_uac1_legacy: remove broken string configfs attributesNo scoreKernelLinuxUDF symlink pathComponent header OOB read7.1 HighKernelLinuxuio: Fix stale info pointer in failed registration path7.0 HighKernelLinuxspeakup: keyhelp: guard letter_offsets possible out-of-range indexingNo scoreKernelLinuxmisc: bcm-vk: Use acquire/release for msgq_initedNo scoreKernelLinuxmisc: ad525x_dpot: use driver core groups for sysfs filesNo scoreKernelLinuxipack: ipoctal: fix UAF, null-ptr-deref, and use-after-free in cleanup on removeNo scoreKernelLinuxmtd: mtdswap: Avoid freeing registered blktrans device twiceNo scoreKernelLinuxmtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition()No scoreKernelLinuxdrm/v3d: Associate BOs with every job that accesses them2.0 LowKernelLinuxsoftware node: Fix software_node_get_reference_args() with index -17.0 HighKernelLinuxbpf: Reject arena frees below the arena base7.8 HighKernelLinuxbpf: Disallow interpreter fallback for arena-related insns5.6 MediumKernelLinuxbpf: Disallow interpreter fallback for gotox insn5.6 MediumKernelLinuxdmaengine: dw-edma: Terminate all descriptors without callbacks8.8 High- Show moreLoading…