Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxmedia: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity7.8 HighKernelLinuxmedia: v4l2-ctrls: validate HEVC tile counts7.8 HighKernelLinuxmedia: v4l2-ctrls: validate AV1 tile counts7.8 HighKernelLinuxbnxt_en: Don't free the live ring's TPA state on queue restart failureNo scoreKernelLinuxbnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset()8.1 HighKernelLinuxbnxt_en: Propagate RX ring init failures in bnxt_init_nic()No scoreKernelLinuxbnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc()No scoreKernelLinuxbnxt_en: Bound SW TPA IDs to prevent crashes8.1 HighKernelLinuxbnxt_en: Prevent queue stop with deferred completionsNo scoreKernelLinuxmptcp: syncookies: remember the request backup flagNo scoreKernelLinuxmptcp: prevent race between disconnect() and rtx5.8 MediumKernelLinuxmptcp: pm: kernel: drop pending ADD_ADDR when removing ID04.8 MediumKernelLinuxsmb: client: reject short READ responses in CIFSSMBRead()7.1 HighKernelLinuxsmb: client: reject userspace cifs.idmap descriptions8.5 HighKernelLinuxsmb: client: reject out-of-bounds DataOffset in CIFSSMBRead()6.0 MediumKernelLinuxsmb: client: pin DFS superblock in iterator callback7.5 HighKernelLinuxsmb: client: honor forceuid/forcegid when mapping SIDs to uid/gid5.3 MediumKernelLinuxsmb: client: fix one-byte OOB read in smb2_parse_native_symlink()No scoreKernelLinuxsmb: client: fail DACL rewrite when the new DACL exceeds 64K2.0 LowKernelLinuxsmb: client: fix cifsFileInfo reference leak in deferred close5.7 MediumKernelLinuxsmb: client: avoid leaking refcount in cifs_queue_oplock_break()7.5 HighKernelLinuxsmb: client: avoid leaking refcount when cifs_sb_tlink() failsNo scoreKernelLinuxsmb: client: fix heap overflow in DACL owner/group rewrite8.8 HighKernelLinuxsmb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr()2.3 LowKernelLinuxxfs: lock the healthmon when inserting unmount eventNo scoreKernelLinuxxfs: initialise error in xfs_defer_finish_one()No scoreKernelLinuxxfs: initialise args->total for parent pointer updatesNo scoreKernelLinuxxfs: fix unit conversions in per_binval computationNo scoreKernelLinuxxfs: fix under-reservation of blocks when repairing sf directoriesNo scoreKernelLinuxxfs: fix the rtrmap and rtrefcount _maxlevels_ondisk functions7.8 HighKernelLinuxxfs: fix exchange-range reflink flag clearing issue with INO1_WRITTENNo scoreKernelLinuxxfs: don't spin forever on zero-length dirents when salvaging themNo scoreKernelLinuxxfs: don't leak new_bp if xfs_btree_bload_drop_buf failsNo scoreKernelLinuxxfs: don't leak dqacct if rhashtable insertion failsNo scoreKernelLinuxxfs: destroy seen inode bitmap when we fail to add a dirpathNo scoreKernelLinuxxfs: bail out on bitmap errors in xrep_agfl_fillNo scoreKernelLinuxwifi: ath9k_htc: don't store usb_device_idNo scoreKernelLinuxnet: usb: pegasus: don't rely on id table pointer arithmeticNo scoreKernelLinuxusb: xusbatm: don't rely on id table pointer arithmeticNo scoreKernelLinuxhwmon: (asus_rog_ryujin) Validate HID report lengthsNo scoreKernelLinuxscsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap lockingNo scoreKernelLinuxscsi: qla2xxx: Fix use-after-free of qpair work on queue teardown7.5 HighKernelLinuxscsi: qla2xxx: Bound VP index against VP_CTRL IOCB bitmap sizeNo scoreKernelLinuxf2fs: accurately adjust free_sections during free_segment_rangeNo scoreKernelLinuxx86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAFNo scoreKernelLinuxscsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error pathNo scoreKernelLinuxscsi: qla2xxx: Skip vport under deletion in report ID acquisition7.5 HighKernelLinuxscsi: qla2xxx: Fix soft lockup polling continuation IOCB signature7.1 HighKernelLinuxscsi: qla2xxx: Validate BSG request_len before reading vendor_cmd[]6.8 MediumKernelLinuxscsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error8.8 High- Show moreLoading…