Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxcpufreq: initialize policy rwsem before sysfs publicationNo scoreKernelLinuxexit: hold a reference to thread_pid across proc_flush_pid7.8 HighKernelLinuxfs: don't return -EINVAL for successful nested thawNo scoreKernelLinuxgenetlink: pin family module during policy dump9.8 CriticalKernelLinuxdrm/drm_exec: fix up contended obj when num_objects is 0No scoreKernelLinuxdrm/i915: Fix memory leak in query_perf_config_list()No scoreKernelLinuxdrm/rockchip: analogix_dp: fix unchecked bound endpoint name lengthNo scoreKernelLinuxdrm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batchesNo scoreKernelLinuxio_uring/rw: end write accounting from ->ki_completeNo scoreKernelLinuxIn the Linux kernel, the following vulnerability has been resolved: io_uring/net: don't...No scoreKernelLinuxring-buffer: Check resize_disabled before publishing the new subbuf orderNo scoreKernelLinuxnet/sched: act_api: release all action references on NEWACTION failureNo scoreKernelLinuxnet: bridge: use option bits for CFM/MRP frame handlers7.3 HighKernelLinuxnet: dsa: tag_brcm: legacy FCS: request needed tailroomNo scoreKernelLinuxnet: mana: Reserve extra CQ slot for the fence completion CQENo scoreKernelLinuxnet: mpls: clear inner_protocol when the last label is popped7.8 HighKernelLinuxnet: openvswitch: fix use-after-free of the flow table mask array7.8 HighKernelLinuxnetfs: Fix uninitialized return value in netfs_unbuffered_write()No scoreKernelLinuxnetfilter: cttimeout: prevent UAF during module unload7.0 HighKernelLinuxnetfilter: nf_log: unregister loggers before per-net teardown7.0 HighKernelLinuxvdpa: ifcvf: Put device on unsupported feature errorNo scoreKernelLinuxfs: autofs: fix memory leak in autofs_fill_super()No scoreKernelLinuxerofs: preserve LZMA decoders on resize failureNo scoreKernelLinuxfbdev: vfb: defer cleanup until the last referenceNo scoreKernelLinuxidpf: disable DIM work before freeing q_vectors7.1 HighKernelLinuxinet: frags: invalidate queues before flushing them7.8 HighKernelLinuxieee802154: 6lowpan: fix NULL dereference in lowpan_newlinkNo scoreKernelLinuxieee802154: cc2520: fix FIFOP work use-after-freeNo scoreKernelLinuxieee802154: hwsim: serialize pib updates to fix double-freeNo scoreKernelLinuxipv4: fib: bound automatic table ID allocationNo scoreKernelLinuxipv6: flowlabel: cap duplicate leases per socket6.8 MediumKernelLinuxipvs: reject invalid states in connection template sync recordsNo scoreKernelLinuxmac802154: fix use-after-free of sdata via queued RX frames7.5 HighKernelLinuxlandlock: Fix use-after-free of the source's parent directory7.8 HighKernelLinuxiommu/s390: Fix NULL dereference in iova_to_phys() with ZPCI_TABLE_TYPE_RFXNo scoreKernelLinuxs390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithmNo scoreKernelLinuxs390/crypto: Fix handling of EBUSY in PHMAC when req is pushed to crypto engineNo scoreKernelLinuxs390/crypto: Fix missing scrub of temp buffers with PAES algorithmNo scoreKernelLinuxs390/crypto: Fix wrong return code to engine in asynch callbacks7.0 HighKernelLinuxs390/crypto: Map EBUSY to EIO when key conversion fails repeatedlyNo scoreKernelLinuxperf: RISC-V: store available counter mask as bitmapNo scoreKernelLinuxafs: Fix missing kunmap in afs_dir_search_bucket()No scoreKernelLinuxafs: Fix double-unmap of directory blockNo scoreKernelLinuxafs: Fix incorrect free in candidate cleanup in afs_lookup_server()7.8 HighKernelLinuxafs: Clear stale peer app data after address list changes7.5 HighKernelLinuxhwmon: (gpio-fan) Fix use-after-free in alarm workNo scoreKernelLinuxmedia: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity7.1 HighKernelLinuxmedia: rkvdec: bound HEVC tile loops and PPS id to the array capacity7.8 HighKernelLinuxmedia: mediatek: vcodec: bound AV1 tile-start copy to the array capacity7.8 HighKernelLinuxmedia: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer7.8 High- Show moreLoading…