Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxASoC: Intel: avs: Clean up the bus when fetching ML caps failsNo scoreKernelLinuxASoC: Intel: avs: Fix unbalanced module reference count5.5 MediumKernelLinuxASoC: Intel: avs: Refactor and fix init_config access5.5 MediumKernelLinuxnet: bcmasp: clear txcb->last before writing each descriptor7.8 HighKernelLinuxnet: bcmasp: fix tx_spb_ring_full() checking same slot cnt times5.5 MediumKernelLinuxmlxsw: spectrum_ptp: Fix napi_gro_receive() call from GC workqueue context7.5 HighKernelLinuxbpf: zero extend the result of an arena 32-bit cmpxchg5.5 MediumKernelLinuxbpf: don't rewrite bpf_fastcall patterns entered by a jumpNo scoreKernelLinuxbpf: Check ancestor frames for rbtree callbacksNo scoreKernelLinuxbpf: Mark bpf_btf_find_by_name_kind() as sleepableNo scoreKernelLinuxbpf: Mark faultable stack helpers as sleepableNo scoreKernelLinuxbpf: Reject legacy packet loads from callbacks4.6 MediumKernelLinuxbpf: Don't infer non-NULL from a pointer with an unbounded offset6.8 MediumKernelLinuxbpf: Don't resurrect a scalar id dropped by collect_linked_regs()No scoreKernelLinuxbpf: Don't predict JMP32 pointer vs zero comparisons7.0 HighKernelLinuxbpf: Mark the zero register precise for a register-form NULL checkNo scoreKernelLinuxbpf: Require MEM_PERCPU for percpu kptr storesNo scoreKernelLinuxbpf: Keep refcount_acquire nullable for borrowed RCU kptrs6.7 MediumKernelLinuxbpf: Reject untrusted allocated-object pointersNo scoreKernelLinuxbpf: Preserve special fields in recycled rhtab elementsNo scoreKernelLinuxbpf: Cancel special fields when recycling rhtab elementsNo scoreKernelLinuxbpf: Mark NULL kptr stores precise8.5 HighKernelLinuxbpf: Preserve inner map identity in callback frames7.1 HighKernelLinuxtracing: Fix subbuf resize races with trace_pipe_raw readersNo scoreKernelLinuxnexthop: Initialize extack in remove_nh_grp_entry()No scoreKernelLinuxnet: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size7.0 HighKernelLinuxeth: nfp: bound the ntuple rule dump by the caller's buffer size7.0 HighKernelLinuxeth: nfp: drop the replaced rule from the list when reprogramming failsNo scoreKernelLinuxnet: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size7.0 HighKernelLinuxnet: bridge: mcast: properly convert mglist to rcu5.8 MediumKernelLinuxnet: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflowNo scoreKernelLinuxs390/ism: folio_put() after errorNo scoreKernelLinuxvxlan: reject dynamic fdb entries that reference a nexthop id7.8 HighKernelLinuxnet: cap tx_queue_len at S16_MAX to prevent oversized ring allocationsNo scoreKernelLinuxnet: reject oversized tx_queue_len at netlink parse time6.8 MediumKernelLinuxpds_core: fix cmd_regs access racing BAR unmap on resetNo scoreKernelLinuxbpf: mark a NULL call argument precise8.4 HighKernelLinuxnet: mctp: i3c: serialize probe with bus removalNo scoreKernelLinuxnet/sched: defer qdisc freeing after failed creation7.8 HighKernelLinuxnet/mlx5e: Fix use-after-free race in sample_restore_put()No scoreKernelLinuxnet/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_putNo scoreKernelLinuxnet/mlx5: E-Switch, prevent mc_list repopulation during vport disableNo scoreKernelLinuxnet/sched: fq_pie: clamp quantum in change pathNo scoreKernelLinuxnet/sched: sfq: clamp quantum in change pathNo scoreKernelLinuxnet/sched: hhf: clamp quantum in change and init pathsNo scoreKernelLinuxnet/sched: drr: clamp quantum in change classNo scoreKernelLinuxnet/sched: ets: clamp quantum in parse and fallback pathsNo scoreKernelLinuxnet: macb: fix NULL pointer dereference on unbind with fixed-linkNo scoreKernelLinuxbpf: Reject non-scalar bpf_loop iteration countsNo scoreKernelLinuxALSA: caiaq: Decoupling ep1_in_urb in caiaq devNo score- Show moreLoading…