Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxlocking/lockdep: Invalidate stale class_cache entries for zapped classesNo scoreKernelLinuxplatform/x86: x86-android-tablets: hold device reference for secondary fwnode teardownNo scoreKernelLinuxpowerpc: Do not restore KUAP in arch_exit_to_user_mode_prepare()No scoreKernelLinuxpowerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exitNo scoreKernelLinuxaf_unix: Return immediately when manage_oob() returns NULL for 0-length buffer.6.8 MediumKernelLinuxnet: ipv4: Fix UDP length overflow with PMTU discover and big MTU4.8 MediumKernelLinuxBluetooth: btintel_pcie: fix tx_handle bounds off-by-oneNo scoreKernelLinuxdrm/xe: Guard page-fault worker with runtime PM checkNo scoreKernelLinuxx86/amd_node: Avoid divide by zero on virtualized systemsNo scoreKernelLinuxdrm/amdgpu: skip gfx switch_power_profile during GPU reset5.7 MediumKernelLinuxexec: do_close_on_exec() before taking exec_update_lockNo scoreKernelLinuxs390/crypto: Fix skcipher_walk return code handling in aes_s3902.0 LowKernelLinuxscsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot5.7 MediumKernelLinuxsched/cache: Decouple sched_cache_group from mm to fix UAF7.8 HighKernelLinuxbpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy()No scoreKernelLinuxbpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL7.8 HighKernelLinuxbpf: Reject dev-bound-only programs on other devices7.8 HighKernelLinuxveth: manage XDP program pointers during channel resize7.8 HighKernelLinuxnet/sched: reject IDR error pointers when deleting actionsNo scoreKernelLinuxnetfilter: ip6t_rpfilter: reject routes without inet6_devNo scoreKernelLinuxbpf: Skip unsettled links in link iterator7.8 HighKernelLinuxvlan: require the MAC header to be present in __vlan_insert_inner_tag()4.8 MediumKernelLinuxxen/netfront: drop RX packets with a short Ethernet header9.8 CriticalKernelLinuxtcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack()8.8 HighKernelLinuxmm/hugetlb: preserve mremap address delta when skipping page tablesNo scoreKernelLinuxxfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk()No scoreKernelLinuxxfrm: iptfs: fix runt reassembly panic from short inner tot_lenNo scoreKernelLinuxxfrm: fix compat ALLOCSPI request use-after-freeNo scoreKernelLinuxxfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()7.8 HighKernelLinuxesp: downgrade zerocopy managed frags before mutating skb frags7.8 HighKernelLinuxRDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept7.8 HighKernelLinuxRDMA/rxe: validate access flags before swapping the MR's PD7.8 HighKernelLinuxRDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access9.8 CriticalKernelLinuxxfrm: hold net_device reference under RCU in bundle creation7.8 HighKernelLinuxfirmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPSNo scoreKernelLinuxclk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate9.8 CriticalKernelLinuxRDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths7.8 HighKernelLinuxRDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds7.0 HighKernelLinuxRDMA/core: Reject unregistering netdevs in ib_get_eth_speed7.0 HighKernelLinuxIB/iser: reject a remote invalidation of an unregistered directionNo scoreKernelLinuxIB/isert: wait for deferred control PDU completions before releasing the connection8.1 HighKernelLinuxRDMA/bnxt_re: check create_singlethread_workqueue() in DCB setupNo scoreKernelLinuxRDMA/rtrs: guard against null kobj nameNo scoreKernelLinuxRDMA/mad: Fix receive buffer leak when PKey enforcement failsNo scoreKernelLinuxRDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables5.7 MediumKernelLinuxRDMA/rtrs-clt: Fix CQ pool leak when connect is interruptedNo scoreKernelLinuxwifi: virt_wifi: free skb when disconnectedNo scoreKernelLinuxwifi: brcmfmac: cyw: pass PMKID to firmware if presentNo scoreKernelLinuxwifi: libipw: reject too-short beacon and probe responses7.1 HighKernelLinuxwifi: libipw: reject too-short association responses7.1 High- Show moreLoading…