Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxxfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots2.0 LowKernelLinuxxfs: don't let hidden_space go negative in xfs_metafile_resv_init7.1 HighKernelLinuxxfs: don't let memory failures leak blocks and kill repairsNo scoreKernelLinuxxfs: drop dquot flush lock when we can't find a buffer to flushNo scoreKernelLinuxxfs: fix cursor and pointer handling when recovering iunlink buckets7.8 HighKernelLinuxnet/sched: act_ct: fix helper UAF due to extensions realloc7.8 HighKernelLinuxnet/sched: act_ct: avoid modifying shared unconfirmed ct entry7.8 HighKernelLinuxKVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction7.0 HighKernelLinuxsmb/server: cancel async requests when closing connection7.1 HighKernelLinuxmptcp: options: fix uninit-value in mptcp_write_data_fin6.9 MediumKernelLinuxmedia: qcom: iris: fix runtime PM reference leaksNo scoreKernelLinuxaccel/amdxdna: Disable device buffer exporting7.8 HighKernelLinuxEDAC/altera: Use parent device for devres in altr_portb_setup()No scoreKernelLinuxsysctl: Check range in proc_dointvec_ms_jiffies_minmax4.8 MediumKernelLinuxKVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure6.9 MediumKernelLinuxipv4: validate checksum_start before completing checksum9.3 CriticalKernelLinuxipv4: free inet_opt and ireq_opt after an RCU grace period9.8 CriticalKernelLinuxRDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependencyNo scoreKernelLinuxRDMA/efa: Keep admin queues alive while IRQ is registeredNo scoreKernelLinuxRDMA/efa: Keep EQ resources alive while IRQ is registeredNo scoreKernelLinuxALSA: usb: 6fire: Avoid embedded URBs5.4 MediumKernelLinuxnet/sched: codel: bound the dropping loop per dequeue call6.8 MediumKernelLinuxwifi: mwifiex: fix IRQ leak using wrong index in MSI-X error pathNo scoreKernelLinuxwifi: mac80211: don't warn when an IBSS has no channel to scanNo scoreKernelLinuxwifi: cfg80211: undo netns switch if renaming the wiphy fails2.0 LowKernelLinuxwifi: mac80211_hwsim: don't hand frames to mac80211 while stopping2.0 LowKernelLinuxwifi: mac80211: reset the AP_VLAN tailroom counter on ifdown9.8 CriticalKernelLinuxwifi: mac80211: require a peer station for TDLS setup confirm4.8 MediumKernelLinuxksmbd: follow SMB2 session expiration semantics8.7 HighKernelLinuxdrop_monitor: fix out-of-bounds write in reset_per_cpu_data()7.0 HighKernelLinuxsched/core: Avoid false migration warning for proxy donorsNo scoreKernelLinuxnet: xfrm: reject unrepresentable espintcp transport headers9.8 CriticalKernelLinuxdmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn()9.8 CriticalKernelLinuxsoc: samsung: exynos-pmu: fix use-after-free of interrupt generator nodeNo scoreKernelLinuxmemcg: avoid charging the root memcg from obj_cgroup_charge_pages()No scoreKernelLinuxselinux: always fill AVC decision in avc_has_perm_noaudit()No scoreKernelLinuxpower: sequencing: fix NULL-pointer dereference in pwrseq_unit_new()No scoreKernelLinuxpower: sequencing: fix NULL-pointer dereference in pwrseq_device_register()No scoreKernelLinuxwatchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdogNo scoreKernelLinuxwatchdog: rtd119x: Avoid division by zeroNo scoreKernelLinuxwatchdog: rzv2h: Avoid division by zeroNo scoreKernelLinuxwifi: rsi: fix heap OOB write on key removal9.8 CriticalKernelLinuxwifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driverNo scoreKernelLinuxsmb: client: fix missing iov bounds check in parse_posix_sids()8.1 HighKernelLinuxdrm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()No scoreKernelLinuxs390/boot: Avoid IPL parameter append past command line8.8 HighKernelLinuxnet: icmp: avoid invalid transport header access in icmp_send tracepointNo scoreKernelLinuxnet: iptunnel: fix stale transport header during tunnel decapsulation7.5 HighKernelLinuxs390/ipl: Fix NULL deref in kdump without re-IPL parm blockNo scoreKernelLinuxs390/ipl: Fix NULL deref in dump_reipl without re-IPL parm blockNo score- Show moreLoading…