Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxnet/mlx5e: fix swapped IPv6 IPsec policy masks7.5 HighKernelLinuxnet: airoha: npu: cancel wdt_work after releasing the WDT IRQNo scoreKernelLinuxnet: arp: terminate device name before lookup4.8 MediumKernelLinuxnet: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read5.7 MediumKernelLinuxnet: ipconfig: bound DHCP option constructionNo scoreKernelLinuxnet: macb: fix dma_alloc_coherent() leak on macb_alloc() error pathsNo scoreKernelLinuxnet: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry7.8 HighKernelLinuxnet: openvswitch: conntrack: fix helper UAF due to extensions realloc9.8 CriticalKernelLinuxnet: atl1c: fix soft lockup on out-of-range tpd_cons readNo scoreKernelLinuxnet: atl1e: fix soft lockup on out-of-range hw_next_to_clean readNo scoreKernelLinuxnet: bridge: mdb: restart port group walk after deletion7.8 HighKernelLinuxnet: ena: fix MMIO read buffer leak on probe failureNo scoreKernelLinuxnetfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read7.1 HighKernelLinuxnetfilter: nf_tables: skip expired catchall elements on insert and delete0.0 NoneKernelLinuxnfc: fix use-after-free in nfc_get_local_general_bytesNo scoreKernelLinuxnfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc()5.3 MediumKernelLinuxnfc: port100: reject frames whose declared length exceeds the received data5.1 MediumKernelLinuxnfc: trf7970a: power down on startup RX gain failureNo scoreKernelLinuxscsi: libiscsi_tcp: Check the data direction of a Data-In PDU7.5 HighKernelLinuxscsi: ufs: core: Keep internal commands dispatchable during error handlingNo scoreKernelLinuxperf/core: Fix NULL pmu_ctx passed to pmu->sched_task()6.8 MediumKernelLinuxs390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()No scoreKernelLinuxs390/cmf: Fix virtual vs physical address confusionNo scoreKernelLinuxs390/pci: Fix missing device lock in zpci_report_status()No scoreKernelLinuxs390/vfio-ap: fix KVM GISC and page leak when queue removed from host configNo scoreKernelLinuxKVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV4.6 MediumKernelLinuxKVM: SEV: Do cache maintenance on the source VM during intra-host migration7.1 HighKernelLinuxKVM: arm64: Don't WARN on an unknown VM ioctl in protected mode6.7 MediumKernelLinuxKVM: arm64: Fix AArch32 DBGBXVR<n> handling7.1 HighKernelLinuxKVM: arm64: Fix spurious warning for benign stage 2 teardown race1.8 LowKernelLinuxKVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race5.6 MediumKernelLinuxKVM: arm64: Transfer the hyp stack pages out of the host stage-28.2 HighKernelLinuxRISC-V: KVM: Serialize IMSIC attributes with vCPU migration7.0 HighKernelLinuxRISC-V: KVM: Synchronize hrtimer callback during teardown9.3 CriticalKernelLinuxsched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flagsNo scoreKernelLinuxBluetooth: hci_conn: fix CIS hold ownership on reuse7.3 HighKernelLinuxBluetooth: hci_sock: validate event length before filtering4.1 MediumKernelLinuxBluetooth: hci_sock: reject out-of-range OCF values4.8 MediumKernelLinuxBluetooth: ISO: balance the parent hold in hci_bind_bis()8.5 HighKernelLinuxBluetooth: ISO: release unused CIS holds after channel attach4.8 MediumKernelLinuxBluetooth: L2CAP: validate frame length before control and FCS access7.1 HighKernelLinuxBluetooth: mgmt: fix race in read_unconf_index_list()7.0 HighKernelLinuxBluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO5.7 MediumKernelLinuxsmb: client: fix create context out-of-bounds reads8.1 HighKernelLinuxsmb: client: close handle after create-context parsing failure5.3 MediumKernelLinuxsmb: client: clean up failed cached directory opens5.3 MediumKernelLinuxsmb: client: use finish_no_open() for non-regular inodes8.8 HighKernelLinuxsmb: client: close completed creates on compound wait errors2.0 LowKernelLinuxsmb: client: delete compound mids on send failure before unlockNo scoreKernelLinuxxfs: release orphanage dir inode if chown failsNo score- Show moreLoading…