Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxaf_packet: fix integer overflow in prb_calc_retire_blk_tmo()6.8 MediumKernelLinuxarm64/boot: Disable trapping of PMZR_EL0 writes to EL26.8 MediumKernelLinuxata: libata-scsi: bound the ATA passthru sense descriptor writes5.4 MediumKernelLinuxbna: prevent IOC timer rearm during teardownNo scoreKernelLinuxbpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir7.3 HighKernelLinuxcgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflictNo scoreKernelLinuxfou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT6.7 MediumKernelLinuxfprobe: Terminate the fgraph_data list when the reservation is not filledNo scoreKernelLinuxfs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga2.0 LowKernelLinuxwriteback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes5.7 MediumKernelLinuxworkqueue: Fix NULL current_pwq deref in flush dependency check5.7 MediumKernelLinuxwriteback: report a Tasks-RCU quiescent state per cgwb drain pass5.7 MediumKernelLinuxfsl/fman: Fix clk reference leak in read_dts_node()No scoreKernelLinuxipe: fix use-after-free when auditing a newly loaded policyNo scoreKernelLinuxipe: protect the dm-verity root hash with RCUNo scoreKernelLinuxipv6: do not let ipv6_find_hdr() return an offset past the packet end8.1 HighKernelLinuxipv6: sr: enforce exact attribute length for SEG6_ATTR_DST4.6 MediumKernelLinuxkprobes: Fix permanent hang when flushing the kprobe optimizerNo scoreKernelLinuxgpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()No scoreKernelLinuxgpio: cdev: fix kernel stack leak to user-space in error pathNo scoreKernelLinuxgpio: zynq: fix runtime PM leak on request error pathNo scoreKernelLinuxllc: reserve device headroom for allocated frames7.7 HighKernelLinuxmctp: route: iterate socket tag list in mctp_lookup_prealloc_tag()4.6 MediumKernelLinuxrds: ib: Clear the sg list when mapping an MR fails7.8 HighKernelLinuxdrm/client: fix restore of partially initialized clientNo scoreKernelLinuxdrm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl()5.7 MediumKernelLinuxdrm/i915: fix incorrect RCU teardown order5.7 MediumKernelLinuxdrm/amdkfd: fix use-after-free and multi-container gap in kfd_dev_mapping7.8 HighKernelLinuxdrm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show()No scoreKernelLinuxdrm/nouveau/dmem: pin VRAM for the whole registered range7.0 HighKernelLinuxdrm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM7.8 HighKernelLinuxdrm/nouveau: Fix bridge reference leak in nv1a_ram_new()No scoreKernelLinuxdrm/nouveau: fix double-free in nvif_vmm_dtor7.8 HighKernelLinuxdrm/nouveau: Fix gem reference leak in validate_init()6.8 MediumKernelLinuxdrm/nouveau: Fix runtime PM leak in nouveau_connector_detect()2.0 LowKernelLinuxdrm/nouveau: RCU-free the scheduler-containing nouveau_sched7.1 HighKernelLinuxdrm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked()6.8 MediumKernelLinuxdrm/xe/vm: nuke PTs only after unlinking contested VMAs7.8 HighKernelLinuxdrm/virtio: fix memory leak of fence event on execbuffer failure6.8 MediumKernelLinuxdrm/virtio: fix NULL pointer dereference on fence allocation failure5.7 MediumKernelLinuxmm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish7.8 HighKernelLinuxmm/hugetlb: do not dissolve gigantic pages without runtime supportNo scoreKernelLinuxmm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold()No scoreKernelLinuxPCI: of_property: Omit bus properties without a subordinate busNo scoreKernelLinuxpacket: use ubuf_info completion for TX_RING packets7.3 HighKernelLinuxHID: alps: unregister DualPoint Stick input device on removeNo scoreKernelLinuxHID: alps: fix use-after-free on input2 registration failure7.1 HighKernelLinuxHID: hid-oxp: use cancel_delayed_work_sync() in remove5.4 MediumKernelLinuxHID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()8.1 HighKernelLinuxnet/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get()5.6 Medium- Show moreLoading…