Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxnet: usb: sr9700: include receive overhead in the length check5.2 MediumKernelLinuxipv6: Fix dst leak for uncached routes.5.7 MediumKernelLinuxudp: remove a disconnected socket from the 4-tuple hash table6.8 MediumKernelLinuxtg3: clean up PHYLIB resources on probe failureNo scoreKernelLinuxs390/debug: Fix NULL pointer dereference in debug_info_copy()No scoreKernelLinuxnet: spacemit: clear TX descriptor on fragment mapping failure5.8 MediumKernelLinuxbpf: Fix bounds check for skb-backed dynptrs8.4 HighKernelLinuxbpf: Fix bpf_sock context code generation8.5 HighKernelLinuxbpf: Reject pkt arguments in mutating subprogs7.1 HighKernelLinuxbpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc7.1 HighKernelLinuxfirewire: cdev: fix back-transition for iso_resource_auto client resourceNo scoreKernelLinuxsctp: hold asoc or transport before mod_timer() in timer handlers7.3 HighKernelLinuxeth: fbnic: Avoid rounding zero ring sizes6.7 MediumKernelLinuxnet/sched: fix potential stack infoleak in em_text_dump()4.8 MediumKernelLinuxnfc: nfcmrvl: validate helper command length before pull1.0 LowKernelLinuxnfc: st21nfca: validate received frame size5.1 MediumKernelLinuxnfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm()6.9 MediumKernelLinuxnfc: llcp: Fix race condition in accept_queue lifecycle7.1 HighKernelLinuxnfc: llcp: fix sdreq TLV list leak on parse/alloc/send failureNo scoreKernelLinuxnfc: st21nfca: validate ISO15693 inventory length1.0 LowKernelLinuxnfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap()4.8 MediumKernelLinuxnfc: llcp: fix slab-out-of-bounds reads when logging service namesNo scoreKernelLinuxnfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid()5.1 MediumKernelLinuxnet: bcmgenet: stop Tx NAPI before disabling the queuesNo scoreKernelLinuxnet: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6()8.2 HighKernelLinuxbpf: Fix immediate JMP JEQ/JNE on MIPS327.3 HighKernelLinuxnet: stmmac: clear stale buf->page after recycling on skb build failure9.2 CriticalKernelLinuxnet: ipv6: keep room for the mac header in dst_dev_overhead()7.3 HighKernelLinuxip_gre: Reject enabling collect metadata through changelink4.8 MediumKernelLinuxvxlan: use one headroom snapshot for neighbour replies7.3 HighKernelLinuxnet: xps: reject an out of range traffic class7.3 HighKernelLinuxdrm/imagination: clamp freelist reconstruction requestsNo scoreKernelLinuxnet: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621No scoreKernelLinuxnet: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irqNo scoreKernelLinuxnet: phylink: record the PHY only once bringup cannot failNo scoreKernelLinuxnet: libwx: fix races in Tx timestamp handlingNo scoreKernelLinuxnfp: hold IPsec RX state under the XArray lock7.1 HighKernelLinuxnet/rds: size a connection's path set by the transport it ends up with6.8 MediumKernelLinuxnet/smc: fix UAF on lgr list traversal in smcr_port_err()No scoreKernelLinuxnet: flush skb_defer_nodes in dev_cpu_dead()No scoreKernelLinuxgve: DQO: fix header length used by gve_can_send_tso() for UDP GSO4.8 MediumKernelLinuxgve: DQO: reject TSO packets with an out of range MSS6.8 MediumKernelLinuxllc: fix skb UAF and leaks on llc_mac_hdr_init() failure7.5 HighKernelLinuxvlan: ensure sufficient headroom in vlan_dev_hard_header()5.7 MediumKernelLinuxautofs: fix sbi->pipe file reference leak in autofs_kill_sb()No scoreKernelLinuxperf/core: Fix a refcount leak in attach_perf_ctx_data()5.6 MediumKernelLinuxperf/core: Fill branch entries with a single assignment4.8 MediumKernelLinuxtipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow7.5 HighKernelLinuxtcp: prevent collapsing skbs across boundary in rtx queue9.1 CriticalKernelLinuxsctp: discard the rest of the packet on a stale-cookie error9.8 Critical- Show moreLoading…