Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxbpf: Fix divide-by-zero in btf_struct_walk()No scoreKernelLinuxtcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context4.6 MediumKernelLinuxHID: winwing: fix use-after-free in force feedback teardown5.4 MediumKernelLinuxbpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch()6.8 MediumKernelLinuxbpf: Fix out-of-bounds read of rtt_min in sock_ops4.6 MediumKernelLinuxbpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk7.3 HighKernelLinuxbpf, arm64: set up the frame pointer for the exception callback7.1 HighKernelLinuxHID: amd_sfh: Validate PCI BAR size before mapping5.1 MediumKernelLinuxKVM: riscv: Fix NACL hfence entry update order2.1 LowKernelLinuxKVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve()No scoreKernelLinuxKVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure5.6 MediumKernelLinuxsquashfs: Add dictionary size range check to prevent shift-out-of-bounds0.0 NoneKernelLinuxscsi: block: Fix zones_cond out-of-bounds write on zone report7.0 HighKernelLinuxscsi: sd_zbc: Reject disks with too many zones7.0 HighKernelLinuxBluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump()No scoreKernelLinuxBluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel7.1 HighKernelLinuxxsk: Use a 32-bit compare in xsk_map_gen_lookup6.8 MediumKernelLinuxeth: fbnic: Fix payload page pool error cleanup5.6 MediumKernelLinuxnet/sched: cls_u32: fix manual hash table handle IDR aliasing4.8 MediumKernelLinuxbpf: Make post-verification instruction rewrites killable6.7 MediumKernelLinuxbpf: Preserve packet pointer class displacement in regsafe()8.4 HighKernelLinuxbpf: Restrict CO-RE poisoning to relocatable instructions8.4 HighKernelLinuxnetfilter: flowtable: publish HW_DEAD after worker is done7.3 HighKernelLinuxnetfilter: nfnetlink_queue: hold nfnl mutex in event notifier7.3 HighKernelLinuxdrm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_updateNo scoreKernelLinuxnet/sched: act_ct: don't WARN on benign flow_offload_alloc() failure5.7 MediumKernelLinuxnet: gue: reject invalid REMCSUM offsets9.2 CriticalKernelLinuxnet: ethernet: mtk_eth_soc: unregister net_devices in case of probe failureNo scoreKernelLinuxnet: ethtool: keep rtnl_lock for the ioctl self test7.1 HighKernelLinuxeth: fbnic: Handle maximum standalone channelsNo scoreKernelLinuxeth: fbnic: use the Rx queue napi pointer to find the napi vectorNo scoreKernelLinuxeth: fbnic: reset num_napi when the napi vectors are freedNo scoreKernelLinuxeth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailboxNo scoreKernelLinuxsctp: avoid livelock while updating retransmit path6.8 MediumKernelLinuxbpf: Bound ownership depth through local kptrs and graph roots6.8 MediumKernelLinuxnet: usb: catc: bound the RX packet length in catc_rx_done()5.1 MediumKernelLinuxbpf: Check params size before reading reserved fieldsNo scoreKernelLinuxnet/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget6.8 MediumKernelLinuxdrm/virtio: fix object leak when drm_gem_handle_create() fails5.7 MediumKernelLinuxdrm/virtio: fix object leak in virtio_gpu_resource_create_ioctl()5.7 MediumKernelLinuxdrm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl()5.7 MediumKernelLinuxdrm/virtio: release the GEM object on virtio_gpu_vram_create() errors7.3 HighKernelLinuxdrm/bridge: samsung-dsim: fix TE GPIO lifetime for host attachNo scoreKernelLinuxovpn: replace bind when learning local endpoint2.3 LowKernelLinuxovpn: replace bind when clearing stale local sourceNo scoreKernelLinuxBluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough2.3 LowKernelLinuxBluetooth: btintel_pcie: validate device-supplied DMA indices7.0 HighKernelLinuxBluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame()5.3 MediumKernelLinuxbpf: Reject non-negative offsets in stack_slot_obj_get_spi()8.4 HighKernelLinuxipv6: Prevent rt6_insert_exception() for dying fib6_info.5.7 Medium- Show moreLoading…