Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxrtc: ac100: Assign .num before accessing .hwsNo scoreKernelLinuxrtc: spear: initialize IRQ state before requesting alarm IRQNo scoreKernelLinuxsctp: check RCV_SHUTDOWN after the sendmsg connect wait7.3 HighKernelLinuxtpm: Disable TPM on null key name mismatch2.4 LowKernelLinuxnetfs: clear post-EOF pagecache when extending a file via write4.8 MediumKernelLinuxnetfs: zero gaps in read-gaps folio to avoid writing back stale data4.8 MediumKernelLinuxmodule: fix lost error code from codetag_load_module()No scoreKernelLinuxvirt: vmgenid: set driver_data before registering notification handlersNo scoreKernelLinuxvc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF5.6 MediumKernelLinuxvt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection()No scoreKernelLinuxvt: skip screen update for DEC alignment test on backgroup consoles5.7 MediumKernelLinuxALSA: caiaq: unregister the input device when probe fails7.3 HighKernelLinuxALSA: line6: reject oversized playback packets7.0 HighKernelLinuxiio: accel: kionix-kx022a: Fix array boundary check0.0 NoneKernelLinuxmtd: core: avoid double-free of OTP NVMEM deviceNo scoreKernelLinuxmtd: core: call _get_device() with the master MTDNo scoreKernelLinuxblk-cgroup: save IRQ state in blkg_tryget_closest()5.7 MediumKernelLinuxof/overlay: don't leak fragment references when changeset init failsNo scoreKernelLinuxwifi: wfx: validate MIB read length before copying to callerNo scoreKernelLinuxwifi: mac80211: drop oversized fragments to avoid extra_len overflow7.1 HighKernelLinuxwifi: ath9k: reject short WMI command responses5.1 MediumKernelLinuxwifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE7.3 HighKernelLinuxrtc: ac100: Fix clock provider use-after-free on probe failureNo scoreKernelLinuxrtc: mpfs: fix unchecked devm_clk_get() error pointer in probe()No scoreKernelLinuxwifi: mac80211: validate TX status rate metadata7.3 HighKernelLinuxwifi: cfg80211: preserve hidden-group beacon IE ownership7.7 HighKernelLinuxwifi: mac80211: prevent AP VLAN tx from other interfaces5.1 MediumKernelLinuxblock: reject polled dio with user integrity metadata6.7 MediumKernelLinuxblk-mq: set RQF_USE_SCHED when the operation is knownNo scoreKernelLinuxBluetooth: btintel: validate DDC record lengthsNo scoreKernelLinuxmm/slab: do not wake up kswapd in __kfree_rcu_sheaf()No scoreKernelLinuxASoC: SDCA: Add better pm_runtime error handling in func probeNo scoreKernelLinuxbpf: Fix overflow of jump offset in constant blinding6.7 MediumKernelLinuxnvme: fix cdev lifetimeNo scoreKernelLinuxnvme: fix command effects log lifetime for multipath headsNo scoreKernelLinuxbpf: Hold map BTF for the memory allocator destructor record7.1 HighKernelLinuxnet/mctp: publish the mctp_dev only after it is initialised5.6 MediumKernelLinuxnet/sched: cls_api: reclaim an empty proto on the error path5.7 MediumKernelLinuxwifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue()6.8 MediumKernelLinuxBluetooth: hci_sync: don't drain cmd_sync backlog on unregisterNo scoreKernelLinuxnet: systemport: Fix buffer overflow in bcm_sysport_get_stats()6.9 MediumKernelLinuxnet/mlx5: Fix slab-out-of-bounds when handling team device eventsNo scoreKernelLinuxocteontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled6.7 MediumKernelLinuxtipc: prevent GCM nonce reuse on peer key changes9.1 CriticalKernelLinuxnet: page_pool: fix use-after-free in page_pool_recycle_ring_bulk()7.1 HighKernelLinuxnet: stmmac: fix rx Scatter-Gather support8.3 HighKernelLinuxseg6: ensure packet data is writable before modifying SRH and IPv6 DA6.3 MediumKernelLinuxnet: restrict SO_RESERVE_MEM to TCP sockets and cap max value6.9 MediumKernelLinuxbpf: Wait for an RCU tasks grace period before freeing trampoline progs7.1 HighKernelLinuxbpf: Skip detached progs in trampoline images that are still in use8.4 High- Show moreLoading…