Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxnetfilter: ipset: mark the rcu locked areas properly7.8 HighKernelLinuxdrm/amd/pm/si: Don't schedule thermal work when queue isn't initializedNo scoreKernelLinuxksmbd: don't hold ci->m_lock while waiting for a lease break ackNo scoreKernelLinuxthunderbolt: Keep the domain reference while processing hotplugNo scoreKernelLinuxnet/mlx5: HWS, Handle destroying table that has a miss table7.0 HighKernelLinuxdrm/amd/ras: reset CPER ring on corrupt entry sizeNo scoreKernelLinuxfirmware: arm_scmi: Validate SENSOR_UPDATE payload sizeNo scoreKernelLinuxfirmware: arm_scmi: Validate BASE_ERROR_EVENT payload sizeNo scoreKernelLinuxwifi: mac80211: validate deauth frame length before reason accessNo scoreKernelLinuxwifi: libertas: reject short monitor TX framesNo scoreKernelLinuxwifi: iwlwifi: mvm: fix sched scan IE sizing7.8 HighKernelLinuxarm64: kprobes: Allow reentering kprobes while single-steppingNo scoreKernelLinuxwifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFONo scoreKernelLinuxdrm/gma500: return errors from Oaktrail HDMI I2C readsNo scoreKernelLinuxima: return error early if file xattr cannot be changedNo scoreKernelLinuxmmc: core: Add validation for host-provided max_segsNo scoreKernelLinuxserial: 8250_port: recognize UPIO_AUNo scoreKernelLinuxmedia: chips-media: wave5: Add range checks for dec_output_infoNo scoreKernelLinuxnet: bridge: remove stale rcu_barrier() in br_multicast_dev_del()No scoreKernelLinuxntfs3: handle set_blocksize failuresNo scoreKernelLinuxisofs: handle set_blocksize failuresNo scoreKernelLinuxirqchip/gic-v5: Immediately exec priority drop following activateNo scoreKernelLinuxirqchip/gic-v4: Don't advertise VLPIs if no ITS is probedNo scoreKernelLinuxhost1x: bus: Fix missing ops null check in error teardownNo scoreKernelLinuxdrm/nouveau/gsp: add SEC2 to GA100 chip tableNo scoreKernelLinuxwifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetectNo scoreKernelLinuxnetfilter: nf_conntrack_expect: zero at allocation timeNo scoreKernelLinuxfreevxfs: don't BUG() on unknown typed-extent typeNo scoreKernelLinuxcrypto: ccp - Fix possible deadlock in SEV init failure pathNo scoreKernelLinuxBluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID8.8 HighKernelLinuxdm-pcache: reject a kset that overruns its segmentNo scoreKernelLinuxdm-pcache: bound the logical key offset from persistent memoryNo scoreKernelLinuxsched/cache: Introduce task_struct->sched_cache_grp to fix UAF7.3 HighKernelLinuxsched_ext: Don't run ops.dequeue() with a DSQ lock heldNo scoreKernelLinuxsched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task5.7 MediumKernelLinuxKVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails8.4 HighKernelLinuxaudit: fix exe mark UAF in kill_rules()7.1 HighKernelLinuxfprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching()7.1 HighKernelLinuxHID: bpf: cast size to ssize_t when checking hid_bpf_hw_requestNo scoreKernelLinuxHID: multitouch: stop the release timer from being rearmed on remove5.4 MediumKernelLinuxio_uring: fix task_work add use-after-free with SQPOLL7.3 HighKernelLinuxipvs: bound LBLCR and LBLC cache growth6.8 MediumKernelLinuxkprobes: Skip disarmed probes when checking optkprobe overlapNo scoreKernelLinuxof/overlay: put property on deadprops only after changeset add succeedsNo scoreKernelLinuxof/overlay: only treat a positive changeset id as registeredNo scoreKernelLinuxnet: gso: limit recursive IP-in-IP segmentation6.8 MediumKernelLinuxnet: extend IPv6 exthdr detection of tunneled packets6.8 MediumKernelLinuxnetfilter: nft_flow_offload: drop flowtable reference on init error path2.0 LowKernelLinuxnet/packet: prevent TX_RING byte count overflow5.7 MediumKernelLinuxpfcp: fix socket lifetime on netdevice registration failure5.7 Medium- Show moreLoading…