Kernel vulnerabilities (Linux)
31,035 vulnerabilities.
KernelLinuxx86/CPU/AMD: Fix AMD TLBI Erratum #17187.8 HighKernelLinuxdm-integrity: fix buffer overflow in inline mode with large tag sizeNo scoreKernelLinuxtee: shm: reject zero-sized allocations in tee_dyn_shm_alloc_helper()No scoreKernelLinuxio_uring/register: don't exempt disabled rings from task restrictionsNo scoreKernelLinuxdrm/vc4: drain the hangcheck timer and works on V3D unbindNo scoreKernelLinuxBluetooth: btintel_pcie: fix TX descriptor bounds check7.5 HighKernelLinuxmm: don't schedule deferred kernel page table freeing while bootingNo scoreKernelLinuxriscv: patch: fix handling of bpf-jit execmem addressesNo scoreKernelLinuxBluetooth: MGMT: Fix status of pending commands flushed on power offNo scoreKernelLinuxdrm/amdgpu: serialize vblank counter reads against GPU resetNo scoreKernelLinuxASoC: samsung: i2s: enable op_clk in probe to balance runtime PMNo scoreKernelLinuxnet: openvswitch: validate transport header presence in set_ipv6_addrNo scoreKernelLinuxdm-integrity: fix NULL pointer dereference when the 'R' flag is usedNo scoreKernelLinuxdm-integrity: validate the superblock on resumeNo scoreKernelLinuxsched_ext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF schedulerNo scoreKernelLinuxreaddir: take no inode lock on an immutable directoryNo scoreKernelLinuxksmbd: fix heap out-of-bounds write in krb5_authenticate()8.8 HighKernelLinuxKVM: x86: Use active memslots for the per-vCPU MMIO cache8.8 HighKernelLinuxbnxt_en: fix DMA mapping length for padded small packets7.5 HighKernelLinuxfs: Free any excess xarray nodes in clear_inode()No scoreKernelLinuxnet/mlx5e: Prevent stale XSK buffer release on refill retry9.8 CriticalKernelLinuxnet/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry9.8 CriticalKernelLinuxipv4: udp: Create exceptions before socket matching7.4 HighKernelLinuxipv6: udp: Create exceptions before socket matchingNo scoreKernelLinuxrust_binder: reschedule node refcount update on thread exitNo scoreKernelLinuxipv4: stop PMTU walk when nexthop group shrinksNo scoreKernelLinuxipv4: stop exception dump when nexthop group shrinksNo scoreKernelLinuxipv4: stop route notification sizing when nexthop group shrinksNo scoreKernelLinuxipv4: do not warn on route notification size raceNo scoreKernelLinuxipv6: do not warn on route notification size raceNo scoreKernelLinuxInput: ati_remote2 - fix type confusion in device attribute handlersNo scoreKernelLinuxALSA: ctxfi: Fix memory leakage when clearing DAO input mappersNo scoreKernelLinuxbtrfs: scrub: fix local_root reference leak in scrub_print_warning_inode()No scoreKernelLinuxcan: dev: init_can_skb(): restore skb header initializationNo scoreKernelLinuxcgroup/cpuset: Handle cpu hotplug race in guarantee_active_cpus()No scoreKernelLinuxcipso: adjust cached option offsets when removing CIPSO8.1 HighKernelLinuxdm ioctl: don't let data_start run past the bufferNo scoreKernelLinuxvsock/virtio: account only unread bytes in read_skb()No scoreKernelLinuxwifi: brcmfmac: fix P2P device removal race in brcmf_detach()No scoreKernelLinuxwifi: mt76: mt7603: initialize global station WCIDNo scoreKernelLinuxwireguard: noise: reject response consumption after intermediate initiation7.7 HighKernelLinuxworkqueue: Fix NULL current_pwq deref in chained work checkNo scoreKernelLinuxxen/netfront: don't leak the skb when xennet_fill_frags() failsNo scoreKernelLinuxstrparser: make sure __strp_recv isn't running before tearing down the parser7.8 HighKernelLinuxtcp: reject net_iov in zerocopy receive mapping hintsNo scoreKernelLinuxtipc: destroy topsrv workqueues before closing connections7.8 HighKernelLinuxtipc: hold a reference to nodes found by link name7.8 HighKernelLinuxselinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_optsNo scoreKernelLinuxfsverity: RCU-delay the freeing of struct fsverity_info7.8 HighKernelLinuxgpio: mpsse: fix race when arming the IRQ poll worker7.8 High- Show moreLoading…