kernel-core vulnerabilities (Red Hat)
4,581 vulnerabilities.
kernel-coreRed Hatdrm/xe: Open-code GGTT MMIO access protection7.8 Highkernel-coreRed Hatnetfilter: nf_conntrack_h323: check for zero length in DecodeQ931()9.1 Criticalkernel-coreRed Hatipv6: add NULL checks for idev in SRv6 paths5.5 Mediumkernel-coreRed Hatfutex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy()7.8 Highkernel-coreRed HatKVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE5.5 Mediumkernel-coreRed Hatnetfilter: nf_tables: release flowtable after rcu grace period on error7.8 Highkernel-coreRed Hatmm: thp: deny THP for files on anonymous inodes5.5 Mediumkernel-coreRed Hatnet/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks7.8 Highkernel-coreRed HatRDMA/umad: Reject negative data_len in ib_umad_write7.8 Highkernel-coreRed Hattls: Fix race condition in tls_sw_cancel_work_tx()9.8 Criticalkernel-coreRed Hatespintcp: Fix race condition in espintcp_close()7.8 Highkernel-coreRed Hatscsi: qla2xxx: Fix bsg_done() causing double free7.8 Highkernel-coreRed Hatnetfilter: nf_tables: fix use-after-free in nf_tables_addchain()7.8 Highkernel-coreRed Hatscsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()7.8 Highkernel-coreRed Hatice: Fix PTP NULL pointer dereference during VSI rebuild4.7 Mediumkernel-coreRed Hatmacvlan: fix error recovery in macvlan_common_newlink()7.8 Highkernel-coreRed Hatnet/sched: cls_u32: use skb_header_pointer_careful()7.1 Highkernel-coreRed Hatprocfs: avoid fetching build ID while holding VMA lock5.5 Mediumkernel-coreRed Hatscsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()8.8 Highkernel-coreRed HatALSA: aloop: Fix racy access at PCM trigger7.8 Highkernel-coreRed Hatnet: wwan: t7xx: fix potential skb->frags overflow in RX path8.4 Highkernel-coreRed Hatbonding: fix use-after-free due to enslave fail after slave array update7.8 Highkernel-coreRed Hatflex_proportions: make fprop_new_period() hardirq safe5.5 Mediumkernel-coreRed Hatefivarfs: fix error propagation in efivar_entry_get()7.8 Highkernel-coreRed Hatmm/damon/sysfs: cleanup attrs subdirs on context dir setup failure5.5 Mediumkernel-coreRed Hatnetfilter: nf_conncount: update last_gc only when GC has been performed7.5 Highkernel-coreRed Hatlibceph: reset sparse-read state in osd_fault()7.5 Highkernel-coreRed Hatnetfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()7.8 Highkernel-coreRed Hatscsi: core: Wake up the error handler when final completions race against each other4.7 Mediumkernel-coreRed Hatnet/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag7.8 Highkernel-coreRed Hatipvlan: Make the addrs_lock be per port7.8 Highkernel-coreRed Hatmigrate: correct lock ordering for hugetlb file folios5.5 Mediumkernel-coreRed Hatnet/sched: Enforce that teql can only be used as root qdisc7.8 Highkernel-coreRed Hatrxrpc: Fix recvmsg() unconditional requeue7.8 Highkernel-coreRed Hatcrypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec5.5 Mediumkernel-coreRed Hatwifi: mac80211_hwsim: fix typo in frequency notification8.7 Highkernel-coreRed Hatipv6: Fix use-after-free in inet6_addr_del().7.8 Highkernel-coreRed Hatblock: zero non-PI portion of auto integrity buffer5.5 Mediumkernel-coreRed Hatip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()7.5 Highkernel-coreRed Hatlib/buildid: use __kernel_read() for sleepable context5.5 Mediumkernel-coreRed Hatmacvlan: fix possible UAF in macvlan_forward_source()7.8 Highkernel-coreRed Hatnvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec7.5 Highkernel-coreRed Hatlibceph: replace overzealous BUG_ON in osdmap_apply_incremental()7.5 Highkernel-coreRed Hatlibceph: prevent potential out-of-bounds reads in handle_auth_done()9.8 Criticalkernel-coreRed Hatnet: fix memory leak in skb_segment_list for GRO packets5.5 Mediumkernel-coreRed HatKEYS: trusted: Fix a memory leak in tpm2_load_cmd5.5 Mediumkernel-coreRed Hatnet: sock: fix hardened usercopy panic in sock_recv_errqueue5.5 Mediumkernel-coreRed Hatsmc91x: fix broken irq-context in PREEMPT_RT7.5 Highkernel-coreRed Hatcrypto: seqiv - Do not use req->iv after crypto_aead_encrypt7.5 Highkernel-coreRed Hatwifi: mac80211: Discard Beacon frames to non-broadcast address7.1 High- Show moreLoading…