kernel vulnerabilities (Rocky Linux)
1,826 vulnerabilities.
-
kernelRocky Linux nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge() 9.2 Critical -
kernelRocky Linux KVM: arm64: Transfer the hyp stack pages out of the host stage-2 8.2 High -
kernelRocky Linux ipv4: validate checksum_start before completing checksum 9.3 Critical -
kernelRocky Linux ipv4: free inet_opt and ireq_opt after an RCU grace period 9.8 Critical -
kernelRocky Linux xfrm: hold net_device reference under RCU in bundle creation 7.8 High -
kernelRocky Linux netfilter: flowtable: hold reference on ct until flow is released 7.8 High -
kernelRocky Linux exec: Cleanup POSIX timers right after de_thread() 7.8 High -
kernelRocky Linux signal: Prevent exec() race 7.8 High -
kernelRocky Linux KEYS: encrypted: fix integer overflow of datablob_len 7.3 High -
kernelRocky Linux drm/amdgpu: Bound GPIO I2C table entry count from VBIOS 7.0 High -
kernelRocky Linux netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() 7.5 High -
kernelRocky Linux virtio-fs: avoid double-free on failed queue setup 8.4 High -
kernelRocky Linux perf: Fix addr_filter_ranges lifetime 7.8 High -
kernelRocky Linux smb: client: bound dirent name against end of SMB response in cifs_filldir 8.1 High -
kernelRocky Linux netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state 7.8 High -
kernelRocky Linux md/raid5-ppl: fix use-after-free in ppl_do_flush() 7.8 High -
kernelRocky Linux svcrdma: Reject Write/Reply chunks with segcount 0 9.1 Critical -
kernelRocky Linux SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry 9.8 Critical -
kernelRocky Linux nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() 7.8 High -
kernelRocky Linux NFSD: Prevent client use-after-free during blocked-lock reaping 9.8 Critical -
kernelRocky Linux scsi: target: iscsi: Reserve a terminator byte for the login payload 9.1 Critical -
kernelRocky Linux nvme: add missing SRCU grace period in error path 9.8 Critical -
kernelRocky Linux nvmet-auth: Synchronize timeout work during SQ teardown 9.8 Critical -
kernelRocky Linux KVM: nVMX: Always flush vpid02 on first use 8.8 High -
kernelRocky Linux media: cx231xx: reject geometry changes while the VBI queue is busy 7.8 High -
kernelRocky Linux scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read 9.1 Critical -
kernelRocky Linux drm/amdkfd: Add TLB flush after MES queue eviction/suspension 8.8 High -
kernelRocky Linux perf: Fix use-after-free when perf mmap() revival races with the last munmap() 7.8 High -
kernelRocky Linux vfio/pci: clear vdev->msi_perm after freeing it on init failure 8.8 High -
kernelRocky Linux KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation 9.3 Critical -
kernelRocky Linux nfsd: defer vfree of compound ops to fix rpc_status UAF 7.8 High -
kernelRocky Linux nfsd: don't free session slots that are still in use 9.8 Critical -
kernelRocky Linux nfsd: fix stale s2s_cp_stateids IDR entry for async COPY 9.8 Critical -
kernelRocky Linux nfsd: fix UAF in async copy cancel and shutdown 9.8 Critical -
kernelRocky Linux nfsd: initialize copy-notify stateid before publishing it 9.8 Critical -
kernelRocky Linux nfsd: revoke copy-notify stateids before dropping their reference 8.8 High -
kernelRocky Linux smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions 7.8 High -
kernelRocky Linux smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() 9.8 Critical -
kernelRocky Linux smb: client: reject a tree connect response whose byte count is too small 9.1 Critical -
kernelRocky Linux In the Linux kernel, the following vulnerability has been resolved: entry: Fix seccomp bypass... 8.4 High -
kernelRocky Linux svcrdma: Reject inline replies that overflow the pull-up buffer 9.8 Critical -
kernelRocky Linux svcrdma: Validate Read chunk positions before reconstruction 9.8 Critical -
kernelRocky Linux nvme-tcp: fix host memory disclosure on R2T for a read command 7.5 High -
kernelRocky Linux nvme-tcp: reject a read that transferred too few bytes 7.5 High -
kernelRocky Linux sctp: stop processing a packet once its association is deleted 9.8 Critical -
kernelRocky Linux net/iucv: filter frames in afiucv_hs_rcv() by ingress device 8.1 High -
kernelRocky Linux net: tun: bound receive headroom 7.8 High -
kernelRocky Linux net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry 8.2 High -
kernelRocky Linux KVM: s390: vsie: zero stale crypto bits 8.8 High -
kernelRocky Linux drm/vmwgfx: use check_add_overflow for shader size+offset bound 8.1 High - Show olderLoading…