kernel vulnerabilities (Rocky Linux)
1,867 vulnerabilities.
kernelRocky Linuxfuse: re-lock request before replacing page cache folio7.8 HighkernelRocky Linuxdrm/amdgpu: zero-initialize GART table on allocation8.8 HighkernelRocky Linuxvsock/virtio: fix zerocopy completion for multi-skb sends5.5 MediumkernelRocky Linuxaf_unix: Set gc_in_progress to true in unix_gc().7.1 HighkernelRocky LinuxKVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use8.8 HighkernelRocky LinuxKVM: x86: Fix shadow paging use-after-free due to unexpected role8.8 HighkernelRocky Linuxipv4: account for fraggap on the paged allocation path7.8 HighkernelRocky Linuxdrm/i915/gem: Fix phys BO pread/pwrite with offset7.8 HighkernelRocky Linuxfhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh()7.8 HighkernelRocky Linuxdrm/amd/display: Use krealloc_array() in dal_vector_reserve()7.0 HighkernelRocky Linuxvfio/pci: Clean up DMABUFs before disabling function8.8 HighkernelRocky Linuxdrm/xe/eustall: Fix drm_dev_put called before stream disable in close7.8 HighkernelRocky Linuxiommu/vt-d: Avoid NULL pointer dereference or refcount corruption8.8 HighkernelRocky LinuxKVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation8.8 HighkernelRocky Linuxipv6: mcast: Fix use-after-free when processing MLD queries8.8 HighkernelRocky Linuxipvs: clear the svc scheduler ptr early on edit7.8 HighkernelRocky Linuxnetfilter: conntrack_irc: fix possible out-of-bounds read8.2 HighkernelRocky Linuxnet/sched: act_api: use RCU with deferred freeing for action lifecycle7.8 HighkernelRocky Linuxipv6: anycast: insert aca into global hash under idev->lock7.8 HighkernelRocky LinuxBluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()8.0 HighkernelRocky LinuxBluetooth: RFCOMM: validate skb length in MCC handlers8.1 HighkernelRocky Linuxsctp: validate cached peer INIT chunk length in COOKIE_ECHO processing9.8 CriticalkernelRocky Linuxxfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()7.8 HighkernelRocky Linuxtcp: restrict SO_ATTACH_FILTER to priv users5.5 MediumkernelRocky Linuxnet: add pskb_may_pull() to skb_gro_receive_list()7.5 HighkernelRocky Linuxnet/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list8.7 HighkernelRocky Linuxipv6: sit: reload inner IPv6 header after GSO offloads9.8 CriticalkernelRocky Linuxnet: guard timestamp cmsgs to real error queue skbs7.1 HighkernelRocky LinuxBluetooth: hci_sync: reject oversized Broadcast Announcement prepend7.8 HighkernelRocky Linuxaccel/ivpu: Add buffer overflow check in MS get_info_ioctl7.1 HighkernelRocky Linuxaccel/ivpu: Fix signed integer truncation in IPC receive7.8 HighkernelRocky LinuxUSB: serial: io_ti: fix heap overflow in get_manuf_info()6.8 MediumkernelRocky LinuxALSA: timer: Forcibly close timer instances at closing7.8 HighkernelRocky LinuxALSA: timer: Fix UAF at snd_timer_user_params()7.8 HighkernelRocky Linuxmm/huge_memory: update file PMD counter before folio_put()7.8 HighkernelRocky Linuxzram: fix use-after-free in zram_bvec_write_partial()7.8 HighkernelRocky Linuxwifi: nl80211: reject oversized EMA RNR lists7.8 HighkernelRocky LinuxIB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN9.8 CriticalkernelRocky LinuxIn the Linux kernel, the following vulnerability has been resolved: futex/requeue: Prevent NULL...5.5 MediumkernelRocky Linuxmm/list_lru: drain before clearing xarray entry on reparent7.8 HighkernelRocky Linuxdrm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX117.8 HighkernelRocky Linuxdrm/amd/display: Clamp VBIOS HDMI retimer register count to array size7.8 HighkernelRocky Linuxnetfilter: require Ethernet MAC header before using eth_hdr()9.4 CriticalkernelRocky Linuxnet: pull headers in qdisc_pkt_len_segs_init()8.4 HighkernelRocky Linuxppp: require CAP_NET_ADMIN in target netns for unattached ioctls8.8 HighkernelRocky LinuxBluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error5.5 MediumkernelRocky LinuxBluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER8.8 HighkernelRocky LinuxBluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp8.8 HighkernelRocky Linuxdm cache policy smq: fix missing locks in invalidating cache blocks7.8 HighkernelRocky Linuxdm log: fix out-of-bounds write due to region_count overflow7.8 High- Show moreLoading…