kernel vulnerabilities (Rocky Linux)
1,867 vulnerabilities.
kernelRocky Linuxsecurity/keys: fix missed RCU read section on lookup7.8 HighkernelRocky Linuxnetfilter: synproxy: refresh tcphdr after skb_ensure_writable9.8 CriticalkernelRocky Linuxipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()7.8 HighkernelRocky Linuxethtool: cmis: require exact CDB reply length7.8 HighkernelRocky Linuxtunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()9.8 CriticalkernelRocky Linuxvxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu()9.8 CriticalkernelRocky Linuxtunnels: do not assume transport header in iptunnel_pmtud_check_icmp()9.1 CriticalkernelRocky Linuxethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES7.8 HighkernelRocky Linuxnet/handshake: hand off the pinned file reference to accept_doit9.8 CriticalkernelRocky Linuxnet/handshake: Drain pending requests at net namespace exit9.8 CriticalkernelRocky LinuxBluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp8.8 HighkernelRocky LinuxBluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close8.8 HighkernelRocky Linuxsctp: fix race between sctp_wait_for_connect and peeloff7.8 HighkernelRocky Linuxvsock/virtio: bind uarg before filling zerocopy skb7.8 HighkernelRocky Linuxusb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes()5.5 MediumkernelRocky Linuxmemfd: deny writeable mappings when implying SEAL_WRITE8.4 HighkernelRocky LinuxBluetooth: HIDP: fix missing length checks in hidp_input_report()8.8 HighkernelRocky LinuxBluetooth: ISO: fix UAF in iso_recv_frame8.8 HighkernelRocky LinuxBluetooth: ISO: serialize iso_sock_clear_timer with socket lock7.8 HighkernelRocky LinuxBluetooth: hci_sync: fix UAF in hci_le_create_cis_sync8.8 HighkernelRocky Linuxmacsec: fix replay protection at XPN lower-PN wrap8.1 HighkernelRocky Linuxocteontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify8.8 HighkernelRocky Linuxip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().8.8 HighkernelRocky Linuxipv6: validate extension header length before copying to cmsg7.1 HighkernelRocky Linuxxfrm: input: hold netns during deferred transport reinjection8.8 HighkernelRocky Linuxip6: vti: Use ip6_tnl.net in vti6_changelink().8.8 HighkernelRocky Linuxnetfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check8.2 HighkernelRocky LinuxUSB: serial: mxuport: fix memory corruption with small endpoint7.8 HighkernelRocky Linuxscsi: scsi_transport_fc: Widen FPIN pname walker counter to u328.1 HighkernelRocky Linuxscsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()9.8 CriticalkernelRocky Linuxscsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf9.8 CriticalkernelRocky Linuxscsi: target: iscsi: Validate CHAP_R length before base64 decode9.8 CriticalkernelRocky Linuxdrm/i915: Fix potential UAF in TTM object purge7.8 HighkernelRocky Linuxdrm/amdgpu: fix amdgpu_hmm_range_get_pages7.8 HighkernelRocky Linuxarm64: tlb: Flush walk cache when unsharing PMD tables7.8 HighkernelRocky Linuxwifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap7.6 HighkernelRocky Linuxmac802154: llsec: add skb_cow_data() before in-place crypto8.8 HighkernelRocky Linuxnet: ip_gre: require CAP_NET_ADMIN in the device netns for changelink8.8 HighkernelRocky LinuxKEYS: fix overflow in keyctl_pkey_params_get_2()7.8 HighkernelRocky Linuxkeys: Pin request_key_auth payload in instantiate paths7.8 HighkernelRocky Linuxexfat: fix potential use-after-free in exfat_find_dir_entry()9.8 CriticalkernelRocky Linuxblk-cgroup: fix UAF in __blkcg_rstat_flush()7.8 HighkernelRocky Linuxtipc: fix slab-use-after-free Read in tipc_aead_decrypt_done8.8 HighkernelRocky LinuxpNFS: Fix use-after-free in pnfs_update_layout()9.8 CriticalkernelRocky LinuxKVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path7.8 HighkernelRocky Linuxnfsd: release layout stid on setlease failure9.8 CriticalkernelRocky LinuxNFSD: Fix SECINFO_NO_NAME decode error cleanup9.8 CriticalkernelRocky Linuxnfsd: fix posix_acl leak on SETACL decode failure7.5 HighkernelRocky LinuxNFSv4/flexfiles: reject zero filehandle version count7.5 HighkernelRocky LinuxNFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr7.5 High- Show moreLoading…