kernel vulnerabilities (Rocky Linux)
1,867 vulnerabilities.
kernelRocky LinuxRDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp7.3 HighkernelRocky LinuxRDMA/rxe: Fix OOB in free_rd_atomic_resources()8.5 HighkernelRocky Linuxxfrm: ah6: validate routing header segments_left7.3 HighkernelRocky Linuxnet: bridge: mcast: fix use-after-free of a master VLAN's multicast context7.3 HighkernelRocky Linuxusb: usbfs: fix use-after-free of usb_device in usbdev_release()7.3 HighkernelRocky Linuxipv6: fix use-after-free in ip6_finish_output2()8.4 HighkernelRocky Linuxfutex: Fix race on the initial mm->futex.phash.ref allocation7.3 HighkernelRocky Linuxipvs: do not propagate one-packet flag to synced conns9.8 CriticalkernelRocky Linuxinet: frags: strip GSO state from fragments before reassembly8.6 HighkernelRocky Linuxmptcp: options: reset DSS fields in case of unexpected size9.8 CriticalkernelRocky Linuxs390/qeth: validate user buffer length in SNMP and ARP query ioctls8.4 HighkernelRocky Linuxpowerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak8.8 HighkernelRocky Linuxs390/vfio_ccw: Cancel existing workqueues8.8 HighkernelRocky Linuxxfs: bounds-check buffer log item's dirty bitmap8.4 HighkernelRocky Linuxxfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN7.1 HighkernelRocky Linuxcrypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()7.8 HighkernelRocky Linuxaf_unix: Unlink scc_entry in unix_del_edge().7.8 HighkernelRocky Linuxperf: Reject exited events as group leaders7.8 HighkernelRocky Linuxsctp: validate cookie AUTH state before use9.8 CriticalkernelRocky Linuxnetfilter: flowtable: publish GC-visible tuple last9.8 CriticalkernelRocky Linuxipvlan: inherit needed_headroom and needed_tailroom from phy_dev9.8 CriticalkernelRocky Linuxudp: fix potential use-after-free in tunnel segmentation10.0 CriticalkernelRocky Linuxipvs: clear IPv4 options after rebasing tunnel ICMP errors9.8 CriticalkernelRocky LinuxALSA: usx2y: bound the hwdep mmap fault offset7.8 HighkernelRocky Linuxnet: smc: fix splice entry lifetime imbalance in smc_rx_splice8.4 HighkernelRocky Linuxsctp: keep chunk->transport in step with the list it is queued on9.8 CriticalkernelRocky Linuxsctp: clear new_transport when removing a peer9.8 CriticalkernelRocky Linuxnet/sched: cls_route: fix fastmap use-after-free on filter7.8 HighkernelRocky Linuxpacket: use consistent hard_header_len in non-ring send paths7.8 HighkernelRocky Linuxnet: ipv6: clear suppressed fib6 rule result9.8 CriticalkernelRocky Linuxdmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open()7.8 HighkernelRocky Linuxnetfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()9.8 CriticalkernelRocky Linuxscsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer9.8 CriticalkernelRocky Linuxmm/hugetlb: fix list corruption in allocate_file_region_entries()7.8 HighkernelRocky LinuxKVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active8.2 HighkernelRocky LinuxKVM: s390: pci: Reject adapter interrupt forwarding if already enabled8.8 HighkernelRocky LinuxBluetooth: mgmt: fix UAF in pair command cancellation7.8 HighkernelRocky LinuxBluetooth: hci_sync: Fix advertising data UAFs8.8 HighkernelRocky Linuxnet: bridge: stop fast-leave after deleting a port group9.8 CriticalkernelRocky Linuxdrm/amdkfd: hold event_mutex while checkpointing CRIU events7.8 HighkernelRocky Linuxnvmet-tcp: check return value of nvmet_tcp_set_queue_sock7.5 HighkernelRocky Linuxtipc: require net admin for TIPCv2 netlink mutators7.8 HighkernelRocky Linuxnet/liquidio: drop cached VF pci_dev LUT9.3 CriticalkernelRocky Linuxnetfilter: nft_lookup: fix catchall element handling with inverted lookups9.1 CriticalkernelRocky Linuxipvs: ensure inner headers in ICMP errors are in headroom9.8 CriticalkernelRocky Linuxcifs: validate DFS referral string offsets9.4 CriticalkernelRocky LinuxSUNRPC: pin upper rpc_clnt across the TLS connect_worker9.8 CriticalkernelRocky Linuxnet: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post()8.4 HighkernelRocky LinuxKVM: arm64: vgic: Check the interrupt is still ours before migrating it9.3 CriticalkernelRocky LinuxKVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling9.3 Critical- Show moreLoading…