kernel vulnerabilities (openEuler)
6,674 vulnerabilities.
kernelopenEulerip6_tunnel: clear skb2->cb[] in ip6ip6_err()9.8 CriticalkernelopenEulersched/psi: Shut down rtpoll_timer in psi_cgroup_free()7.8 HighkernelopenEulermm/filemap: __filemap_add_folio() restore index before retrying9.8 CriticalkernelopenEulerbpf, sockmap: Fix sk_redir use-after-free in send verdict8.4 HighkernelopenEulersctp: keep chunk->transport in step with the list it is queued on9.8 CriticalkernelopenEulersctp: fix use-after-free of cached ASCONF chunk9.8 CriticalkernelopenEulersctp: clear new_transport when removing a peer9.8 CriticalkernelopenEulernet/sched: cls_route: fix fastmap use-after-free on filter7.8 HighkernelopenEulernet: ipv6: clear suppressed fib6 rule result9.8 CriticalkernelopenEulervhost: reset the vring metadata cache on vring reconfiguration8.8 HighkernelopenEulernetfilter: nf_tables: make nft_object rhltable per table7.8 HighkernelopenEulerhwmon: (nct6775-core) Prevent access to unsupported weight registers7.8 HighkernelopenEulernet/sched: cls_u32: validate offshift to prevent shift-out-of-bounds7.8 HighkernelopenEulernet: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister()10.0 CriticalkernelopenEulerBluetooth: ISO: fix leaking sk after socket release6.8 MediumkernelopenEuleriommu/iommufd: Fix IOPF group ownership UAF8.8 HighkernelopenEulerKVM: s390: pci: Fix memory accounting for pinned/unpinned pages10.0 CriticalkernelopenEulerBluetooth: hci_sync: Fix advertising data UAFs8.8 HighkernelopenEulerBluetooth: HIDP: reject frames without a transaction header8.8 HighkernelopenEulerBluetooth: HIDP: validate numbered report payloads7.1 HighkernelopenEulerALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output()7.0 HighkernelopenEulerALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set7.3 HighkernelopenEulerbinfmt_misc: restore write access when removing an entry4.8 MediumkernelopenEulerbinfmt_misc: reject a flag character as the field delimiter7.1 HighkernelopenEulermm/page_reporting: use system_freezable_wq to fix UAF during suspend7.8 HighkernelopenEulerveth: convert frag_list skbs before running XDP9.1 CriticalkernelopenEulervxlan: use neigh_ha_snapshot() in route_shortcircuit()10.0 CriticalkernelopenEulervxlan: use pskb_network_may_pull() in route_shortcircuit()9.8 CriticalkernelopenEulerdrm/vmwgfx: validate DRAW_PRIMITIVES header size before division7.8 HighkernelopenEulerdrm/vmwgfx: bound DMA command body size against suffix pointer8.8 HighkernelopenEuleriommu/vt-d: Clear Present bit before tearing down scalable-mode context entry9.3 CriticalkernelopenEulermedia: uvcvideo: Fix deadlock if uvc_status_stop is called from async_ctrl.work5.7 MediumkernelopenEulerdrm/radeon: fix integer overflow in radeon_align_pitch()7.8 HighkernelopenEulerwifi: ath9k: fix OOB access from firmware tx status queue ID8.8 HighkernelopenEulervxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().9.8 CriticalkernelopenEuleripv6: addrconf: bail out of dad_failure when state is no longer POSTDAD9.8 CriticalkernelopenEulerIB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier7.8 HighkernelopenEulerRDMA/mlx5: Fix devx subscribe-event unwind NULL dereference6.8 MediumkernelopenEulerRDMA/srpt: fix integer overflow in immediate data length check9.8 CriticalkernelopenEulernvmet-tcp: fix page fragment cache leak in error path8.2 HighkernelopenEulernvme-multipath: fix flex array size in struct nvme_ns_head9.8 CriticalkernelopenEulerRDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe7.8 HighkernelopenEulerRDMA/rxe: Copy WQE to local buffer in non-SRQ receive path7.8 HighkernelopenEulermd/raid1,raid10: fix deadlock in read error recovery path10.0 CriticalkernelopenEulermd/raid1,raid10: fix error-path detection with md_cloned_bio()7.5 HighkernelopenEulerbpf: fix UAF by restoring RCU-delayed inode freeing in bpffs7.8 HighkernelopenEulerconfigfs_lookup(): don't leave ->s_dentry dangling on failure7.8 HighkernelopenEulervhost: fix vhost_get_avail_idx for a non empty ring7.4 HighkernelopenEulerocfs2: validate fast symlink target during inode read9.8 CriticalkernelopenEulerbpf: Clear rb node linkage when freeing bpf_rb_root7.8 High- Show moreLoading…