kernel vulnerabilities (openEuler)
6,674 vulnerabilities.
kernelopenEulernfsd: revoke copy-notify stateids before dropping their reference8.8 HighkernelopenEulerNFSD: Prevent lock owner use-after-free during client teardown9.8 CriticalkernelopenEulerlibceph: reject buckets with mismatched CRUSH ids9.8 CriticalkernelopenEulerceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock9.8 CriticalkernelopenEulerceph: fix UAF in check_new_map() on session freed during unlock9.8 CriticalkernelopenEulerceph: bound copied dentry name length in NFS export get_name9.8 CriticalkernelopenEulerceph: bound num_export_targets array for mds info v2/v39.1 CriticalkernelopenEulerceph: bound xattr value length in __build_xattrs()9.1 CriticalkernelopenEulerceph: cap delegated inode count in ceph_parse_deleg_inos()7.5 HighkernelopenEulerceph: do not repeat ceph_trim_dentries() if no progress possible7.5 HighkernelopenEuleraudit: avoid dropping live tree ref on fsnotify rule autoremove9.8 CriticalkernelopenEulersmb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T29.8 CriticalkernelopenEulersmb: client: clear ce->tgthint in free_tgts()9.8 CriticalkernelopenEulersmb: client: fix ALIGN() overflow in symlink_data() error context loop9.1 CriticalkernelopenEulersmb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()9.8 CriticalkernelopenEulersmb: client: reject a tree connect response whose byte count is too small9.1 CriticalkernelopenEulereventfs: Initialize ei->children and ei->list in init_ei()9.8 CriticalkernelopenEulerecryptfs: pass packet set buffer size to parser7.1 HighkernelopenEulerfbdev: ssd1307fb: defer I2C transfers from damage callbacks6.8 MediumkernelopenEulerata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes8.2 HighkernelopenEulerbpf: Disable preemption in __bpf_get_stack7.8 HighkernelopenEulerlibnvdimm/labels: Prevent integer overflow in __nd_label_validate()7.8 HighkernelopenEulermd: do overflow check for sb->bblog_shift in super_1_load()7.8 HighkernelopenEulermpls: reload header after pskb_may_pull()9.8 CriticalkernelopenEulermptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction8.2 HighkernelopenEulersunrpc: defer rq_argp and rq_resp free until after RCU grace period7.8 HighkernelopenEulerSUNRPC: fix gssx_dec_option_array error path bugs7.5 HighkernelopenEulersvcrdma: Reject inline replies that overflow the pull-up buffer9.8 CriticalkernelopenEulersvcrdma: Reject Read lists that exceed the page budget7.5 HighkernelopenEulersched/core: Make core-sched flips wait for in-flight selections7.8 HighkernelopenEulerqede: Fix NULL pointer dereference in TPA fragment processing7.5 HighkernelopenEulerRDMA/cxgb4: Cancel reg_work before freeing device on remove7.8 HighkernelopenEulerRDMA/ucma: Lock the handler in ucma_set_ib_path()7.8 HighkernelopenEulerocfs2: validate directory-index entry counts when reading metadata9.8 CriticalkernelopenEuleropenvswitch: Fix CT limit teardown use-after-free7.8 HighkernelopenEuleropenvswitch: only skb_tx_error() a packet we are about to drop7.8 HighkernelopenEulerlockd: pin next file across nlm_inspect_file lock-drop9.8 CriticalkernelopenEulernvme-tcp: fix host memory disclosure on R2T for a read command7.5 HighkernelopenEulernvme-tcp: reject a read that transferred too few bytes7.5 HighkernelopenEulersctp: stop processing a packet once its association is deleted9.8 CriticalkernelopenEulersctp: drop a chunk if its transport was removed9.8 CriticalkernelopenEulersctp: fix NULL deref on untransmitted RECONF completion7.5 HighkernelopenEulersctp: fix stream->outcnt underflow on duplicate RECONF responses7.5 HighkernelopenEuleriommu/vt-d: Force requesting ACS when tboot is enabled9.3 CriticalkernelopenEulermmc: via-sdmmc: stop card-detect handling on probe failure7.8 HighkernelopenEulerxdp: fix zero-copy frame layout9.8 CriticalkernelopenEulerslip: fix use-after-free in sl_sync()7.8 HighkernelopenEulernet: openvswitch: fix flow mask use-after-free on flow deletion7.8 HighkernelopenEulernet: thunderbolt: Mark the connection down when bringing it up fails8.8 HighkernelopenEulernet/smc: do not dereference an unset send buffer on the SMC-D teardown path5.7 Medium- Show moreLoading…