Advisories · Technology
Linux kernel.
Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
media: i2c: imx415: Release runtime PM reference on VBLANK error
- Linux kernel
- CVSS 7.8 High
media: i2c: ov02a10: fix endpoint parsing use-after-free
- Linux kernel
- CVSS 7.8 High
media: i2c: ov7740: fix use-after-destroy in remove
- Linux kernel
-
media: intel/ipu6: fix async notifier cleanup leak on parse error
- Linux kernel
- CVSS 8.4 High
media: platform: mtk-mdp3: Fix SCP device refcounting
- Linux kernel
-
media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup
- Linux kernel
- CVSS 7.8 High
media: rc: sunxi-cir: Unregister rc device on probe failure
- Linux kernel
- CVSS 7.8 High
media: rkvdec: hevc: guard INTER_REF_PIC_SET_PRED index underflow
- Linux kernel
-
media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak
- Linux kernel
- CVSS 7.8 High
media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure
- Linux kernel
-
media: s2255: bound JPEG frame size before copying into the buffer
- Linux kernel
-
media: s2255: check firmware size before reading trailing marker
- Linux kernel
- CVSS 8.4 High
media: saa7164: fix cleanup on resource allocation failure
- Linux kernel
-
media: tda18250: fix possible integer overflow
- Linux kernel
- CVSS 7.8 High
media: ti: vpe: quiesce overflow recovery before freeing streams
- Linux kernel
-
media: v4l2-async: avoid deleting unlinked ASC entry on link error
- Linux kernel
- CVSS 7.8 High
media: v4l2-ctrls: validate HEVC EXT SPS RPS counts
- Linux kernel
-
media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link
- Linux kernel
-
media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure
- Linux kernel
- CVSS 7.8 High
media: zoran: Avoid freeing a registered video_device twice
- Linux kernel
-
media: qcom: iris: use disable_irq() during power-off
- Linux kernel
-
media: chips-media: wave5: Add timeout while stop_streaming
- Linux kernel
-
media: chips-media: wave5: Defer job_finish() only when a DEC_PIC was queued
- Linux kernel
-
media: chips-media: wave5: Resume device before setting EOS flag
- Linux kernel
-
scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers
- Linux kernel
-
scsi: qla2xxx: Bound i2c->length in I2C bsg handlers
- Linux kernel
- CVSS 7.5 High
scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check
- Linux kernel
-
scsi: qla2xxx: Fix BSG job leak on validate flash image error path
- Linux kernel
- CVSS 8.1 High
scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()
- Linux kernel
- CVSS 8.8 High
scsi: qla2xxx: Initialize NVMe abort_work once at submission
- Linux kernel
-
scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak
- Linux kernel
-
scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions()
- Linux kernel
- CVSS 9.8 CriticalCritical · CVSS 9+
scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject
- Linux kernel
- CVSS 8.4 High
scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation
- Linux kernel
-
scsi: qla2xxx: Serialize flash version read in reset handler
- Linux kernel
- CVSS 7.8 High
scsi: qla2xxx: Fix cs84xx use-after-free on host teardown
- Linux kernel
-
scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump
- Linux kernel
-
scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state()
- Linux kernel
-
scsi: qla2xxx: Fix FCE trace enable parsing in debugfs
- Linux kernel
-
scsi: qla2xxx: Don't query firmware state while chip is down
- Linux kernel
- CVSS 8.8 High
scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path
- Linux kernel
- CVSS 8.1 High
scsi: qla2xxx: Quiesce response IRQ before freeing request queue
- Linux kernel
- CVSS 9.8 CriticalCritical · CVSS 9+
scsi: qla2xxx: Avoid double completion in async IOCB timeout
- Linux kernel
- CVSS 9.1 CriticalCritical · CVSS 9+
scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read
- Linux kernel
-
scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry()
- Linux kernel
- CVSS 8.8 High
scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition
- Linux kernel
-
scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak
- Linux kernel
-
scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started
- Linux kernel
- CVSS 7.8 High
f2fs: only redirty pinned folios in redirty_blocks
- Linux kernel
- CVSS 7.1 High
f2fs: validate MOVE_RANGE destination size
- Linux kernel
-
f2fs: use the mount idmap for the owner check in f2fs_xattr_advise_set()
- Linux kernel
- CVSS 7.1 High
f2fs: limit recovery filename logging to stored length
- Linux kernel
-
f2fs: fix dentry folio leak in find_in_level
- Linux kernel
- CVSS 7.8 High
f2fs: fix folio_nr_pages() race after put in large folio invalidate
- Linux kernel
-
f2fs: avoid NULL checkpoint thread access in sysfs
- Linux kernel
-
f2fs: fix to migrate all curseg types during free_segment_range
- Linux kernel
-
f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages()
- Linux kernel
- CVSS 7.8 High
f2fs: fix to clear dirty flag on folio in error path
- Linux kernel
-
f2fs: protect critical_task_priority updates with s_umount
- Linux kernel
-
f2fs: fix valid block count leak on data block allocation failure
- Linux kernel