Advisories · Technology
Linux kernel.
Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
batman-adv: dat: avoid unaligned fault in IP extraction
- Linux kernel
-
batman-adv: bla: fix freeing of claims on meshif deletion
- Linux kernel
- CVSS 8.0 High
clk: meson: align gxbb_32k_clk_sel number of parents with actual count
- Linux kernel
-
ASoC: cs35l33: drain threaded IRQ before runtime suspend
- Linux kernel
-
ASoC: cs35l34: drain threaded IRQ before runtime suspend
- Linux kernel
-
ASoC: hdac_hda: Fix hlink refcount leak on component registration failure
- Linux kernel
- CVSS 8.4 High
ASoC: loongson: Fix error handling in ACPI property parsing
- Linux kernel
- CVSS 7.8 High
iio: buffer: Fix potential use-after-free in anonymous buffer release
- Linux kernel
- CVSS 7.8 High
iio: buffer: Make IIO DMA fence release RCU-safe
- Linux kernel
- CVSS 7.8 High
iio: buffer: Tie IIO dma fence lock lifetime to the fence
- Linux kernel
-
iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable
- Linux kernel
- CVSS 7.8 High
iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF
- Linux kernel
-
iio: chemical: sgp30: Handle IAQ thread creation failure
- Linux kernel
-
iio: dac: m62332: Fix regulator reference count imbalance
- Linux kernel
-
iio: light: apds9306: fix PM reference leak in apds9306_read_data()
- Linux kernel
-
iio: light: ltrf216a: fix runtime PM reference leak in error path
- Linux kernel
-
iio: pressure: dps310: fix NULL pointer dereference on ACPI probe
- Linux kernel
- CVSS 8.8 High
KVM: nVMX: Always flush vpid02 on first use
- Linux kernel
-
KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit
- Linux kernel
- CVSS 9.3 CriticalCritical · CVSS 9+
KVM: nVMX: Service local TLB flushes on failed nested VM-Enter
- Linux kernel
- CVSS 8.8 High
KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU
- Linux kernel
- CVSS 8.8 High
KVM: x86/mmu: Consume the locked rmap value in the lockless rmap walk
- Linux kernel
- CVSS 7.1 High
KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock
- Linux kernel
-
KVM: s390: Fix length check __import_wp_info()
- Linux kernel
-
KVM: s390: Fix memory leak in guest debug handling
- Linux kernel
-
KVM: s390: Fix old_data leak in guest debug error path
- Linux kernel
-
KVM: s390: Free guest debug data on vcpu destroy
- Linux kernel
- CVSS 7.8 High
KVM: s390: Take srcu when importing watchpoint data
- Linux kernel
-
KVM: s390: Zero initialize data structures for inject_pfault_token
- Linux kernel
- CVSS 7.8 High
KVM: s390: Fix memory corruption by not reinjecting CK machine checks
- Linux kernel
- CVSS 7.8 High
KVM: s390: keyop: use mmu_lock to read gmap->asce
- Linux kernel
- CVSS 9.3 CriticalCritical · CVSS 9+
KVM: arm64: Correctly handle end of VA space TLBI invalidation
- Linux kernel
-
KVM: arm64: Handle VNCR TLB invalidation race with vcpu_put() VNCR unmapping
- Linux kernel
- CVSS 9.3 CriticalCritical · CVSS 9+
KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry
- Linux kernel
- CVSS 9.3 CriticalCritical · CVSS 9+
KVM: arm64: Remove VM-wide VNCR mapping counter
- Linux kernel
- CVSS 9.3 CriticalCritical · CVSS 9+
KVM: arm64: Sign-extend VA for range-based TLBI invalidation
- Linux kernel
- CVSS 8.8 High
KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables
- Linux kernel
- CVSS 7.1 High
KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save
- Linux kernel
- CVSS 7.9 High
KVM: arm64: Correctly cap TLBI Range to the architural limit
- Linux kernel
- CVSS 7.3 High
LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc
- Linux kernel
-
LoongArch: KVM: Free init resources if kvm_init() fails
- Linux kernel
- CVSS 8.8 High
LoongArch: KVM: Preserve memslot arch flags on KVM_MR_FLAGS_ONLY
- Linux kernel
- CVSS 8.8 High
LoongArch: KVM: Validate MSI data before routing it to EIOINTC
- Linux kernel
- CVSS 7.8 High
LoongArch: BPF: Refactor jump offset calculation in tail call
- Linux kernel
-
LoongArch: BPF: Move arena register slot below TCC context
- Linux kernel
- CVSS 8.4 High
LoongArch: Fix acpi_package_ids[] array overflow
- Linux kernel
- CVSS 7.8 High
LoongArch: Do not save/restore percpu base register in rethook trampoline
- Linux kernel
- CVSS 7.8 High
LoongArch: Avoid preempt count underflow without probe
- Linux kernel
-
media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref
- Linux kernel
-
media: cec: core: Fix kmemleak due to missed rc_free_device() call
- Linux kernel
- CVSS 7.8 High
media: cec: disable delayed work before freeing an interrupted transmit
- Linux kernel
- CVSS 8.8 High
media: cec: extron-da-hd-4k-plus: add sanity check
- Linux kernel
- CVSS 7.5 High
media: cec: Serialize exclusive follower delivery
- Linux kernel
-
media: cedrus: fix memory leak in cedrus_init_ctrls()
- Linux kernel
-
media: cobalt: Avoid freeing ALSA private data twice
- Linux kernel
- CVSS 7.8 High
media: cx231xx: reject geometry changes while the VBI queue is busy
- Linux kernel
- CVSS 7.8 High
media: cx23885: cancel NetUP CI work before teardown
- Linux kernel
-
media: em28xx: defer audio-only extension registration
- Linux kernel
-
media: em28xx: fix use-after-free of dev_next->devlist on disconnect
- Linux kernel
- CVSS 7.8 High
media: go7007: defer the ALSA v4l2 put until card release
- Linux kernel