Advisories · Technology
Linux kernel.
Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.8 High
net/sched: sch_teql: restore skb->dev on the slave failure path
- Linux kernel
-
tpm: st33zp24: Return zero on status read failure
- Linux kernel
- CVSS 7.8 High
crypto: acomp - allocate async request context when cloning
- Linux kernel
-
ASoC: dapm: Fix off-by-one check on the second enum channel
- Linux kernel
- CVSS 7.5 High
libceph: validate banner payload length
- Linux kernel
-
samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modify
- Linux kernel
-
net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure
- Linux kernel
-
drm/xe: Reject page faults from non-fault-mode scratch VMs
- Linux kernel
-
virtio-net: Ensure that TCP packets don't overflow gso_segs
- Linux kernel
- CVSS 7.1 High
netfilter: nf_tables: move hardware offload step after building the chain blob
- Linux kernel
-
netfilter: nf_tables: skip double clone set expressions on element insert
- Linux kernel
-
ALSA: control: Don't add invalid kcontrols to LED layer
- Linux kernel
- CVSS 7.5 High
net: stmmac: restore NET_IP_ALIGN in the RX DMA offset
- Linux kernel
-
net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup
- Linux kernel
- CVSS 7.8 High
slip: remove slip_hangup() to fix use-after-free in slip_receive_buf()
- Linux kernel
-
net: fec: only stop PTP if it was initialized
- Linux kernel
-
usb: atm: usbatm: fix invalid ci_range initialization
- Linux kernel
-
tcp: fix corruption of urgent data on multi-segment retransmit
- Linux kernel
-
net/sched: sch_htb: limit htb_classify inner-class filter hops
- Linux kernel
- CVSS 7.8 High
tcp: reject non zerocopy devmem tx
- Linux kernel
- CVSS 9.3 CriticalCritical · CVSS 9+
net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy()
- Linux kernel
- CVSS 9.8 CriticalCritical · CVSS 9+
fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()
- Linux kernel
- CVSS 7.8 High
drm/xe: Don't hand out the flat CCS storage as usable VRAM
- Linux kernel
- CVSS 7.8 High
mm/page_alloc: don't spin_trylock() in NMI on UP
- Linux kernel
- CVSS 7.8 High
USB: gadget: ffs: fix mm lifetime handling
- Linux kernel
- CVSS 7.8 High
usb: gadget: f_fs: Fix Use-After-Free in AIO error path
- Linux kernel
- CVSS 7.8 High
zram: fix slot lock bit position on big-endian 64-bit
- Linux kernel
- CVSS 9.8 CriticalCritical · CVSS 9+
ceph: properly decrypt filenames in vmalloc() buffers
- Linux kernel
- CVSS 8.8 High
HID: sony: clean up device list on probe failure
- Linux kernel
-
KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped
- Linux kernel
-
NFSD: Guard admin state-revocation walks with NFSD_NET_UP
- Linux kernel
- CVSS 9.8 CriticalCritical · CVSS 9+
NFSD: Prevent client use-after-free during export state revocation
- Linux kernel
- CVSS 9.8 CriticalCritical · CVSS 9+
NFSD: Prevent client use-after-free during close_lru reaping
- Linux kernel
- CVSS 9.8 CriticalCritical · CVSS 9+
NFSD: Prevent client use-after-free during blocked-lock reaping
- Linux kernel
-
drm/amd/display: fix division by zero in get_estimated_bw()
- Linux kernel
-
usb: image: mdc800: change kmalloc() to kzalloc()
- Linux kernel
-
ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()
- Linux kernel
- CVSS 7.8 High
media: usbtv: keep device alive while ALSA card exists
- Linux kernel
-
usb-storage: ene_ub6250: fix race between scan work and probe
- Linux kernel
- CVSS 7.8 High
usb: dwc3: clear forceRM when issuing EndTransfer
- Linux kernel
-
usb: storage: realtek_cr: fix use-after-free on disconnect
- Linux kernel
-
usb: typec: hd3ss3220: track VBUS enable state per consumer
- Linux kernel
- CVSS 7.8 High
usb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stop
- Linux kernel
- CVSS 7.8 High
usb: typec: qcom-pmic: cancel reset_work on stop
- Linux kernel
- CVSS 7.7 High
usb: typec: ucsi: displayport: Fix OOB altmode array index
- Linux kernel
-
usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs
- Linux kernel
-
usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()
- Linux kernel
- CVSS 7.8 High
usb: gadget: f_midi2: fix use-after-free in string attribute show path
- Linux kernel
-
usb: gadget: f_midi: initialize work in f_midi_alloc()
- Linux kernel
-
USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()
- Linux kernel
-
usb: gadget: fix null pointer dereference in usb_put_function_instance()
- Linux kernel
- CVSS 8.8 High
staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr()
- Linux kernel
- CVSS 7.1 High
staging: rtl8723bs: fix OOB read in rtw_action_frame_parse()
- Linux kernel
- CVSS 7.1 High
staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie()
- Linux kernel
-
xhci: fix lost bounce buffers on TDs spanning several ring segments
- Linux kernel
- CVSS 7.8 High
tracing: Have show_event_filters/triggers files take trace array ref
- Linux kernel
- CVSS 7.8 High
tracing: Take trace_array reference when opening options file
- Linux kernel
- CVSS 9.8 CriticalCritical · CVSS 9+
spi: Fix DMA mapping ownership on partial map failure
- Linux kernel
- CVSS 9.1 CriticalCritical · CVSS 9+
scsi: target: iscsi: Reserve a terminator byte for the login payload
- Linux kernel
- CVSS 7.8 High
scsi: bsg: Cap io_uring sense copy to max_response_len
- Linux kernel