Advisories · Technology
Linux kernel.
Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
ntfs: serialize resident iomap reads with mrec_lock
- Linux kernel
-
vdpa_sim: fix cleanup after worker creation failure
- Linux kernel
-
virtio_balloon: quiesce balloon work before device shutdown
- Linux kernel
-
vdpa/mlx5: fix wrong list iterated in add_direct_chain error path
- Linux kernel
-
virtio: rtc: time out alarm requests
- Linux kernel
-
rtc: pcf8563: fix clock provider leak on unbind
- Linux kernel
-
smb: client: fix request buffer leak in smb2_new_read_req()
- Linux kernel
-
irqchip/renesas-rzg2l: Fix loss of interrupt
- Linux kernel
-
irqchip/ast2700-intc: Avoid allocating in the irq_domain activate() callback
- Linux kernel
-
clk: visconti: Make sure clk_init_data is fully initialized
- Linux kernel
-
irqchip/gic-v5: Clear per-CPU IRS data on teardown
- Linux kernel
- CVSS 8.4 High
irqchip/gic-v5: Check get_logical_index() return value in MADT IAFFID parsing
- Linux kernel
-
ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup
- Linux kernel
- CVSS 7.8 High
ntfs: fix off-by-one page overflow in ntfs_decompress()
- Linux kernel
-
ntfs: validate usa_ofs before preserving the update sequence number
- Linux kernel
-
ALSA: mtpav: shut down output timer before card teardown
- Linux kernel
-
xsk: fix NULL pointer dereference in __xsk_rcv()
- Linux kernel
-
net: bridge: Reject descending VLAN tunnel ranges
- Linux kernel
-
netdevsim: update queue NAPI association on queue reset
- Linux kernel
-
net: qlcnic: validate unified ROM sections before loading
- Linux kernel
- CVSS 7.8 High
ip6mr: do not clone dst in ip6mr_cache_report()
- Linux kernel
- CVSS 9.4 CriticalCritical · CVSS 9+
inetpeer: randomize RB-tree node comparison using SipHash
- Linux kernel
-
net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue
- Linux kernel
-
net/smc: free stashed qentry before overwrite in REQ_ADD_LINK to ADD_LINK transition
- Linux kernel
-
net/smc: free pending qentry in smc_llc_flow_stop() before memset
- Linux kernel
-
net: bridge: arp/nd proxy: fix reading neigh ha
- Linux kernel
-
vxlan: fix reading neigh ha
- Linux kernel
- CVSS 9.8 CriticalCritical · CVSS 9+
NFSv4.1: zero referring call lists before decoding
- Linux kernel
- CVSS 7.5 High
NFSv4.2: fix LAYOUTSTATS send buffer exhaustion
- Linux kernel
- CVSS 7.5 High
NFSv4/pnfs: key the data server cache on the NFS version
- Linux kernel
-
bnxt_en: Fix call to hardware monitoring event handler
- Linux kernel
-
ptp: netc: fix period truncation and potential divide-by-zero in PEROUT
- Linux kernel
-
net/sched: account classifier filter allocations to memcg
- Linux kernel
-
net: sparx5: fix sleep in atomic context in MAC table access
- Linux kernel
-
Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition
- Linux kernel
-
fuse: invalidate the correct range after O_APPEND direct write
- Linux kernel
-
fuse: Fix the condition to enable over-io-uring
- Linux kernel
-
arm64: process: Fix context switching MTE store-only tag check
- Linux kernel
- CVSS 7.8 High
Bluetooth: L2CAP: access chan->conn safely in get/setsockopt
- Linux kernel
- CVSS 8.0 High
Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN
- Linux kernel
- CVSS 8.0 High
Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan
- Linux kernel
-
Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path
- Linux kernel
- CVSS 7.1 High
Bluetooth: btnxpuart: Validate the FW dump header length
- Linux kernel
-
Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop
- Linux kernel
-
Bluetooth: do not leak an hci_conn when a second LE connect is rejected
- Linux kernel
-
xsk: honor XDP_TX_METADATA in zero-copy path
- Linux kernel
-
octeontx2-af: fix NULL deref in NIX TM tree debugfs read path
- Linux kernel
-
octeontx2-vf: fix workqueue and netdev race in probe/remove
- Linux kernel
-
net/sched: act_ife: Only operate on Ethernet frames
- Linux kernel
-
net: mana: Cap MSI-X vectors to the device MSI-X table size
- Linux kernel
-
net/rds: use wq_has_sleeper() in rds_cong_map_updated()
- Linux kernel
-
octeontx2-pf: fix NULL deref of af_xdp_zc_qidx on rep setup
- Linux kernel
-
octeontx2-af: fix cn20k mailbox lifetime on repeated rvu_mbox_init()
- Linux kernel
-
net/sched: act_skbmod: fix length calculations and avoid invalid header warnings
- Linux kernel
-
net: fix a resource leak in copy_net_ns() error handling path
- Linux kernel
-
net/sched: fq: add overflow bounds to quantum and initial quantum
- Linux kernel
-
net/sched: fq_codel: clamp default quantum and mtu
- Linux kernel
-
net/sched: fq_pie: clamp default quantum to avoid signed overflow
- Linux kernel
-
net/sched: hhf: clamp quantum before hhf_change() to avoid overflow
- Linux kernel
-
net/sched: sfq: clamp quantum to avoid signed overflow soft lockup
- Linux kernel