Advisories · Technology
Linux kernel.
Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
wifi: mt76: mt7915: clear wcid mask under mutex after RCU pointer clear
- Linux kernel
- CVSS 7.1 High
wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss
- Linux kernel
- CVSS 8.8 High
wifi: mt76: fix RXDMAD_C buffer recycling race
- Linux kernel
-
wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config
- Linux kernel
-
wifi: mt76: fix out-of-bounds access in mmio copy helpers
- Linux kernel
-
wifi: mt76: mt7915: unwind state on add_interface failure
- Linux kernel
- CVSS 8.8 High
wifi: mt76: mt7996: hold dev->mt76.mutex while disabling tx worker in SER
- Linux kernel
-
wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV
- Linux kernel
-
wifi: mt76: cancel reset and rc work on device unregister
- Linux kernel
-
ACPI: processor: Unregister cpufreq notifier on init failure
- Linux kernel
-
drm/msm: don't tear down KMS twice when KMS init fails
- Linux kernel
-
drm/msm/dsi: Drop dev_pm_opp_set_rate(0)
- Linux kernel
-
wifi: ath11k: fix leak in ath11k_service_ready_ext_event()
- Linux kernel
-
regulator: core: use system_freezable_wq for init complete work
- Linux kernel
-
bpf: Reject >8 byte return values on return-reading trampoline paths
- Linux kernel
- CVSS 7.8 High
bpf, x86: Fix trampoline stack size for 128-bit arguments
- Linux kernel
- CVSS 8.8 High
wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement
- Linux kernel
-
wifi: mt76: mt7996: free vif links after clearing wcid entries on full reset
- Linux kernel
-
wifi: mt76: mt7996: clear stale link state on full reset
- Linux kernel
-
wifi: mt76: mt7915: fix double hif2 init on the non-WED path
- Linux kernel
- CVSS 7.0 High
wifi: mt76: mt7915: fix ext PHY use-after-free on register error path
- Linux kernel
-
wifi: mt76: mt7915: release hif2 reference on probe IRQ failure
- Linux kernel
-
wifi: mt76: mt7996: do not attach hif2 WED when the main WED attach failed
- Linux kernel
-
wifi: mt76: reject out-of-range link ids in mt76_vif_link()
- Linux kernel
-
wifi: mt76: mt7996: fix out-of-bounds link array access in mt7996_tx()
- Linux kernel
-
wifi: ath10k: snoc: use memcpy_fromio() for MSA ramdump
- Linux kernel
- CVSS 8.4 High
arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry
- Linux kernel
-
wifi: nl80211: clean up color-change beacon data on errors
- Linux kernel
-
wifi: brcmfmac: fix P2P action frame handling without device vif
- Linux kernel
-
wifi: mac80211: disconnect on CSA to channel 0
- Linux kernel
- CVSS 7.8 High
wifi: cfg80211: stop PMSR before P2P and NAN teardown
- Linux kernel
-
bpf: Fix mmap_lock deadlock on arena lock failure
- Linux kernel
- CVSS 7.7 High
firmware: coreboot: Validate table bounds
- Linux kernel
-
pinctrl: generic: free maps on pinctrl_generic_to_map() failure
- Linux kernel
-
powerpc/syscall: Fix syscall skip handling for seccomp and ptrace
- Linux kernel
-
serial: amba-pl011: keep console clock enabled for atomic writes
- Linux kernel
-
serial: core: do fallible allocations before the console can be registered
- Linux kernel
-
serial: core: clear freed pointers on uart_register_driver() failure
- Linux kernel
-
tty: skip cdev_del() when no cdev is registered
- Linux kernel
-
tty: clear cdev pointer after cdev_add() failure
- Linux kernel
-
dm-integrity: replace forgeable discard filler with a keyed sector marker
- Linux kernel
- CVSS 8.2 High
PCI: dwc: ep: Flush cached MSI write before unmapping the iATU
- Linux kernel
-
HID: asus: refactor the two workqueues and init sequence
- Linux kernel
-
HID: logitech-hidpp: Fix FF device cleanup on init failure
- Linux kernel
- CVSS 8.8 High
HID: synchronize input before cleaning up a failed probe
- Linux kernel
-
HID: steam: Reject short reads
- Linux kernel
-
phonet: pep: do not write beyond optlen in getsockopt
- Linux kernel
- CVSS 7.8 High
blk-cgroup: fix race between policy activation and blkg destruction
- Linux kernel
- CVSS 7.8 High
blk-cgroup: skip dying blkg in blkcg_activate_policy()
- Linux kernel
- CVSS 7.8 High
ublk: check import_ubuf() return value
- Linux kernel
-
ublk: validate auto buf reg before taking uring_cmd
- Linux kernel
-
ocfs2/cluster: keep heartbeat local node stable
- Linux kernel
- CVSS 7.8 High
ocfs2: validate inline xattrs during inode block validation
- Linux kernel
- CVSS 7.8 High
ocfs2: validate external xattr entries when reading metadata
- Linux kernel
-
rapidio: clear mport->net when rio_add_net() fails
- Linux kernel
-
fat: release buffer head after rebuilding parent
- Linux kernel
- CVSS 7.8 High
bpf: Invalidate RCU pointers after final spin unlock
- Linux kernel
- CVSS 7.8 High
drm/omap: dsi: Do not copy isr table
- Linux kernel
-
PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers
- Linux kernel
-
remoteproc: fix OOB read via signed offset in rsc_table_for_each_entry()
- Linux kernel