Advisories · Technology
Linux kernel.
Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend()
- Linux kernel
- CVSS 9.8 CriticalCritical · CVSS 9+
RDMA/rtrs-srv: Fix integer underflow in process_read and process_write
- Linux kernel
-
pds_core: quiesce DMA before freeing resources
- Linux kernel
-
net: ibm: emac: mal: fix potential system hang in mal_remove()
- Linux kernel
-
netconsole: take target_cleanup_list_lock in drop_netconsole_target()
- Linux kernel
- CVSS 8.8 High
nvme-fc: Do not cancel requests in io target before it is initialized
- Linux kernel
-
Bluetooth: L2CAP: validate connectionless PSM length
- Linux kernel
-
ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt
- Linux kernel
- CVSS 7.5 High
net: stmmac: xgmac2: disable RBUE in default RX interrupt mask
- Linux kernel
-
smb: client: fix races in cifsd thread creation
- Linux kernel
-
exfat: fix handling of damaged volume in exfat_create_upcase_table()
- Linux kernel
- CVSS 8.4 High
virtio-fs: avoid double-free on failed queue setup
- Linux kernel
- CVSS 7.5 High
HID: hidpp: fix potential UAF in hidpp_connect_event()
- Linux kernel
-
spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data()
- Linux kernel
-
tls: reject the combination of TLS and sockmap
- Linux kernel
-
drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl
- Linux kernel
-
PCI: iproc: Protect root bus removal with rescan lock
- Linux kernel
-
PCI: altera: Protect root bus removal with rescan lock
- Linux kernel
-
PCI: rockchip: Protect root bus removal with rescan lock
- Linux kernel
-
PCI: mediatek: Protect root bus removal with rescan lock
- Linux kernel
-
PCI: plda: Protect root bus removal with rescan lock
- Linux kernel
- CVSS 7.8 High
perf: Fix addr_filter_ranges lifetime
- Linux kernel
- CVSS 7.1 High
f2fs: validate inline dentry name lengths before conversion
- Linux kernel
-
net: au1000: move free_irq out of the close-time spinlocked section
- Linux kernel
-
spi: core: Abort active target transfer on controller suspend
- Linux kernel
- CVSS 7.8 High
btrfs: tree-checker: validate INODE_REF's namelen
- Linux kernel
-
ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr
- Linux kernel
-
ksmbd: Fix acl.sd_buf memory leak and invalid sd_size error handling
- Linux kernel
- CVSS 7.0 High
cachefiles: Fix double fput
- Linux kernel
-
drm/amdgpu: flush pending RCU callbacks on module unload
- Linux kernel
-
ALSA: usb-audio: caiaq: validate EP1 reply lengths
- Linux kernel
-
wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers
- Linux kernel
- CVSS 8.8 High
wifi: cfg80211: validate assoc response length before status and IE access
- Linux kernel
-
wifi: cfg80211: validate rx/tx MLME callback frame lengths before access
- Linux kernel
-
wifi: mac80211: ibss: wait for in-flight TX on disconnect
- Linux kernel
-
wifi: libipw: fix key index receive bound checks
- Linux kernel
-
wifi: rsi: validate beacon length before fixed buffer copy
- Linux kernel
- CVSS 7.0 High
smb/client: zero-initialize stack-allocated cifs_open_info_data
- Linux kernel
-
btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol()
- Linux kernel
- CVSS 8.8 High
wifi: iwlwifi: mvm: validate sta_id in BA window status notif
- Linux kernel
- CVSS 7.8 High
btrfs: fix reloc root cleanup in merge_reloc_roots()
- Linux kernel
-
wifi: iwlwifi: mvm: fix an off-by-1 boundary check
- Linux kernel
- CVSS 7.0 High
wifi: iwlwifi: pcie: null RX pointers after free
- Linux kernel
-
blk-cgroup: fix leaks and online flag on radix_tree_insert failure
- Linux kernel
-
smb/client: flush dirty data before punching a hole
- Linux kernel
- CVSS 8.8 High
wifi: iwlwifi: mvm: validate TX_CMD response layout
- Linux kernel
-
wifi: iwlwifi: mvm: fix a possible underflow
- Linux kernel
-
wifi: iwlwifi: mvm: add a check on the tid coming from the firmware
- Linux kernel
- CVSS 8.8 High
wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif
- Linux kernel
-
wifi: iwlwifi: bound aligned TLV advance in FW parser
- Linux kernel
-
wifi: iwlwifi: acpi: validate WGDS table revision index
- Linux kernel
- CVSS 8.1 High
smb: client: bound dirent name against end of SMB response in cifs_filldir
- Linux kernel
- CVSS 8.1 High
ksmbd: preserve VFS inherited POSIX ACL mask
- Linux kernel
-
cifs: validate idmap key payload length
- Linux kernel
-
wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie()
- Linux kernel
-
Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame
- Linux kernel
- CVSS 7.8 High
vhost-scsi: flush backend after device ioctls
- Linux kernel
-
scsi: core: Do not block on tag allocation in scsi_eh_lock_door()
- Linux kernel
- CVSS 7.8 High
netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state
- Linux kernel
- CVSS 7.8 High
i2c: smbus: reject oversized block transfers in the common path
- Linux kernel