Advisories · Technology
Linux kernel.
Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.0 High
RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds
- Linux kernel
- CVSS 7.0 High
RDMA/core: Reject unregistering netdevs in ib_get_eth_speed
- Linux kernel
-
IB/iser: reject a remote invalidation of an unregistered direction
- Linux kernel
- CVSS 8.1 High
IB/isert: wait for deferred control PDU completions before releasing the connection
- Linux kernel
-
RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup
- Linux kernel
-
RDMA/rtrs: guard against null kobj name
- Linux kernel
-
RDMA/mad: Fix receive buffer leak when PKey enforcement fails
- Linux kernel
-
RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables
- Linux kernel
-
RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted
- Linux kernel
-
wifi: virt_wifi: free skb when disconnected
- Linux kernel
-
wifi: brcmfmac: cyw: pass PMKID to firmware if present
- Linux kernel
- CVSS 7.1 High
wifi: libipw: reject too-short beacon and probe responses
- Linux kernel
- CVSS 7.1 High
wifi: libipw: reject too-short association responses
- Linux kernel
-
IB/IPoIB: Avoid restoring OPER_UP after multicast flush
- Linux kernel
-
wifi: cfg80211: don't get the radio mask for netdev-less wdevs
- Linux kernel
-
wifi: cfg80211: check IP header size in cfg80211_classify8021d()
- Linux kernel
-
dmaengine: Fix device kref underflow in dma_chan_put()
- Linux kernel
-
dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel()
- Linux kernel
-
dmaengine: wait for RCU readers before releasing dma_device
- Linux kernel
- CVSS 7.8 High
wifi: cfg80211: don't free driver-owned scan requests
- Linux kernel
-
wifi: cfg80211: only group hidden BSSes with beacon entries
- Linux kernel
- CVSS 8.8 High
wifi: cfg80211: don't filter by BSS type when removing stale entries
- Linux kernel
-
wifi: cfg80211: ibss: ref BSS entry for joined event
- Linux kernel
-
wifi: mac80211: don't start a ROC while scanning
- Linux kernel
-
wifi: mac80211: don't offload TC setup on AP_VLAN interfaces
- Linux kernel
-
wifi: mac80211: abort chanswitch when leaving a mesh
- Linux kernel
-
wifi: mac80211: reset state when starting AP fails
- Linux kernel
-
wifi: mac80211: reset the LED state when ifup fails
- Linux kernel
-
wifi: mac80211: only operate on TDLS peers in the TDLS code
- Linux kernel
- CVSS 7.0 High
wifi: mac80211: unlist vifs when their netdev is unregistered
- Linux kernel
- CVSS 7.0 High
wifi: cfg80211: get the wiphy out of a dying network namespace
- Linux kernel
-
wifi: mac80211: don't allow injecting frames wider than the chanctx
- Linux kernel
-
wifi: mac80211: add HE 6 GHz capability in the scan elems len
- Linux kernel
-
wifi: mac80211: mesh: reset the CSA state when leaving
- Linux kernel
-
wifi: mac80211: mesh: release the channel if start fails
- Linux kernel
-
wifi: mac80211: set up the TX info early to fix failure paths
- Linux kernel
- CVSS 7.8 High
dmaengine: pxa: fix double counting of the hw descriptors
- Linux kernel
- CVSS 9.8 CriticalCritical · CVSS 9+
RDMA/siw: Bound fragmented header copies by the remaining length
- Linux kernel
-
netfilter: nft_nat: fully initialise new_addr in netmap setup
- Linux kernel
-
netfilter: nf_nat: unregister and release hooks on error
- Linux kernel
- CVSS 7.8 High
netfilter: flowtable: hold reference on ct until flow is released
- Linux kernel
-
drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr
- Linux kernel
- CVSS 7.8 High
smb: client: validate absolute native symlink targets before NT fixups
- Linux kernel
-
neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS.
- Linux kernel
-
ALSA: bcd2000: Fix race between rawmidi and disconnect
- Linux kernel
- CVSS 7.8 High
ntfs: protect runlist updates with the runlist lock
- Linux kernel
-
ALSA: pcm: set timer->private_data before registering the PCM timer
- Linux kernel
-
drm/msm/dp: skip PUSH_IDLE when the link was never enabled
- Linux kernel
-
ALSA: 6fire: fix OOB write from device-reported iso length
- Linux kernel
- CVSS 7.8 High
wifi: virt_wifi: don't transfer operstate before register
- Linux kernel
-
drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory
- Linux kernel
-
drm/vc4: Use managed KMS polling to fix UAF on unbind
- Linux kernel
-
ALSA: hda: trace PCM open only after assigning a stream
- Linux kernel
-
wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all()
- Linux kernel
-
seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation
- Linux kernel
- CVSS 7.8 High
net: dsa: mxl862xx: disable the stats poll on teardown
- Linux kernel
-
net: bcmgenet: restore the hardware filters on open
- Linux kernel
-
ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup
- Linux kernel
-
net: fddi: skfp: fix NULL deref when setting the MAC address while down
- Linux kernel
-
net: bridge: mst: move switchdev call outside rcu
- Linux kernel