Advisories · Technology
Linux kernel.
Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
btrfs: don't stash io_uring encoded data across -EAGAIN
- Linux kernel
- CVSS 9.8 CriticalCritical · CVSS 9+
btrfs: fix xattr replace when multiple xattrs are packed in the same item
- Linux kernel
-
wifi: mt76: account non-AQL frames per peer rather than per link
- Linux kernel
-
wifi: mt76: mt7915: disable rx napi when removing device
- Linux kernel
-
ASoC: adau1372: allow sleepy powerdown GPIOs
- Linux kernel
-
flow_dissector: avoid u16 truncation of skb->len when computing thoff
- Linux kernel
-
net: always dissect GSO packets in __virtio_net_hdr_to_skb()
- Linux kernel
-
devlink: fix devlink_rel reference leak when notify work is pending
- Linux kernel
- CVSS 7.3 High
pfcp: make sure the SEID is linear before reading it
- Linux kernel
-
riscv: ptrace: Zero-initialize regset buffers before copyin
- Linux kernel
-
flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect()
- Linux kernel
-
drm/imagination: Fix reference and vm_bo handling in remap()
- Linux kernel
-
mlxsw: spectrum_flower: Fix port range register leak in tmplt_create()
- Linux kernel
-
vsock: Fix memory leak in vmci_transport_recv_dgram_cb()
- Linux kernel
-
drm/vc4: Disable the V3D interrupt across runtime suspend
- Linux kernel
- CVSS 7.8 High
HID: steam: Rearrange teardown sequence
- Linux kernel
- CVSS 7.8 High
HID: steam: Refactor registration
- Linux kernel
-
sched_ext: Build the cid tables privately and publish them with RCU
- Linux kernel
- CVSS 7.0 High
ext4: don't enable large folios on encrypted inodes
- Linux kernel
-
ASoC: qcom: lpass-cpu: use DAI table index for playback constraints
- Linux kernel
-
x86/mm: Drop unnecessary PMD page copy when freeing
- Linux kernel
-
rust: irq: pass RegistrationInner as cookie to request_irq
- Linux kernel
-
perf/core: Check kernel access when kernel callchains are requested
- Linux kernel
-
wifi: ath11k: reset ar->num_stations on hardware start
- Linux kernel
-
rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak
- Linux kernel
-
ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel()
- Linux kernel
-
usb: hub: use shorter 120ms post resume hold for SS root hubs
- Linux kernel
- CVSS 7.4 High
EDAC/altera: Fix use-after-free in error paths
- Linux kernel
-
mtd: spinand: fix NULL pointer dereference with no ECC engine
- Linux kernel
-
KVM: s390: Fix IRQ injection with SIGP Stop and Store Status
- Linux kernel
-
macsec: initialize SecY before registering the netdevice
- Linux kernel
-
KVM: arm64: Derive GUEST_HAS_SVE from the SVE feature bit at EL2
- Linux kernel
- CVSS 7.0 High
KVM: arm64: nv: Fix life cycle of the nested_mmus array
- Linux kernel
-
drm/amd/display: Remove sink usage from DPMS
- Linux kernel
-
bpf, sockmap: Fix self-redirect copied_seq double-counting
- Linux kernel
-
fs: avoid repeated scans in evict_inodes()
- Linux kernel
-
arm64: io: Reject non-user protection in ioremap_prot()
- Linux kernel
-
net: emac: move setting of netops to fix crash
- Linux kernel
-
ovl: fix UAF in ovl_do_mkdir() debug print
- Linux kernel
-
netfs: Fix missing alloc tagging of direct mempool allocations
- Linux kernel
-
drm/xe: harden adjust_idledly() against divide-by-zero and overflow
- Linux kernel
-
mm/damon/ops-common: use a page-aligned address in damon_ptep_mkold()
- Linux kernel
-
parisc: Increase kernel stack size to 32kb
- Linux kernel
-
wifi: nl80211: check link is beaconing for color change
- Linux kernel
-
media: video-i2c: use vb2_video_unregister_device on driver removal
- Linux kernel
-
drm/amdgpu: cap ATOM command table nesting depth
- Linux kernel
-
net: thunderx: fix PTP device ref leak in nicvf_probe()
- Linux kernel
-
ALSA: seq: oss: Reject reads that cannot fit the next event
- Linux kernel
- CVSS 7.5 High
dpaa2-switch: fix the error path in dpaa2_switch_rx()
- Linux kernel
-
drm/amdkfd: Unwind debug trap enable on copy_to_user failure
- Linux kernel
-
net: cpsw_new: unregister devlink on port registration failure
- Linux kernel
-
net: microchip: sparx5: clean up PSFP resources on flower setup failure
- Linux kernel
-
btrfs: protect sb_write_pointer() with invalidate lock
- Linux kernel
-
net: lan966x: restore RX state on reload failure
- Linux kernel
-
drm/amdkfd: Properly acquire queue buffers in CRIU restore
- Linux kernel
-
mailbox: imx: Use devm_pm_runtime_enable()
- Linux kernel
-
mailbox: imx: Add a channel shutdown field
- Linux kernel
-
md/raid5: let stripe batch bm_seq comparison wrap-safe
- Linux kernel
-
ksmbd: fix lease break and ack state handling
- Linux kernel
-
xen/gntalloc: validate grant count before allocation
- Linux kernel