Advisories · Technology
Linux kernel.
Every CVE that names Linux kernel among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
fs: Free any excess xarray nodes in clear_inode()
- Linux kernel
- CVSS 9.8 CriticalCritical · CVSS 9+
net/mlx5e: Prevent stale XSK buffer release on refill retry
- Linux kernel
- CVSS 9.8 CriticalCritical · CVSS 9+
net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry
- Linux kernel
- CVSS 7.4 High
ipv4: udp: Create exceptions before socket matching
- Linux kernel
-
ipv6: udp: Create exceptions before socket matching
- Linux kernel
-
rust_binder: reschedule node refcount update on thread exit
- Linux kernel
-
ipv4: stop PMTU walk when nexthop group shrinks
- Linux kernel
-
ipv4: stop exception dump when nexthop group shrinks
- Linux kernel
-
ipv4: stop route notification sizing when nexthop group shrinks
- Linux kernel
-
ipv4: do not warn on route notification size race
- Linux kernel
-
ipv6: do not warn on route notification size race
- Linux kernel
-
Input: ati_remote2 - fix type confusion in device attribute handlers
- Linux kernel
-
ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers
- Linux kernel
-
btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode()
- Linux kernel
-
can: dev: init_can_skb(): restore skb header initialization
- Linux kernel
-
cgroup/cpuset: Handle cpu hotplug race in guarantee_active_cpus()
- Linux kernel
- CVSS 8.1 High
cipso: adjust cached option offsets when removing CIPSO
- Linux kernel
-
dm ioctl: don't let data_start run past the buffer
- Linux kernel
-
vsock/virtio: account only unread bytes in read_skb()
- Linux kernel
-
wifi: brcmfmac: fix P2P device removal race in brcmf_detach()
- Linux kernel
-
wifi: mt76: mt7603: initialize global station WCID
- Linux kernel
- CVSS 7.7 High
wireguard: noise: reject response consumption after intermediate initiation
- Linux kernel
-
workqueue: Fix NULL current_pwq deref in chained work check
- Linux kernel
-
xen/netfront: don't leak the skb when xennet_fill_frags() fails
- Linux kernel
- CVSS 7.8 High
strparser: make sure __strp_recv isn't running before tearing down the parser
- Linux kernel
-
tcp: reject net_iov in zerocopy receive mapping hints
- Linux kernel
- CVSS 7.8 High
tipc: destroy topsrv workqueues before closing connections
- Linux kernel
- CVSS 7.8 High
tipc: hold a reference to nodes found by link name
- Linux kernel
-
selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts
- Linux kernel
- CVSS 7.8 High
fsverity: RCU-delay the freeing of struct fsverity_info
- Linux kernel
- CVSS 7.8 High
gpio: mpsse: fix race when arming the IRQ poll worker
- Linux kernel
-
gpio: xilinx: fix runtime PM leak on request error path
- Linux kernel
-
gve: fix napi_disable deadlock when attempting to disable XSK pools
- Linux kernel
-
gve: fix XSK buffer leak when rings are stopped
- Linux kernel
- CVSS 7.5 High
gve: fix XSK buffer leak on error descriptor
- Linux kernel
-
ibmveth: h_free logical LAN on open-fail after register
- Linux kernel
-
ice: fix use-after-free in dynamic port cleanup
- Linux kernel
-
ice: fix metadata_dst refcount handling on representor teardown
- Linux kernel
- CVSS 8.4 High
io_uring/net: populate CONNECT filter fields for 24-byte sockaddr_in6
- Linux kernel
-
ip6_gre: remove obsolete ERSPAN PMTU update
- Linux kernel
-
KEYS: Fix add_key() race with keyring restriction
- Linux kernel
-
memstick: core: wait for request completion before freeing card
- Linux kernel
-
memstick: rtsx_usb_ms: complete requests after eject instead of dropping them
- Linux kernel
-
dm-crypt: reject the lmk IV mode with AEAD ciphers
- Linux kernel
-
dm: fix reading free memory in do_resume
- Linux kernel
-
mmc: mtk-sd: Cancel request timeout work on remove
- Linux kernel
-
mmc: sdhci-sprd: disable runtime PM on remove
- Linux kernel
-
net/packet: guard the ll header push in packet_rcv_spkt()
- Linux kernel
- CVSS 7.8 High
net/smc: protect clcsock lifetime in smc_getname
- Linux kernel
-
net: bridge: avoid recursive multicast port cleanup
- Linux kernel
- CVSS 7.5 High
net: skbuff: don't leave stale bytes in skb_copy_and_csum_bits()
- Linux kernel
-
net: sparx5: free the matchall entry on destroy
- Linux kernel
-
net: xilinx: axienet: Free outstanding DMA buffers on dmaengine stop
- Linux kernel
-
net: team: stop reusing skb after queue override
- Linux kernel
-
net: team: free skb when broadcast has no txable port
- Linux kernel
-
openvswitch: fix soft lockup in the netlink flow dump
- Linux kernel
-
optee: register TEE devices only once fully initialized
- Linux kernel
-
power: sequencing: pcie-m2: Fix leaking array from of_regulator_bulk_get_all()
- Linux kernel
-
regulator: ltc3676: don't read the write-only HRST and CLIRQ registers
- Linux kernel
-
regulator: of: fill in supply names in of_regulator_bulk_get_all()
- Linux kernel