bpftool vulnerabilities (AlmaLinux)
1,410 vulnerabilities.
-
bpftoolAlmaLinux ipv4: validate checksum_start before completing checksum 9.3 Critical -
bpftoolAlmaLinux ipv4: free inet_opt and ireq_opt after an RCU grace period 9.8 Critical -
bpftoolAlmaLinux netfilter: flowtable: hold reference on ct until flow is released 7.8 High -
bpftoolAlmaLinux KEYS: encrypted: fix integer overflow of datablob_len 7.3 High -
bpftoolAlmaLinux netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() 7.5 High -
bpftoolAlmaLinux perf: Fix addr_filter_ranges lifetime 7.8 High -
bpftoolAlmaLinux smb: client: bound dirent name against end of SMB response in cifs_filldir 8.1 High -
bpftoolAlmaLinux netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state 7.8 High -
bpftoolAlmaLinux md/raid5-ppl: fix use-after-free in ppl_do_flush() 7.8 High -
bpftoolAlmaLinux svcrdma: Reject Write/Reply chunks with segcount 0 9.1 Critical -
bpftoolAlmaLinux nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() 7.8 High -
bpftoolAlmaLinux NFSD: Prevent client use-after-free during blocked-lock reaping 9.8 Critical -
bpftoolAlmaLinux scsi: target: iscsi: Reserve a terminator byte for the login payload 9.1 Critical -
bpftoolAlmaLinux nvme: add missing SRCU grace period in error path 9.8 Critical -
bpftoolAlmaLinux scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read 9.1 Critical -
bpftoolAlmaLinux drm/amdkfd: Add TLB flush after MES queue eviction/suspension 8.8 High -
bpftoolAlmaLinux vfio/pci: clear vdev->msi_perm after freeing it on init failure 8.8 High -
bpftoolAlmaLinux smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions 7.8 High -
bpftoolAlmaLinux smb: client: reject a tree connect response whose byte count is too small 9.1 Critical -
bpftoolAlmaLinux svcrdma: Reject inline replies that overflow the pull-up buffer 9.8 Critical -
bpftoolAlmaLinux svcrdma: Validate Read chunk positions before reconstruction 9.8 Critical -
bpftoolAlmaLinux nvme-tcp: fix host memory disclosure on R2T for a read command 7.5 High -
bpftoolAlmaLinux nvme-tcp: reject a read that transferred too few bytes 7.5 High -
bpftoolAlmaLinux sctp: stop processing a packet once its association is deleted 9.8 Critical -
bpftoolAlmaLinux net/iucv: filter frames in afiucv_hs_rcv() by ingress device 8.1 High -
bpftoolAlmaLinux net: tun: bound receive headroom 7.8 High -
bpftoolAlmaLinux KVM: s390: vsie: zero stale crypto bits 8.8 High -
bpftoolAlmaLinux drm/vmwgfx: use check_add_overflow for shader size+offset bound 8.1 High -
bpftoolAlmaLinux xfrm: ah6: validate routing header segments_left 8.3 High -
bpftoolAlmaLinux usb: usbfs: fix use-after-free of usb_device in usbdev_release() 8.8 High -
bpftoolAlmaLinux ipvs: do not propagate one-packet flag to synced conns 9.8 Critical -
bpftoolAlmaLinux inet: frags: strip GSO state from fragments before reassembly 8.6 High -
bpftoolAlmaLinux mptcp: options: reset DSS fields in case of unexpected size 9.8 Critical -
bpftoolAlmaLinux xfs: bounds-check buffer log item's dirty bitmap 8.4 High -
bpftoolAlmaLinux perf: Reject exited events as group leaders 7.8 High -
bpftoolAlmaLinux sctp: validate cookie AUTH state before use 9.8 Critical -
bpftoolAlmaLinux netfilter: flowtable: publish GC-visible tuple last 9.8 Critical -
bpftoolAlmaLinux ipvlan: inherit needed_headroom and needed_tailroom from phy_dev 9.8 Critical -
bpftoolAlmaLinux udp: fix potential use-after-free in tunnel segmentation 10.0 Critical -
bpftoolAlmaLinux ipvs: clear IPv4 options after rebasing tunnel ICMP errors 9.8 Critical -
bpftoolAlmaLinux ALSA: usx2y: bound the hwdep mmap fault offset 7.8 High -
bpftoolAlmaLinux sctp: keep chunk->transport in step with the list it is queued on 9.8 Critical -
bpftoolAlmaLinux net/sched: cls_route: fix fastmap use-after-free on filter 7.8 High -
bpftoolAlmaLinux packet: use consistent hard_header_len in non-ring send paths 7.8 High -
bpftoolAlmaLinux net: ipv6: clear suppressed fib6 rule result 9.8 Critical -
bpftoolAlmaLinux vhost: reset the vring metadata cache on vring reconfiguration 8.8 High -
bpftoolAlmaLinux netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() 9.8 Critical -
bpftoolAlmaLinux scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer 9.8 Critical -
bpftoolAlmaLinux KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active 8.2 High -
bpftoolAlmaLinux KVM: s390: pci: Reject adapter interrupt forwarding if already enabled 8.8 High - Show olderLoading…