bpftool vulnerabilities (AlmaLinux)
1,438 vulnerabilities.
bpftoolAlmaLinuxipv4: fib: free fib_alias with kfree_rcu() on insert error path7.1 HighbpftoolAlmaLinuxsctp: don't free the ASCONF's own transport in DEL-IP processing9.8 CriticalbpftoolAlmaLinuxrhashtable: clear stale iter->p on table restart7.8 HighbpftoolAlmaLinuxperf/core: Detach event groups during remove_on_exec7.8 HighbpftoolAlmaLinuxnet/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket9.8 CriticalbpftoolAlmaLinuxcan: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet7.8 HighbpftoolAlmaLinuxnvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path9.8 CriticalbpftoolAlmaLinuxnet/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle9.8 CriticalbpftoolAlmaLinuxiio: event: Fix event FIFO reset race7.1 HighbpftoolAlmaLinuxsmb: client: mask server-provided mode to 07777 in modefromsid7.1 HighbpftoolAlmaLinuxwriteback: fix race between cgroup_writeback_umount() and inode_switch_wbs()7.8 HighbpftoolAlmaLinuxnvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page9.1 CriticalbpftoolAlmaLinuxNFSv4: include MAY_WRITE in open permission mask for O_TRUNC7.1 HighbpftoolAlmaLinuxInput: synaptics-rmi4 - bound the F3A keymap to the GPIO count7.8 HighbpftoolAlmaLinuxInput: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count7.8 HighbpftoolAlmaLinuxRDMA/siw: bound Read Response placement to the RREAD length9.8 CriticalbpftoolAlmaLinuxfuse: re-lock request before returning from fuse_ref_folio()7.8 HighbpftoolAlmaLinuxdrm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async7.0 HighbpftoolAlmaLinuxKVM: x86: Check for invalid/obsolete root *after* making MMU pages available8.8 HighbpftoolAlmaLinuxi2c: stub: Reject I2C block transfers with invalid length7.8 HighbpftoolAlmaLinuxnetfilter: ipset: fix race between dump and ip_set_list resize7.8 HighbpftoolAlmaLinuxwifi: mac80211: capture fast-RX rate before mesh reuses skb->cb8.8 HighbpftoolAlmaLinuxvsock/vmci: fix UAF when peer resets connection during handshake8.8 HighbpftoolAlmaLinuxipv4: raw: reject IP_HDRINCL packets with ihl < 57.8 HighbpftoolAlmaLinuxixgbevf: fix use-after-free in VEPA multicast source pruning9.8 CriticalbpftoolAlmaLinuxaf_unix: Fix UAF read of tail->len in unix_stream_data_wait()8.8 HighbpftoolAlmaLinuxRDMA/siw: Reject MPA FPDU length underflow before signed receive math9.8 CriticalbpftoolAlmaLinuxnet/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot7.5 HighbpftoolAlmaLinuxnet: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer9.3 CriticalbpftoolAlmaLinuxnet: mana: validate rx_req_idx to prevent out-of-bounds array access9.3 CriticalbpftoolAlmaLinuxsecurity/keys: fix missed RCU read section on lookup7.8 HighbpftoolAlmaLinuxxfrm: Check for underflow in xfrm_state_mtu7.8 HighbpftoolAlmaLinuxnetfilter: synproxy: refresh tcphdr after skb_ensure_writable9.8 CriticalbpftoolAlmaLinuxipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()7.8 HighbpftoolAlmaLinuxtunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()9.8 CriticalbpftoolAlmaLinuxtunnels: do not assume transport header in iptunnel_pmtud_check_icmp()9.1 CriticalbpftoolAlmaLinuxBluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp8.8 HighbpftoolAlmaLinuxsctp: fix race between sctp_wait_for_connect and peeloff7.8 HighbpftoolAlmaLinuxBluetooth: HIDP: fix missing length checks in hidp_input_report()8.8 HighbpftoolAlmaLinuxipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()9.8 CriticalbpftoolAlmaLinuxipv6: exthdrs: refresh nh after handling HAO option9.8 CriticalbpftoolAlmaLinuxip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().8.8 HighbpftoolAlmaLinuxipv6: validate extension header length before copying to cmsg7.1 HighbpftoolAlmaLinuxxfrm: input: hold netns during deferred transport reinjection8.8 HighbpftoolAlmaLinuxip6: vti: Use ip6_tnl.net in vti6_changelink().8.8 HighbpftoolAlmaLinuxnetfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check8.2 HighbpftoolAlmaLinuxscsi: scsi_transport_fc: Widen FPIN pname walker counter to u328.1 HighbpftoolAlmaLinuxscsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()9.8 CriticalbpftoolAlmaLinuxscsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf9.8 CriticalbpftoolAlmaLinuxscsi: target: iscsi: Validate CHAP_R length before base64 decode9.8 Critical- Show moreLoading…