bpftool vulnerabilities (Red Hat)
3,725 vulnerabilities.
bpftoolRed Hatipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()9.8 CriticalbpftoolRed Hatip6_tunnel: clear skb2->cb[] in ip4ip6_err()9.8 CriticalbpftoolRed Hatnetfilter: nf_conntrack_helper: pass helper to expect cleanup7.8 HighbpftoolRed HatBluetooth: SCO: fix race conditions in sco_sock_connect()7.8 HighbpftoolRed HatBluetooth: MGMT: validate LTK enc_size on load7.8 HighbpftoolRed Hatsmb: client: validate the whole DACL before rewriting it in cifsacl8.8 HighbpftoolRed Hatrtnetlink: add missing netlink_ns_capable() check for peer netns5.5 MediumbpftoolRed Hatxen/privcmd: fix double free via VMA splitting7.8 HighbpftoolRed HatBuffer overflow in drivers/xen/sys-hypervisor.c7.8 HighbpftoolRed Hatnetfilter: ip6t_eui64: reject invalid MAC header for all packets9.4 CriticalbpftoolRed Hatnet: sched: act_csum: validate nested VLAN headers5.5 MediumbpftoolRed Hatopenvswitch: defer tunnel netdev_put to RCU release7.8 HighbpftoolRed Hatmptcp: fix slab-use-after-free in __inet_lookup_established9.8 CriticalbpftoolRed Hatxfrm: hold dev ref until after transport_finish NF_HOOK7.8 HighbpftoolRed Hatsmb: client: fix OOB reads parsing symlink error response8.1 HighbpftoolRed Hatusbip: validate number_of_packets in usbip_pack_ret_submit()9.8 CriticalbpftoolRed HatALSA: 6fire: fix use-after-free on disconnect7.8 HighbpftoolRed Hatdrm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib7.8 HighbpftoolRed Hatcan: raw: fix ro->uniq use-after-free in raw_rcv()7.8 HighbpftoolRed Hatnet: openvswitch: Avoid releasing netdev before teardown completes7.8 HighbpftoolRed Hatdrm/amd/display: Do not skip unrelated mode changes in DSC validation7.8 HighbpftoolRed Hatcrypto: algif_aead - Revert to operating out-of-place7.8 HighbpftoolRed Hatnet: bonding: fix use-after-free in bond_xmit_broadcast()7.8 HighbpftoolRed Hatnet: atm: fix crash due to unvalidated vcc pointer in sigd_send()5.5 MediumbpftoolRed HatBluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold8.8 HighbpftoolRed Hatnfsd: fix heap overflow in NFSv4.0 LOCK replay cache9.8 CriticalbpftoolRed Hatnetfilter: nf_conntrack_h323: check for zero length in DecodeQ931()9.1 CriticalbpftoolRed HatKVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE5.5 MediumbpftoolRed Hatnetfilter: nf_tables: release flowtable after rcu grace period on error7.8 HighbpftoolRed Hatnet/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks7.8 HighbpftoolRed HatRDMA/umad: Reject negative data_len in ib_umad_write7.8 HighbpftoolRed Hatscsi: qla2xxx: Fix bsg_done() causing double free7.8 HighbpftoolRed Hatnetfilter: nf_tables: fix use-after-free in nf_tables_addchain()7.8 HighbpftoolRed Hatscsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()7.8 HighbpftoolRed Hatmacvlan: fix error recovery in macvlan_common_newlink()7.8 HighbpftoolRed Hatnet/sched: cls_u32: use skb_header_pointer_careful()7.1 HighbpftoolRed Hatscsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()8.8 HighbpftoolRed HatALSA: aloop: Fix racy access at PCM trigger7.8 HighbpftoolRed Hatbonding: fix use-after-free due to enslave fail after slave array update7.8 HighbpftoolRed Hatmm/damon/sysfs: cleanup attrs subdirs on context dir setup failure5.5 MediumbpftoolRed Hatnetfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()7.8 HighbpftoolRed Hatnet/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag7.8 HighbpftoolRed Hatipvlan: Make the addrs_lock be per port7.8 HighbpftoolRed Hatmigrate: correct lock ordering for hugetlb file folios5.5 MediumbpftoolRed Hatnet/sched: Enforce that teql can only be used as root qdisc7.8 HighbpftoolRed Hatrxrpc: Fix recvmsg() unconditional requeue7.8 HighbpftoolRed Hatmacvlan: fix possible UAF in macvlan_forward_source()7.8 HighbpftoolRed Hatnvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec7.5 HighbpftoolRed Hatlibceph: replace overzealous BUG_ON in osdmap_apply_incremental()7.5 HighbpftoolRed Hatlibceph: prevent potential out-of-bounds reads in handle_auth_done()9.8 Critical- Show moreLoading…