bpftool vulnerabilities (Red Hat)
3,725 vulnerabilities.
bpftoolRed Hatsmb: client: validate dacloffset before building DACL pointers9.8 CriticalbpftoolRed Hatnet: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels8.1 HighbpftoolRed HatALSA: aloop: Fix peer runtime UAF during format-change stop7.8 HighbpftoolRed Hatnet: bridge: use a stable FDB dst snapshot in RCU readers5.5 MediumbpftoolRed HatBluetooth: hci_event: fix potential UAF in SSP passkey handlers8.8 HighbpftoolRed Hatselinux: fix overlayfs mmap() and mprotect() access checks7.1 HighbpftoolRed HatRDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv9.1 CriticalbpftoolRed Hatudf: fix partition descriptor append bookkeeping7.8 HighbpftoolRed Hatgfs2: Fix use-after-free in iomap inline data write path7.8 HighbpftoolRed Hatbonding: alb: fix UAF in rlb_arp_recv during bond up/down7.8 HighbpftoolRed Hatext4: fix e4b bitmap inconsistency reports7.8 HighbpftoolRed HatRDMA/rxe: Fix race condition in QP timer handlers7.8 HighbpftoolRed Hatiommu/vt-d: Clear Present bit before tearing down PASID entry7.8 HighbpftoolRed Hatgfs2: Fix slab-use-after-free in qd_put7.8 HighbpftoolRed HatRDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send7.1 HighbpftoolRed HatRDMA/rxe: Fix double free in rxe_srq_from_init7.8 HighbpftoolRed Hatrxrpc: Fix potential UAF after skb_unshare() failure7.8 HighbpftoolRed Hatipv6: rpl: reserve mac_len headroom when recompressed SRH grows9.8 CriticalbpftoolRed Hatrtmutex: Use waiter::task instead of current in remove_waiter()7.8 HighbpftoolRed Hatnet: skbuff: propagate shared-frag marker through frag-transfer helpers8.8 HighbpftoolRed Hatcrypto: pcrypt - Fix handling of MAY_BACKLOG requests9.8 CriticalbpftoolRed HatCeph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery8.9 HighbpftoolRed Hatptrace: slightly saner 'get_dumpable()' logic7.1 HighbpftoolRed HatImproper isolation of shared resources within the CPU operation cache on Zen 2-based products...7.3 HighbpftoolRed Hatnet: skbuff: preserve shared-frag marker during coalescing7.8 HighbpftoolRed Hatnetfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()7.1 HighbpftoolRed Hatdrm/amdgpu: Fix use-after-free race in VM acquire7.8 HighbpftoolRed Hatipv6: prevent possible UaF in addrconf_permanent_addr()7.8 HighbpftoolRed HatBluetooth: SMP: force responder MITM requirements before building the pairing response8.8 HighbpftoolRed Hatnetfilter: flowtable: strictly check for maximum number of actions7.8 HighbpftoolRed Hatmm/page_alloc: clear page->private in free_pages_prepare()7.8 HighbpftoolRed Hatxfrm: esp: avoid in-place decrypt on shared skb frags8.8 HighbpftoolRed HatALSA: usb-audio: Add sanity check for OOB writes at silencing7.8 HighbpftoolRed Hatnetfilter: nf_conntrack_h323: fix OOB read in decode_choice()8.2 HighbpftoolRed Hatdrm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()7.8 HighbpftoolRed Hattcp: fix potential race in tcp_v6_syn_recv_sock()9.8 CriticalbpftoolRed Hatnetfilter: xt_tcpmss: check remaining length before reading optlen8.2 HighbpftoolRed Hatmd/bitmap: fix GPF in write_page caused by resize race4.7 MediumbpftoolRed Hatxfs: fix freemap adjustments when adding xattrs to leaf blocks8.8 HighbpftoolRed HatKVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation7.9 HighbpftoolRed HatRDMA/umem: Fix double dma_buf_unpin in failure path7.8 HighbpftoolRed Hatdlm: validate length in dlm_search_rsb_tree9.8 CriticalbpftoolRed Hatnetfilter: ctnetlink: ensure safe access to master conntrack7.8 HighbpftoolRed Hatnetfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry9.4 CriticalbpftoolRed Hatfs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath8.8 HighbpftoolRed Hatwifi: brcmfmac: validate bsscfg indices in IF events8.8 HighbpftoolRed Hateventpoll: defer struct eventpoll free to RCU grace period7.8 HighbpftoolRed Hatcrypto: algif_aead - Fix minimum RX size check for decryption5.5 MediumbpftoolRed Hatnet: mana: fix use-after-free in add_adev() error path7.8 HighbpftoolRed HatHID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq8.1 High- Show moreLoading…