bpftool vulnerabilities (Red Hat)
3,725 vulnerabilities.
bpftoolRed Hatice: fix double-free of tx_buf skb7.8 HighbpftoolRed Hatipv6: fix possible UAF in icmpv6_rcv()9.8 CriticalbpftoolRed Hatnetfilter: conntrack: remove sprintf usage9.8 CriticalbpftoolRed Hatnetfilter: nat: use kfree_rcu to release ops7.8 HighbpftoolRed Hattipc: fix double-free in tipc_buf_append()9.8 CriticalbpftoolRed Hatsched/psi: fix race between file release and pressure write7.8 HighbpftoolRed Hatnetfilter: nf_conntrack_sip: don't use simple_strtoul9.8 CriticalbpftoolRed Hatcrypto: af_alg - Cap AEAD AD length to 0x800000005.5 MediumbpftoolRed Hatnet: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove7.8 HighbpftoolRed Hatnetfilter: nf_log: validate MAC header was set before dumping it7.1 HighbpftoolRed Hatxfrm: espintcp: do not reuse an in-progress partial send7.8 HighbpftoolRed Hatio_uring/poll: fix signed comparison in io_poll_get_ownership()7.8 HighbpftoolRed Hatsctp: stream: fully roll back denied add-stream state7.5 HighbpftoolRed Hatsctp: purge outqueue on stale COOKIE-ECHO handling9.8 CriticalbpftoolRed Hatipc: limit next_id allocation to the valid ID range7.8 HighbpftoolRed Hatnetfilter: xt_policy: fix strict mode inbound policy matching8.3 HighbpftoolRed HatBluetooth: serialize accept_q access8.8 HighbpftoolRed Hatsctp: diag: reject stale associations in dump_one path7.1 HighbpftoolRed Hatnetfilter: nf_queue: hold bridge skb->dev while queued7.8 HighbpftoolRed Hatnet/sched: fix pedit partial COW leading to page cache corruption7.8 HighbpftoolRed HatRevert "net/smc: Introduce TCP ULP support"7.8 HighbpftoolRed Hatnet: gro: don't merge zcopy skbs7.8 HighbpftoolRed Hatnet/sched: act_ct: Only release RCU read lock after ct_ft7.8 HighbpftoolRed HatArm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1,...9.1 CriticalbpftoolRed Hatflow_dissector: do not dissect PPPoE PFC frames7.5 HighbpftoolRed Hatinet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP9.1 CriticalbpftoolRed Hatprocfs: fix missing RCU protection when reading real_parent in do_task_stat()7.8 HighbpftoolRed Hatnetfilter: nft_inner: Fix IPv6 inner_thoff desync9.1 CriticalbpftoolRed Hatsmb: client: reject userspace cifs.spnego descriptions7.1 HighbpftoolRed Hateventpoll: fix ep_remove struct eventpoll / struct file UAF7.8 HighbpftoolRed Hatdrm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg7.1 HighbpftoolRed Hatsctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL7.8 HighbpftoolRed Hatdrm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()7.8 HighbpftoolRed Hatdrm/amdgpu/vcn4: Prevent OOB reads when parsing IB7.1 HighbpftoolRed Hatdrm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg7.1 HighbpftoolRed HatRDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path7.8 HighbpftoolRed HatRDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()7.8 HighbpftoolRed Hatexit: prevent preemption of oopsing TASK_DEAD task7.8 HighbpftoolRed Hatwifi: mac80211: drop stray 'static' from fast-RX rx_result8.8 HighbpftoolRed Hatfanotify: fix false positive on permission events7.1 HighbpftoolRed Hatscsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()7.1 HighbpftoolRed HatRDMA/mana: Validate rx_hash_key_len7.8 HighbpftoolRed Hatnvmet-tcp: fix race between ICReq handling and queue teardown9.8 CriticalbpftoolRed HatRDMA/rxe: Reject unknown opcodes before ICRC processing7.5 HighbpftoolRed Hatwifi: mac80211: remove station if connection prep fails8.8 HighbpftoolRed Hatip6_gre: Use cached t->net in ip6erspan_changelink().7.8 HighbpftoolRed HatRDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()7.8 HighbpftoolRed Hatxfrm: defensively unhash xfrm_state lists in __xfrm_state_delete7.8 HighbpftoolRed HatRDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads7.5 HighbpftoolRed HatKVM: x86: Fix shadow paging use-after-free due to unexpected GFN8.8 High- Show moreLoading…