bpftool vulnerabilities (Red Hat)
3,725 vulnerabilities.
bpftoolRed Hatarm64: tlb: Flush walk cache when unsharing PMD tables7.8 HighbpftoolRed Hatmac802154: llsec: add skb_cow_data() before in-place crypto8.8 HighbpftoolRed Hatnet: ip_gre: require CAP_NET_ADMIN in the device netns for changelink8.8 HighbpftoolRed Hatkeys: Pin request_key_auth payload in instantiate paths7.8 HighbpftoolRed Hatblk-cgroup: fix UAF in __blkcg_rstat_flush()7.8 HighbpftoolRed Hattipc: fix slab-use-after-free Read in tipc_aead_decrypt_done8.8 HighbpftoolRed HatpNFS: Fix use-after-free in pnfs_update_layout()9.8 CriticalbpftoolRed HatKVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path7.8 HighbpftoolRed Hatnfsd: release layout stid on setlease failure9.8 CriticalbpftoolRed Hatnfsd: fix posix_acl leak on SETACL decode failure7.5 HighbpftoolRed HatNFSv4/flexfiles: reject zero filehandle version count7.5 HighbpftoolRed HatNFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr7.5 HighbpftoolRed Hatfuse: re-lock request before replacing page cache folio7.8 HighbpftoolRed Hatdrm/amdgpu: zero-initialize GART table on allocation8.8 HighbpftoolRed Hatxfs: resample the data fork mapping after cycling ILOCK7.8 HighbpftoolRed Hatcrypto: krb5 - filter out async aead implementations at alloc9.8 CriticalbpftoolRed HatKVM: x86: Fix shadow paging use-after-free due to unexpected role8.8 HighbpftoolRed Hatdrm/amd/display: Use krealloc_array() in dal_vector_reserve()7.0 HighbpftoolRed Hatipv6: mcast: Fix use-after-free when processing MLD queries8.8 HighbpftoolRed Hatipvs: clear the svc scheduler ptr early on edit7.8 HighbpftoolRed Hatnetfilter: conntrack_irc: fix possible out-of-bounds read8.2 HighbpftoolRed Hatnetfilter: bridge: make ebt_snat ARP rewrite writable8.8 HighbpftoolRed Hatnet/sched: act_api: use RCU with deferred freeing for action lifecycle7.8 HighbpftoolRed HatBluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()8.0 HighbpftoolRed HatBluetooth: RFCOMM: validate skb length in MCC handlers8.1 HighbpftoolRed Hatsctp: validate cached peer INIT chunk length in COOKIE_ECHO processing9.8 CriticalbpftoolRed Hatxfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()7.8 HighbpftoolRed Hattcp: restrict SO_ATTACH_FILTER to priv users5.5 MediumbpftoolRed Hatnet/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list8.7 HighbpftoolRed Hatipv6: sit: reload inner IPv6 header after GSO offloads9.8 CriticalbpftoolRed Hatsctp: validate embedded INIT chunk and address list lengths in cookie9.1 CriticalbpftoolRed Hatnet: guard timestamp cmsgs to real error queue skbs7.1 HighbpftoolRed HatUSB: serial: io_ti: fix heap overflow in get_manuf_info()6.8 MediumbpftoolRed HatALSA: timer: Fix UAF at snd_timer_user_params()7.8 HighbpftoolRed Hatmm/huge_memory: update file PMD counter before folio_put()7.8 HighbpftoolRed Hatzram: fix use-after-free in zram_bvec_write_partial()7.8 HighbpftoolRed Hatwifi: nl80211: reject oversized EMA RNR lists7.8 HighbpftoolRed HatIB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN9.8 CriticalbpftoolRed HatIn the Linux kernel, the following vulnerability has been resolved: futex/requeue: Prevent NULL...5.5 MediumbpftoolRed Hatdrm/amd/display: Clamp VBIOS HDMI retimer register count to array size7.8 HighbpftoolRed Hatnetfilter: require Ethernet MAC header before using eth_hdr()9.4 CriticalbpftoolRed Hatnet: pull headers in qdisc_pkt_len_segs_init()8.4 HighbpftoolRed Hatppp: require CAP_NET_ADMIN in target netns for unattached ioctls8.8 HighbpftoolRed HatBluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error5.5 MediumbpftoolRed HatBluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp8.8 HighbpftoolRed Hatdm cache policy smq: fix missing locks in invalidating cache blocks7.8 HighbpftoolRed Hatdm log: fix out-of-bounds write due to region_count overflow7.8 HighbpftoolRed Hatiommu/amd: Fix clone_alias() to use the original device's devid8.8 HighbpftoolRed Hatgfs2: add some missing log locking9.8 CriticalbpftoolRed Hatcrypto: ccp - copy IV using skcipher ivsize7.8 High- Show moreLoading…