bpftool vulnerabilities (Red Hat)
3,725 vulnerabilities.
bpftoolRed Hatdm-integrity: don't increment hash_offset twice7.1 HighbpftoolRed Hatdm-verity: fix buffer overflow in FEC calculation9.8 CriticalbpftoolRed Hatscsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE9.8 CriticalbpftoolRed Hatnet: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink8.8 HighbpftoolRed Hatipvs: reload ip header after head reallocation9.8 CriticalbpftoolRed Hatvxlan: require CAP_NET_ADMIN in the device netns for changelink8.8 HighbpftoolRed Hatxfrm: fix stale skb->prev after async crypto steals a GSO segment9.8 CriticalbpftoolRed Hatwifi: mac80211: defer link RX stats percpu free to RCU8.8 HighbpftoolRed Hatppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF7.8 HighbpftoolRed Hatsmb/client: handle overlapping allocated ranges in fallocate9.8 CriticalbpftoolRed Hatnet/sched: act_tunnel_key: Defer dst_release to RCU callback7.8 HighbpftoolRed Hatsctp: fix auth_hmacs array size in struct sctp_cookie8.1 HighbpftoolRed Hatwifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request4.1 MediumbpftoolRed Hatsmb: client: validate DFS referral PathConsumed9.1 CriticalbpftoolRed Hatnet/packet: avoid fanout hook re-registration after unregister7.8 HighbpftoolRed Hatsctp: validate stream count in sctp_process_strreset_inreq()7.5 HighbpftoolRed Hatsctp: auth: verify auth requirement when auth_chunk is NULL9.8 CriticalbpftoolRed Hatvmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets7.5 HighbpftoolRed Hatnet: qrtr: restrict socket creation to the initial network namespace8.8 HighbpftoolRed Hatnet/mlx5: Fix MCIA register buffer overflow on 32 dword reads7.1 HighbpftoolRed Hatdrm/dp/mst: fix buffer overflows in sideband chunk accumulation7.0 HighbpftoolRed Hatdrm/amdgpu: Fix context pstate override handling7.8 HighbpftoolRed Hatdrm/amd/display: set new_stream to NULL after release7.8 HighbpftoolRed HatALSA: seq: close a re-opened queue timer in the destructor7.8 HighbpftoolRed HatBluetooth: RFCOMM: Fix session UAF in set_termios7.3 HighbpftoolRed Hatlibceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE9.8 CriticalbpftoolRed Hatlibceph: guard missing CRUSH type name lookup7.5 HighbpftoolRed Hatlibceph: refresh auth->authorizer_buf{,_len} after authorizer update9.8 CriticalbpftoolRed Hatlibceph: Reject monmaps advertising zero monitors7.5 HighbpftoolRed Hatnet: slip: serialize receive against buffer reallocation7.8 HighbpftoolRed Hatnet/iucv: fix use-after-free of a severed iucv_path8.8 HighbpftoolRed Hatnet/sched: serialize qdisc_rtab_list against concurrent get/put7.8 HighbpftoolRed Hatnet: gro: fix double aggregation of flush-marked skbs9.8 CriticalbpftoolRed Hatopenvswitch: fix GSO userspace truncation underflow9.8 CriticalbpftoolRed Hatpppoe: reload header pointer after dev_hard_header()7.8 HighbpftoolRed Hattipc: clear sock->sk on the failed-insert path in tipc_sk_create()9.8 CriticalbpftoolRed Hatdrm/amdgpu/vce: fix integer overflow in image size8.8 HighbpftoolRed Hatx86/bugs: Make Safe-RET robust against interrupt injection2.0 LowbpftoolRed HatRDMA/rxe: Fix a use-after-free problem in rxe_mmap7.8 HighbpftoolRed Hatipv4: fib: free fib_alias with kfree_rcu() on insert error path7.1 HighbpftoolRed Hatsctp: don't free the ASCONF's own transport in DEL-IP processing9.8 CriticalbpftoolRed Hatrhashtable: clear stale iter->p on table restart7.8 HighbpftoolRed HatKVM: nVMX: Hide shadow VMCS right after VMCLEAR8.8 HighbpftoolRed Hatperf/core: Detach event groups during remove_on_exec7.8 HighbpftoolRed Hatnet/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket9.8 CriticalbpftoolRed Hatcan: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet7.8 HighbpftoolRed Hatnvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path9.8 CriticalbpftoolRed Hatnet: openvswitch: reject oversized nested action attrs7.8 HighbpftoolRed Hatnet/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle9.8 CriticalbpftoolRed Hatiio: event: Fix event FIFO reset race7.1 High- Show moreLoading…