kernel-modules-internal vulnerabilities (Red Hat)
114 vulnerabilities.
-
kernel-modules-internalRed Hat exec: Cleanup POSIX timers right after de_thread() 7.8 High -
kernel-modules-internalRed Hat signal: Prevent exec() race 7.8 High -
kernel-modules-internalRed Hat svcrdma: Reject Write/Reply chunks with segcount 0 9.1 Critical -
kernel-modules-internalRed Hat SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry 9.8 Critical -
kernel-modules-internalRed Hat NFSD: Prevent client use-after-free during blocked-lock reaping 9.8 Critical -
kernel-modules-internalRed Hat nvmet-auth: Synchronize timeout work during SQ teardown 9.8 Critical -
kernel-modules-internalRed Hat media: cx231xx: reject geometry changes while the VBI queue is busy 7.8 High -
kernel-modules-internalRed Hat nfsd: defer vfree of compound ops to fix rpc_status UAF 7.8 High -
kernel-modules-internalRed Hat nfsd: don't free session slots that are still in use 9.8 Critical -
kernel-modules-internalRed Hat nfsd: fix stale s2s_cp_stateids IDR entry for async COPY 9.8 Critical -
kernel-modules-internalRed Hat nfsd: fix UAF in async copy cancel and shutdown 9.8 Critical -
kernel-modules-internalRed Hat nfsd: initialize copy-notify stateid before publishing it 9.8 Critical -
kernel-modules-internalRed Hat nfsd: revoke copy-notify stateids before dropping their reference 8.8 High -
kernel-modules-internalRed Hat smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() 9.8 Critical -
kernel-modules-internalRed Hat smb: client: reject a tree connect response whose byte count is too small 9.1 Critical -
kernel-modules-internalRed Hat svcrdma: Reject inline replies that overflow the pull-up buffer 9.8 Critical -
kernel-modules-internalRed Hat svcrdma: Validate Read chunk positions before reconstruction 9.8 Critical -
kernel-modules-internalRed Hat net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry 8.2 High -
kernel-modules-internalRed Hat af_unix: Unlink scc_entry in unix_del_edge(). 7.8 High -
kernel-modules-internalRed Hat sctp: validate cookie AUTH state before use 9.8 Critical -
kernel-modules-internalRed Hat ipvlan: inherit needed_headroom and needed_tailroom from phy_dev 9.8 Critical -
kernel-modules-internalRed Hat udp: fix potential use-after-free in tunnel segmentation 10.0 Critical -
kernel-modules-internalRed Hat ALSA: usx2y: bound the hwdep mmap fault offset 7.8 High -
kernel-modules-internalRed Hat sctp: keep chunk->transport in step with the list it is queued on 9.8 Critical -
kernel-modules-internalRed Hat dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() 7.8 High -
kernel-modules-internalRed Hat Bluetooth: hci_sync: Fix advertising data UAFs 8.8 High -
kernel-modules-internalRed Hat cifs: validate DFS referral string offsets 9.4 Critical -
kernel-modules-internalRed Hat SUNRPC: pin upper rpc_clnt across the TLS connect_worker 9.8 Critical -
kernel-modules-internalRed Hat KVM: arm64: vgic: Check the interrupt is still ours before migrating it 9.3 Critical -
kernel-modules-internalRed Hat ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get 7.8 High -
kernel-modules-internalRed Hat dm-integrity: don't increment hash_offset twice 7.1 High -
kernel-modules-internalRed Hat net/sched: act_tunnel_key: Defer dst_release to RCU callback 7.8 High -
kernel-modules-internalRed Hat sctp: validate stream count in sctp_process_strreset_inreq() 7.5 High -
kernel-modules-internalRed Hat sctp: auth: verify auth requirement when auth_chunk is NULL 9.8 Critical -
kernel-modules-internalRed Hat sctp: avoid auth_enable sysctl UAF during netns teardown 7.8 High -
kernel-modules-internalRed Hat net/iucv: fix use-after-free of a severed iucv_path 8.8 High -
kernel-modules-internalRed Hat openvswitch: fix GSO userspace truncation underflow 9.8 Critical -
kernel-modules-internalRed Hat tipc: clear sock->sk on the failed-insert path in tipc_sk_create() 9.8 Critical -
kernel-modules-internalRed Hat bpf: Support for hardening against JIT spraying 5.7 Medium -
kernel-modules-internalRed Hat x86/bugs: Enable IBPB flush on BPF JIT allocation 5.7 Medium -
kernel-modules-internalRed Hat smb: client: fix double-free in SMB2_ioctl() replay 9.8 Critical -
kernel-modules-internalRed Hat i2c: stub: Reject I2C block transfers with invalid length 7.8 High -
kernel-modules-internalRed Hat idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() 9.8 Critical -
kernel-modules-internalRed Hat vsock/vmci: fix UAF when peer resets connection during handshake 8.8 High -
kernel-modules-internalRed Hat igc: set tx buffer type for SMD frames 9.8 Critical -
kernel-modules-internalRed Hat net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer 9.3 Critical -
kernel-modules-internalRed Hat bridge: mcast: Fix a possible use-after-free when removing a bridge port 7.8 High -
kernel-modules-internalRed Hat wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs 8.8 High -
kernel-modules-internalRed Hat Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close 8.8 High -
kernel-modules-internalRed Hat sctp: fix race between sctp_wait_for_connect and peeloff 7.8 High - Show olderLoading…