kernel-modules-internal vulnerabilities (Red Hat)
217 vulnerabilities.
kernel-modules-internalRed Hatvsock/virtio: bind uarg before filling zerocopy skb7.8 Highkernel-modules-internalRed Hatusb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes()5.5 Mediumkernel-modules-internalRed Hatmacsec: fix replay protection at XPN lower-PN wrap8.1 Highkernel-modules-internalRed Hatipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()9.8 Criticalkernel-modules-internalRed Hatipv6: exthdrs: refresh nh after handling HAO option9.8 Criticalkernel-modules-internalRed Hatipv6: validate extension header length before copying to cmsg7.1 Highkernel-modules-internalRed Hatl2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname7.8 Highkernel-modules-internalRed HatUSB: serial: mxuport: fix memory corruption with small endpoint7.8 Highkernel-modules-internalRed Hatnet: ip_gre: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-modules-internalRed Hattipc: fix slab-use-after-free Read in tipc_aead_decrypt_done8.8 Highkernel-modules-internalRed HatKVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path7.8 Highkernel-modules-internalRed HatNFSD: Fix SECINFO_NO_NAME decode error cleanup9.8 Criticalkernel-modules-internalRed Hatfuse: re-lock request before replacing page cache folio7.8 Highkernel-modules-internalRed Hatvsock/virtio: fix zerocopy completion for multi-skb sends5.5 Mediumkernel-modules-internalRed HatKVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use8.8 Highkernel-modules-internalRed HatBluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()8.0 Highkernel-modules-internalRed Hatipvs: clear the svc scheduler ptr early on edit7.8 Highkernel-modules-internalRed Hattcp: restrict SO_ATTACH_FILTER to priv users5.5 Mediumkernel-modules-internalRed Hatnet/sched: taprio: fix use-after-free in advance_sched() on schedule switch7.8 Highkernel-modules-internalRed Hatcrypto: af_alg - Cap AEAD AD length to 0x800000005.5 Mediumkernel-modules-internalRed Hatxfrm: espintcp: do not reuse an in-progress partial send7.8 Highkernel-modules-internalRed Hatsctp: diag: reject stale associations in dump_one path7.1 Highkernel-modules-internalRed Hatnet/sched: act_ct: Only release RCU read lock after ct_ft7.8 Highkernel-modules-internalRed HatBluetooth: hci_uart: fix UAFs and race conditions in close and init paths7.8 Highkernel-modules-internalRed Hatx86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache8.8 Highkernel-modules-internalRed Hatnetfilter: nf_conncount: increase the connection clean up limit to 647.5 Highkernel-modules-internalRed Hatnetfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation7.5 Highkernel-modules-internalRed HatRDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send7.1 Highkernel-modules-internalRed Hatnet: skbuff: propagate shared-frag marker through frag-transfer helpers8.8 Highkernel-modules-internalRed Hatptrace: slightly saner 'get_dumpable()' logic7.1 Highkernel-modules-internalRed Hatnet: skbuff: preserve shared-frag marker during coalescing7.8 Highkernel-modules-internalRed Hatthermal: core: Fix thermal zone device registration error path7.8 Highkernel-modules-internalRed Hatopenvswitch: defer tunnel netdev_put to RCU release7.8 Highkernel-modules-internalRed Hatipvlan: Make the addrs_lock be per port7.8 Highkernel-modules-internalRed Hatnet: sock: fix hardened usercopy panic in sock_recv_errqueue5.5 Mediumkernel-modules-internalRed HatLogrus is vulnerable to DoS when using Entry.Writer()7.5 Highkernel-modules-internalRed Hatrunc: LSM labels can be bypassed with malicious config using dummy procfs files7.3 Highkernel-modules-internalRed Hatcontainer escape due to /dev/console mount and related races8.4 Highkernel-modules-internalRed Hatrunc container escape via "masked path" abuse due to mount race conditions7.3 Highkernel-modules-internalRed HatUnbounded allocation when parsing GNU sparse map in archive/tar4.3 Mediumkernel-modules-internalRed HatPodman: podman kube play command may overwrite host files8.1 Highkernel-modules-internalRed Hatcalipso: Don't call calipso functions for AF_INET sk.5.5 Mediumkernel-modules-internalRed HatCri-o: cri-o path traversal in log handling functions allows arbitrary unmounting6.6 Mediumkernel-modules-internalRed HatPodman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile8.6 Highkernel-modules-internalRed HatJinja has a sandbox breakout through indirect reference to format method5.4 Mediumkernel-modules-internalRed HatJinja has a sandbox breakout through malicious filenames5.4 Mediumkernel-modules-internalRed HatPodman: build context bind mount7.4 Highkernel-modules-internalRed HatPodman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)6.5 Mediumkernel-modules-internalRed HatBuildah: buildah allows arbitrary directory mount7.8 Highkernel-modules-internalRed HatPodman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library5.4 Medium- Show moreLoading…