kernel-rt-kvm vulnerabilities (Red Hat)
3,868 vulnerabilities.
kernel-rt-kvmRed HatCeph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery8.9 Highkernel-rt-kvmRed Hatptrace: slightly saner 'get_dumpable()' logic7.1 Highkernel-rt-kvmRed HatImproper isolation of shared resources within the CPU operation cache on Zen 2-based products...7.3 Highkernel-rt-kvmRed Hatnet: skbuff: preserve shared-frag marker during coalescing7.8 Highkernel-rt-kvmRed Hatnetfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()7.1 Highkernel-rt-kvmRed Hatscsi: qla2xxx: Completely fix fcport double free9.8 Criticalkernel-rt-kvmRed Hatdrm/amdgpu: Fix use-after-free race in VM acquire7.8 Highkernel-rt-kvmRed Hatnet/ipv6: ioam6: prevent schema length wraparound in trace fill9.8 Criticalkernel-rt-kvmRed Hatipv6: prevent possible UaF in addrconf_permanent_addr()7.8 Highkernel-rt-kvmRed HatBluetooth: SMP: force responder MITM requirements before building the pairing response8.8 Highkernel-rt-kvmRed Hatcrypto: caam - fix overflow on long hmac keys7.8 Highkernel-rt-kvmRed Hatnetfilter: flowtable: strictly check for maximum number of actions7.8 Highkernel-rt-kvmRed Hatmm/page_alloc: clear page->private in free_pages_prepare()7.8 Highkernel-rt-kvmRed Hatxfrm: esp: avoid in-place decrypt on shared skb frags8.8 Highkernel-rt-kvmRed HatALSA: usb-audio: Add sanity check for OOB writes at silencing7.8 Highkernel-rt-kvmRed Hatnetfilter: nf_conntrack_h323: fix OOB read in decode_choice()8.2 Highkernel-rt-kvmRed Hatdrm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()7.8 Highkernel-rt-kvmRed Hattcp: fix potential race in tcp_v6_syn_recv_sock()9.8 Criticalkernel-rt-kvmRed Hatnetfilter: xt_tcpmss: check remaining length before reading optlen8.2 Highkernel-rt-kvmRed Hatipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data()9.8 Criticalkernel-rt-kvmRed Hatmd/bitmap: fix GPF in write_page caused by resize race4.7 Mediumkernel-rt-kvmRed Hatxfs: fix freemap adjustments when adding xattrs to leaf blocks8.8 Highkernel-rt-kvmRed HatKVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation7.9 Highkernel-rt-kvmRed HatRDMA/umem: Fix double dma_buf_unpin in failure path7.8 Highkernel-rt-kvmRed Hatdlm: validate length in dlm_search_rsb_tree9.8 Criticalkernel-rt-kvmRed Hatnetfilter: ctnetlink: ensure safe access to master conntrack7.8 Highkernel-rt-kvmRed Hatnetfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry9.4 Criticalkernel-rt-kvmRed Hatfs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath8.8 Highkernel-rt-kvmRed Hatwifi: brcmfmac: validate bsscfg indices in IF events8.8 Highkernel-rt-kvmRed Hateventpoll: defer struct eventpoll free to RCU grace period7.8 Highkernel-rt-kvmRed Hatcrypto: algif_aead - Fix minimum RX size check for decryption5.5 Mediumkernel-rt-kvmRed Hatnet: mana: fix use-after-free in add_adev() error path7.8 Highkernel-rt-kvmRed HatHID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq8.1 Highkernel-rt-kvmRed Hatipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()9.8 Criticalkernel-rt-kvmRed Hatip6_tunnel: clear skb2->cb[] in ip4ip6_err()9.8 Criticalkernel-rt-kvmRed Hatnetfilter: nf_conntrack_helper: pass helper to expect cleanup7.8 Highkernel-rt-kvmRed HatBluetooth: SCO: fix race conditions in sco_sock_connect()7.8 Highkernel-rt-kvmRed HatBluetooth: MGMT: validate LTK enc_size on load7.8 Highkernel-rt-kvmRed HatBluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync7.8 Highkernel-rt-kvmRed Hatsmb: client: validate the whole DACL before rewriting it in cifsacl8.8 Highkernel-rt-kvmRed Hatrtnetlink: add missing netlink_ns_capable() check for peer netns5.5 Mediumkernel-rt-kvmRed Hatxen/privcmd: fix double free via VMA splitting7.8 Highkernel-rt-kvmRed HatBuffer overflow in drivers/xen/sys-hypervisor.c7.8 Highkernel-rt-kvmRed Hatnetfilter: ip6t_eui64: reject invalid MAC header for all packets9.4 Criticalkernel-rt-kvmRed Hatnet: sched: act_csum: validate nested VLAN headers5.5 Mediumkernel-rt-kvmRed Hatopenvswitch: defer tunnel netdev_put to RCU release7.8 Highkernel-rt-kvmRed Hatmptcp: fix slab-use-after-free in __inet_lookup_established9.8 Criticalkernel-rt-kvmRed Hatxfrm: hold dev ref until after transport_finish NF_HOOK7.8 Highkernel-rt-kvmRed Hatsmb: client: fix OOB reads parsing symlink error response8.1 Highkernel-rt-kvmRed Hatusbip: validate number_of_packets in usbip_pack_ret_submit()9.8 Critical- Show moreLoading…