kernel-rt-kvm vulnerabilities (Red Hat)
3,868 vulnerabilities.
kernel-rt-kvmRed HatBluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp8.8 Highkernel-rt-kvmRed HatBluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close8.8 Highkernel-rt-kvmRed Hatsctp: fix race between sctp_wait_for_connect and peeloff7.8 Highkernel-rt-kvmRed Hatmemfd: deny writeable mappings when implying SEAL_WRITE8.4 Highkernel-rt-kvmRed HatBluetooth: HIDP: fix missing length checks in hidp_input_report()8.8 Highkernel-rt-kvmRed Hatipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()9.8 Criticalkernel-rt-kvmRed Hatipv6: exthdrs: refresh nh after handling HAO option9.8 Criticalkernel-rt-kvmRed Hatip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().8.8 Highkernel-rt-kvmRed Hatipv6: validate extension header length before copying to cmsg7.1 Highkernel-rt-kvmRed Hatxfrm: input: hold netns during deferred transport reinjection8.8 Highkernel-rt-kvmRed Hatip6: vti: Use ip6_tnl.net in vti6_changelink().8.8 Highkernel-rt-kvmRed Hatnetfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check8.2 Highkernel-rt-kvmRed Hatscsi: scsi_transport_fc: Widen FPIN pname walker counter to u328.1 Highkernel-rt-kvmRed Hatscsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()9.8 Criticalkernel-rt-kvmRed Hatscsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf9.8 Criticalkernel-rt-kvmRed Hatscsi: target: iscsi: Validate CHAP_R length before base64 decode9.8 Criticalkernel-rt-kvmRed Hatdrm/i915: Fix potential UAF in TTM object purge7.8 Highkernel-rt-kvmRed Hatdrm/amdgpu: fix amdgpu_hmm_range_get_pages7.8 Highkernel-rt-kvmRed Hatarm64: tlb: Flush walk cache when unsharing PMD tables7.8 Highkernel-rt-kvmRed Hatmac802154: llsec: add skb_cow_data() before in-place crypto8.8 Highkernel-rt-kvmRed Hatnet: ip_gre: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-rt-kvmRed Hatkeys: Pin request_key_auth payload in instantiate paths7.8 Highkernel-rt-kvmRed HatKVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level8.8 Highkernel-rt-kvmRed Hatblk-cgroup: fix UAF in __blkcg_rstat_flush()7.8 Highkernel-rt-kvmRed Hattipc: fix slab-use-after-free Read in tipc_aead_decrypt_done8.8 Highkernel-rt-kvmRed HatpNFS: Fix use-after-free in pnfs_update_layout()9.8 Criticalkernel-rt-kvmRed HatKVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path7.8 Highkernel-rt-kvmRed Hatnfsd: release layout stid on setlease failure9.8 Criticalkernel-rt-kvmRed Hatnfsd: fix posix_acl leak on SETACL decode failure7.5 Highkernel-rt-kvmRed HatNFSv4/flexfiles: reject zero filehandle version count7.5 Highkernel-rt-kvmRed HatNFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr7.5 Highkernel-rt-kvmRed Hatfuse: re-lock request before replacing page cache folio7.8 Highkernel-rt-kvmRed Hatdrm/amdgpu: zero-initialize GART table on allocation8.8 Highkernel-rt-kvmRed Hatxfs: resample the data fork mapping after cycling ILOCK7.8 Highkernel-rt-kvmRed Hatcrypto: krb5 - filter out async aead implementations at alloc9.8 Criticalkernel-rt-kvmRed Hataf_unix: Set gc_in_progress to true in unix_gc().7.1 Highkernel-rt-kvmRed HatKVM: x86: Fix shadow paging use-after-free due to unexpected role8.8 Highkernel-rt-kvmRed Hatdrm/i915/gem: Fix phys BO pread/pwrite with offset7.8 Highkernel-rt-kvmRed Hatdrm/amd/display: Use krealloc_array() in dal_vector_reserve()7.0 Highkernel-rt-kvmRed Hatipv6: mcast: Fix use-after-free when processing MLD queries8.8 Highkernel-rt-kvmRed Hatipvs: clear the svc scheduler ptr early on edit7.8 Highkernel-rt-kvmRed Hatnetfilter: conntrack_irc: fix possible out-of-bounds read8.2 Highkernel-rt-kvmRed Hatnetfilter: bridge: make ebt_snat ARP rewrite writable8.8 Highkernel-rt-kvmRed Hatnet/sched: act_api: use RCU with deferred freeing for action lifecycle7.8 Highkernel-rt-kvmRed HatBluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()8.0 Highkernel-rt-kvmRed HatBluetooth: RFCOMM: validate skb length in MCC handlers8.1 Highkernel-rt-kvmRed Hatsctp: validate cached peer INIT chunk length in COOKIE_ECHO processing9.8 Criticalkernel-rt-kvmRed Hatxfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()7.8 Highkernel-rt-kvmRed Hattcp: restrict SO_ATTACH_FILTER to priv users5.5 Mediumkernel-rt-kvmRed Hatnet/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list8.7 High- Show moreLoading…