libperf vulnerabilities (Red Hat)
3,272 vulnerabilities.
libperfRed HatKVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use8.8 HighlibperfRed HatKVM: x86: Fix shadow paging use-after-free due to unexpected role8.8 HighlibperfRed Hatipv4: account for fraggap on the paged allocation path7.8 HighlibperfRed Hatipv6: account for fraggap on the paged allocation path7.8 HighlibperfRed HatBluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()8.0 HighlibperfRed Hatdrm/i915/gem: Fix phys BO pread/pwrite with offset7.8 HighlibperfRed Hatfhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh()7.8 HighlibperfRed Hatdrm/amd/display: Use krealloc_array() in dal_vector_reserve()7.0 HighlibperfRed Hatvfio/pci: Clean up DMABUFs before disabling function8.8 HighlibperfRed Hatdrm/xe/eustall: Fix drm_dev_put called before stream disable in close7.8 HighlibperfRed Hatiommu/vt-d: Avoid NULL pointer dereference or refcount corruption8.8 HighlibperfRed HatKVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation8.8 HighlibperfRed Hatipv6: mcast: Fix use-after-free when processing MLD queries8.8 HighlibperfRed Hatipvs: clear the svc scheduler ptr early on edit7.8 HighlibperfRed Hatnetfilter: conntrack_irc: fix possible out-of-bounds read8.2 HighlibperfRed Hatnetfilter: bridge: make ebt_snat ARP rewrite writable8.8 HighlibperfRed Hatnet/sched: act_api: use RCU with deferred freeing for action lifecycle7.8 HighlibperfRed Hatipv6: anycast: insert aca into global hash under idev->lock7.8 HighlibperfRed HatBluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()8.0 HighlibperfRed HatBluetooth: RFCOMM: validate skb length in MCC handlers8.1 HighlibperfRed Hatsctp: validate cached peer INIT chunk length in COOKIE_ECHO processing9.8 CriticallibperfRed Hatxfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()7.8 HighlibperfRed Hattcp: restrict SO_ATTACH_FILTER to priv users5.5 MediumlibperfRed Hatnet: add pskb_may_pull() to skb_gro_receive_list()7.5 HighlibperfRed Hatipv6: sit: reload inner IPv6 header after GSO offloads9.8 CriticallibperfRed Hatsctp: validate embedded INIT chunk and address list lengths in cookie9.1 CriticallibperfRed Hatnet: guard timestamp cmsgs to real error queue skbs7.1 HighlibperfRed HatBluetooth: hci_sync: reject oversized Broadcast Announcement prepend7.8 HighlibperfRed Hataccel/ivpu: Add buffer overflow check in MS get_info_ioctl7.1 HighlibperfRed Hataccel/ivpu: Fix signed integer truncation in IPC receive7.8 HighlibperfRed HatUSB: serial: io_ti: fix heap overflow in get_manuf_info()6.8 MediumlibperfRed HatALSA: timer: Forcibly close timer instances at closing7.8 HighlibperfRed HatALSA: timer: Fix UAF at snd_timer_user_params()7.8 HighlibperfRed Hatmm/huge_memory: update file PMD counter before folio_put()7.8 HighlibperfRed Hatzram: fix use-after-free in zram_bvec_write_partial()7.8 HighlibperfRed Hatwifi: nl80211: reject oversized EMA RNR lists7.8 HighlibperfRed HatIB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN9.8 CriticallibperfRed HatIn the Linux kernel, the following vulnerability has been resolved: futex/requeue: Prevent NULL...5.5 MediumlibperfRed Hatmm/list_lru: drain before clearing xarray entry on reparent7.8 HighlibperfRed Hatdrm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX117.8 HighlibperfRed Hatdrm/amd/display: Clamp VBIOS HDMI retimer register count to array size7.8 HighlibperfRed Hatnetfilter: require Ethernet MAC header before using eth_hdr()9.4 CriticallibperfRed Hatnet: pull headers in qdisc_pkt_len_segs_init()8.4 HighlibperfRed Hatppp: require CAP_NET_ADMIN in target netns for unattached ioctls8.8 HighlibperfRed HatBluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error5.5 MediumlibperfRed HatBluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER8.8 HighlibperfRed HatBluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp8.8 HighlibperfRed Hatdm cache policy smq: fix missing locks in invalidating cache blocks7.8 HighlibperfRed Hatdm log: fix out-of-bounds write due to region_count overflow7.8 HighlibperfRed Hatiommu/amd: Fix clone_alias() to use the original device's devid8.8 High- Show moreLoading…