rtla vulnerabilities (Red Hat)
3,772 vulnerabilities.
rtlaRed Hataf_unix: Set gc_in_progress to true in unix_gc().7.1 HighrtlaRed HatKVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use8.8 HighrtlaRed HatKVM: x86: Fix shadow paging use-after-free due to unexpected role8.8 HighrtlaRed Hatipv4: account for fraggap on the paged allocation path7.8 HighrtlaRed Hatipv6: account for fraggap on the paged allocation path7.8 HighrtlaRed HatBluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()8.0 HighrtlaRed Hatdrm/i915/gem: Fix phys BO pread/pwrite with offset7.8 HighrtlaRed Hatfhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh()7.8 HighrtlaRed Hatdrm/amd/display: Use krealloc_array() in dal_vector_reserve()7.0 HighrtlaRed Hatvfio/pci: Clean up DMABUFs before disabling function8.8 HighrtlaRed Hatdrm/xe/eustall: Fix drm_dev_put called before stream disable in close7.8 HighrtlaRed Hatiommu/vt-d: Avoid NULL pointer dereference or refcount corruption8.8 HighrtlaRed HatKVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation8.8 HighrtlaRed Hatipv6: mcast: Fix use-after-free when processing MLD queries8.8 HighrtlaRed Hatipvs: clear the svc scheduler ptr early on edit7.8 HighrtlaRed Hatnetfilter: conntrack_irc: fix possible out-of-bounds read8.2 HighrtlaRed Hatnetfilter: bridge: make ebt_snat ARP rewrite writable8.8 HighrtlaRed Hatnet/sched: act_api: use RCU with deferred freeing for action lifecycle7.8 HighrtlaRed Hatipv6: anycast: insert aca into global hash under idev->lock7.8 HighrtlaRed HatBluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()8.0 HighrtlaRed HatBluetooth: RFCOMM: validate skb length in MCC handlers8.1 HighrtlaRed Hatsctp: validate cached peer INIT chunk length in COOKIE_ECHO processing9.8 CriticalrtlaRed Hatxfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()7.8 HighrtlaRed Hattcp: restrict SO_ATTACH_FILTER to priv users5.5 MediumrtlaRed Hatnet: add pskb_may_pull() to skb_gro_receive_list()7.5 HighrtlaRed Hatipv6: sit: reload inner IPv6 header after GSO offloads9.8 CriticalrtlaRed Hatsctp: validate embedded INIT chunk and address list lengths in cookie9.1 CriticalrtlaRed Hatnet: guard timestamp cmsgs to real error queue skbs7.1 HighrtlaRed HatBluetooth: hci_sync: reject oversized Broadcast Announcement prepend7.8 HighrtlaRed Hataccel/ivpu: Add buffer overflow check in MS get_info_ioctl7.1 HighrtlaRed Hataccel/ivpu: Fix signed integer truncation in IPC receive7.8 HighrtlaRed HatUSB: serial: io_ti: fix heap overflow in get_manuf_info()6.8 MediumrtlaRed HatALSA: timer: Forcibly close timer instances at closing7.8 HighrtlaRed HatALSA: timer: Fix UAF at snd_timer_user_params()7.8 HighrtlaRed Hatmm/huge_memory: update file PMD counter before folio_put()7.8 HighrtlaRed Hatzram: fix use-after-free in zram_bvec_write_partial()7.8 HighrtlaRed Hatwifi: nl80211: reject oversized EMA RNR lists7.8 HighrtlaRed HatIB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN9.8 CriticalrtlaRed HatIn the Linux kernel, the following vulnerability has been resolved: futex/requeue: Prevent NULL...5.5 MediumrtlaRed Hatmm/list_lru: drain before clearing xarray entry on reparent7.8 HighrtlaRed Hatdrm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX117.8 HighrtlaRed Hatdrm/amd/display: Clamp VBIOS HDMI retimer register count to array size7.8 HighrtlaRed Hatnetfilter: require Ethernet MAC header before using eth_hdr()9.4 CriticalrtlaRed Hatnet: pull headers in qdisc_pkt_len_segs_init()8.4 HighrtlaRed Hatppp: require CAP_NET_ADMIN in target netns for unattached ioctls8.8 HighrtlaRed HatBluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error5.5 MediumrtlaRed HatBluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER8.8 HighrtlaRed HatBluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp8.8 HighrtlaRed Hatdm cache policy smq: fix missing locks in invalidating cache blocks7.8 HighrtlaRed Hatdm log: fix out-of-bounds write due to region_count overflow7.8 High- Show moreLoading…