rtla vulnerabilities (Red Hat)
3,772 vulnerabilities.
rtlaRed Hatvsock/virtio: bind uarg before filling zerocopy skb7.8 HighrtlaRed Hatusb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes()5.5 MediumrtlaRed HatUSB: serial: cypress_m8: fix memory corruption with small endpoint7.8 HighrtlaRed Hatmemfd: deny writeable mappings when implying SEAL_WRITE8.4 HighrtlaRed HatBluetooth: HIDP: fix missing length checks in hidp_input_report()8.8 HighrtlaRed HatBluetooth: ISO: fix UAF in iso_recv_frame8.8 HighrtlaRed HatBluetooth: ISO: serialize iso_sock_clear_timer with socket lock7.8 HighrtlaRed HatBluetooth: hci_sync: fix UAF in hci_le_create_cis_sync8.8 HighrtlaRed Hatmacsec: fix replay protection at XPN lower-PN wrap8.1 HighrtlaRed Hatipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()9.8 CriticalrtlaRed Hatocteontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify8.8 HighrtlaRed Hatipv6: exthdrs: refresh nh after handling HAO option9.8 CriticalrtlaRed Hatip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().8.8 HighrtlaRed Hatipv6: validate extension header length before copying to cmsg7.1 HighrtlaRed Hatxfrm: input: hold netns during deferred transport reinjection8.8 HighrtlaRed Hatl2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname7.8 HighrtlaRed Hatip6: vti: Use ip6_tnl.net in vti6_changelink().8.8 HighrtlaRed Hatxfrm: route MIGRATE notifications to caller's netns7.3 HighrtlaRed Hatnetfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check8.2 HighrtlaRed Hatxfrm: esp: restore combined single-frag length gate9.8 CriticalrtlaRed HatUSB: serial: mxuport: fix memory corruption with small endpoint7.8 HighrtlaRed Hatscsi: scsi_transport_fc: Widen FPIN pname walker counter to u328.1 HighrtlaRed Hatscsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()9.8 CriticalrtlaRed Hatscsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf9.8 CriticalrtlaRed Hatscsi: target: iscsi: Validate CHAP_R length before base64 decode9.8 CriticalrtlaRed Hatdrm/i915: Fix potential UAF in TTM object purge7.8 HighrtlaRed Hatdrm/amdgpu: fix amdgpu_hmm_range_get_pages7.8 HighrtlaRed Hatarm64: tlb: Flush walk cache when unsharing PMD tables7.8 HighrtlaRed Hatwifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap7.6 HighrtlaRed Hatmac802154: llsec: add skb_cow_data() before in-place crypto8.8 HighrtlaRed Hatnet: ip_gre: require CAP_NET_ADMIN in the device netns for changelink8.8 HighrtlaRed HatKEYS: fix overflow in keyctl_pkey_params_get_2()7.8 HighrtlaRed Hatkeys: Pin request_key_auth payload in instantiate paths7.8 HighrtlaRed Hatexfat: fix potential use-after-free in exfat_find_dir_entry()9.8 CriticalrtlaRed HatKVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level8.8 HighrtlaRed Hatblk-cgroup: fix UAF in __blkcg_rstat_flush()7.8 HighrtlaRed Hattipc: fix slab-use-after-free Read in tipc_aead_decrypt_done8.8 HighrtlaRed HatpNFS: Fix use-after-free in pnfs_update_layout()9.8 CriticalrtlaRed HatKVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path7.8 HighrtlaRed Hatnfsd: release layout stid on setlease failure9.8 CriticalrtlaRed HatNFSD: Fix SECINFO_NO_NAME decode error cleanup9.8 CriticalrtlaRed Hatnfsd: fix posix_acl leak on SETACL decode failure7.5 HighrtlaRed Hatnfsd: fix dead ACL conflict guard in nfsd4_create7.5 HighrtlaRed HatNFSv4/flexfiles: reject zero filehandle version count7.5 HighrtlaRed HatNFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr7.5 HighrtlaRed Hatfuse: re-lock request before replacing page cache folio7.8 HighrtlaRed Hatdrm/amdgpu: zero-initialize GART table on allocation8.8 HighrtlaRed Hatxfs: resample the data fork mapping after cycling ILOCK7.8 HighrtlaRed Hatvsock/virtio: fix zerocopy completion for multi-skb sends5.5 MediumrtlaRed Hatcrypto: krb5 - filter out async aead implementations at alloc9.8 Critical- Show moreLoading…