rv vulnerabilities (Red Hat)
3,156 vulnerabilities.
-
rvRed Hat exec: Cleanup POSIX timers right after de_thread() 7.8 High -
rvRed Hat signal: Prevent exec() race 7.8 High -
rvRed Hat netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() 7.5 High -
rvRed Hat netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state 7.8 High -
rvRed Hat svcrdma: Reject Write/Reply chunks with segcount 0 9.1 Critical -
rvRed Hat SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry 9.8 Critical -
rvRed Hat nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() 7.8 High -
rvRed Hat NFSD: Prevent client use-after-free during blocked-lock reaping 9.8 Critical -
rvRed Hat nvme: add missing SRCU grace period in error path 9.8 Critical -
rvRed Hat nvmet-auth: Synchronize timeout work during SQ teardown 9.8 Critical -
rvRed Hat media: cx231xx: reject geometry changes while the VBI queue is busy 7.8 High -
rvRed Hat scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read 9.1 Critical -
rvRed Hat drm/amdkfd: Add TLB flush after MES queue eviction/suspension 8.8 High -
rvRed Hat KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation 9.3 Critical -
rvRed Hat nfsd: defer vfree of compound ops to fix rpc_status UAF 7.8 High -
rvRed Hat nfsd: don't free session slots that are still in use 9.8 Critical -
rvRed Hat nfsd: fix stale s2s_cp_stateids IDR entry for async COPY 9.8 Critical -
rvRed Hat nfsd: fix UAF in async copy cancel and shutdown 9.8 Critical -
rvRed Hat nfsd: initialize copy-notify stateid before publishing it 9.8 Critical -
rvRed Hat nfsd: revoke copy-notify stateids before dropping their reference 8.8 High -
rvRed Hat smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() 9.8 Critical -
rvRed Hat smb: client: reject a tree connect response whose byte count is too small 9.1 Critical -
rvRed Hat svcrdma: Reject inline replies that overflow the pull-up buffer 9.8 Critical -
rvRed Hat svcrdma: Validate Read chunk positions before reconstruction 9.8 Critical -
rvRed Hat nvme-tcp: fix host memory disclosure on R2T for a read command 7.5 High -
rvRed Hat nvme-tcp: reject a read that transferred too few bytes 7.5 High -
rvRed Hat net/iucv: filter frames in afiucv_hs_rcv() by ingress device 8.1 High -
rvRed Hat net: tun: bound receive headroom 7.8 High -
rvRed Hat net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry 8.2 High -
rvRed Hat KVM: s390: vsie: zero stale crypto bits 8.8 High -
rvRed Hat drm/vmwgfx: use check_add_overflow for shader size+offset bound 8.1 High -
rvRed Hat RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp 7.3 High -
rvRed Hat RDMA/rxe: Fix OOB in free_rd_atomic_resources() 9.8 Critical -
rvRed Hat xfrm: ah6: validate routing header segments_left 8.3 High -
rvRed Hat ipv6: fix use-after-free in ip6_finish_output2() 8.8 High -
rvRed Hat futex: Fix race on the initial mm->futex.phash.ref allocation 7.0 High -
rvRed Hat ipvs: do not propagate one-packet flag to synced conns 9.8 Critical -
rvRed Hat crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() 7.8 High -
rvRed Hat af_unix: Unlink scc_entry in unix_del_edge(). 7.8 High -
rvRed Hat perf: Reject exited events as group leaders 7.8 High -
rvRed Hat sctp: validate cookie AUTH state before use 9.8 Critical -
rvRed Hat netfilter: flowtable: publish GC-visible tuple last 9.8 Critical -
rvRed Hat ipvlan: inherit needed_headroom and needed_tailroom from phy_dev 9.8 Critical -
rvRed Hat udp: fix potential use-after-free in tunnel segmentation 10.0 Critical -
rvRed Hat ipvs: clear IPv4 options after rebasing tunnel ICMP errors 9.8 Critical -
rvRed Hat ALSA: usx2y: bound the hwdep mmap fault offset 7.8 High -
rvRed Hat sctp: keep chunk->transport in step with the list it is queued on 9.8 Critical -
rvRed Hat packet: use consistent hard_header_len in non-ring send paths 7.8 High -
rvRed Hat net: ipv6: clear suppressed fib6 rule result 9.8 Critical -
rvRed Hat vhost: reset the vring metadata cache on vring reconfiguration 8.8 High - Show olderLoading…