kernel-rt vulnerabilities (Rocky Linux)
1,116 vulnerabilities.
kernel-rtRocky Linuxnet: ip_gre: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-rtRocky Linuxkeys: Pin request_key_auth payload in instantiate paths7.8 Highkernel-rtRocky Linuxblk-cgroup: fix UAF in __blkcg_rstat_flush()7.8 Highkernel-rtRocky Linuxtipc: fix slab-use-after-free Read in tipc_aead_decrypt_done8.8 Highkernel-rtRocky LinuxpNFS: Fix use-after-free in pnfs_update_layout()9.8 Criticalkernel-rtRocky LinuxKVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path7.8 Highkernel-rtRocky Linuxnfsd: release layout stid on setlease failure9.8 Criticalkernel-rtRocky Linuxnfsd: fix posix_acl leak on SETACL decode failure7.5 Highkernel-rtRocky LinuxNFSv4/flexfiles: reject zero filehandle version count7.5 Highkernel-rtRocky LinuxNFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr7.5 Highkernel-rtRocky Linuxfuse: re-lock request before replacing page cache folio7.8 Highkernel-rtRocky Linuxdrm/amdgpu: zero-initialize GART table on allocation8.8 Highkernel-rtRocky Linuxvsock/virtio: fix zerocopy completion for multi-skb sends5.5 Mediumkernel-rtRocky Linuxdrm/amd/display: Use krealloc_array() in dal_vector_reserve()7.0 Highkernel-rtRocky Linuxipv6: mcast: Fix use-after-free when processing MLD queries8.8 Highkernel-rtRocky Linuxipvs: clear the svc scheduler ptr early on edit7.8 Highkernel-rtRocky Linuxnetfilter: conntrack_irc: fix possible out-of-bounds read8.2 Highkernel-rtRocky LinuxBluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()8.0 Highkernel-rtRocky LinuxBluetooth: RFCOMM: validate skb length in MCC handlers8.1 Highkernel-rtRocky Linuxsctp: validate cached peer INIT chunk length in COOKIE_ECHO processing9.8 Criticalkernel-rtRocky Linuxxfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()7.8 Highkernel-rtRocky Linuxtcp: restrict SO_ATTACH_FILTER to priv users5.5 Mediumkernel-rtRocky Linuxnet/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list8.7 Highkernel-rtRocky Linuxipv6: sit: reload inner IPv6 header after GSO offloads9.8 Criticalkernel-rtRocky Linuxnet: guard timestamp cmsgs to real error queue skbs7.1 Highkernel-rtRocky LinuxUSB: serial: io_ti: fix heap overflow in get_manuf_info()6.8 Mediumkernel-rtRocky LinuxALSA: timer: Fix UAF at snd_timer_user_params()7.8 Highkernel-rtRocky Linuxmm/huge_memory: update file PMD counter before folio_put()7.8 Highkernel-rtRocky Linuxzram: fix use-after-free in zram_bvec_write_partial()7.8 Highkernel-rtRocky Linuxwifi: nl80211: reject oversized EMA RNR lists7.8 Highkernel-rtRocky LinuxIB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN9.8 Criticalkernel-rtRocky Linuxdrm/amd/display: Clamp VBIOS HDMI retimer register count to array size7.8 Highkernel-rtRocky Linuxnetfilter: require Ethernet MAC header before using eth_hdr()9.4 Criticalkernel-rtRocky Linuxnet: pull headers in qdisc_pkt_len_segs_init()8.4 Highkernel-rtRocky Linuxppp: require CAP_NET_ADMIN in target netns for unattached ioctls8.8 Highkernel-rtRocky LinuxBluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp8.8 Highkernel-rtRocky Linuxdm cache policy smq: fix missing locks in invalidating cache blocks7.8 Highkernel-rtRocky Linuxdm log: fix out-of-bounds write due to region_count overflow7.8 Highkernel-rtRocky Linuxiommu/amd: Fix clone_alias() to use the original device's devid8.8 Highkernel-rtRocky Linuxgfs2: add some missing log locking9.8 Criticalkernel-rtRocky Linuxcrypto: ccp - copy IV using skcipher ivsize7.8 Highkernel-rtRocky Linuxice: fix double-free of tx_buf skb7.8 Highkernel-rtRocky Linuxipv6: fix possible UAF in icmpv6_rcv()9.8 Criticalkernel-rtRocky Linuxnetfilter: conntrack: remove sprintf usage9.8 Criticalkernel-rtRocky Linuxtipc: fix double-free in tipc_buf_append()9.8 Criticalkernel-rtRocky Linuxsched/psi: fix race between file release and pressure write7.8 Highkernel-rtRocky Linuxnetfilter: nf_conntrack_sip: don't use simple_strtoul9.8 Criticalkernel-rtRocky Linuxcrypto: af_alg - Cap AEAD AD length to 0x800000005.5 Mediumkernel-rtRocky Linuxnet: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove7.8 Highkernel-rtRocky Linuxnetfilter: nf_log: validate MAC header was set before dumping it7.1 High- Show moreLoading…