bpftool vulnerabilities (TuxCare)
4,797 vulnerabilities.
bpftoolTuxCarecrypto: algif_aead - Fix minimum RX size check for decryption5.5 MediumbpftoolTuxCarenet: mana: fix use-after-free in add_adev() error path7.8 HighbpftoolTuxCarexfs: close crash window in attr dabtree inactivation4.7 MediumbpftoolTuxCarewifi: mac80211: check tdls flag in ieee80211_tdls_oper7.1 HighbpftoolTuxCareHID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq8.1 HighbpftoolTuxCareatm: lec: fix use-after-free in sock_def_readable()7.0 HighbpftoolTuxCareHID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure7.8 HighbpftoolTuxCareHID: multitouch: Check to ensure report responses match the request7.8 HighbpftoolTuxCarecrypto: af-alg - fix NULL pointer dereference in scatterwalk5.5 MediumbpftoolTuxCarempls: add seqcount to protect the platform_label{,s} pair7.1 HighbpftoolTuxCarenet: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak5.5 MediumbpftoolTuxCarenet: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak7.1 HighbpftoolTuxCareipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()9.8 CriticalbpftoolTuxCareip6_tunnel: clear skb2->cb[] in ip4ip6_err()9.8 CriticalbpftoolTuxCarenet: use skb_header_pointer() for TCPv4 GSO frag_off check5.5 MediumbpftoolTuxCarenet: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak5.5 MediumbpftoolTuxCarecrypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption7.8 HighbpftoolTuxCarenetfilter: nf_conntrack_helper: pass helper to expect cleanup7.8 HighbpftoolTuxCarenetfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent5.5 MediumbpftoolTuxCarenetfilter: ctnetlink: ignore explicit helper on new expectations7.3 HighbpftoolTuxCarenetfilter: nf_tables: reject immediate NF_QUEUE verdict5.5 MediumbpftoolTuxCareBluetooth: MGMT: validate LTK enc_size on load7.8 HighbpftoolTuxCarebpf: Reject sleepable kprobe_multi programs at attach time5.5 MediumbpftoolTuxCaredrm/ioc32: stop speculation on the drm_compat_ioctl path5.5 MediumbpftoolTuxCareALSA: caiaq: fix stack out-of-bounds read in init_card7.1 HighbpftoolTuxCareALSA: ctxfi: Check the error for index mapping5.5 MediumbpftoolTuxCareBluetooth: SMP: derive legacy responder STK authentication from MITM state8.8 HighbpftoolTuxCareusb: ulpi: fix double free in ulpi_register_interface() error path7.8 HighbpftoolTuxCareusb: usbtmc: Flush anchored URBs in usbtmc_release7.8 HighbpftoolTuxCarebridge: br_nd_send: validate ND option lengths5.5 MediumbpftoolTuxCarevxlan: validate ND option lengths in vxlan_na_create5.5 MediumbpftoolTuxCareusb: gadget: f_uac1_legacy: validate control request size7.8 HighbpftoolTuxCaresmb: client: validate the whole DACL before rewriting it in cifsacl8.8 HighbpftoolTuxCarecrypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed7.1 HighbpftoolTuxCarecrypto: ccp: Don't attempt to copy ID to userspace if PSP command failed7.1 HighbpftoolTuxCarerxrpc: Fix missing validation of ticket length in non-XDR key preparsing7.8 HighbpftoolTuxCarefuse: reject oversized dirents in page cache7.8 HighbpftoolTuxCarertnetlink: add missing netlink_ns_capable() check for peer netns5.5 MediumbpftoolTuxCarexen/privcmd: fix double free via VMA splitting7.8 HighbpftoolTuxCareBuffer overflow in drivers/xen/sys-hypervisor.c7.8 HighbpftoolTuxCareIn the Linux kernel, the following vulnerability has been resolved: driver core: enforce...7.8 HighbpftoolTuxCaremm/kasan: fix double free for kasan pXds7.8 HighbpftoolTuxCareA transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to...2.0 LowbpftoolTuxCarenetfilter: ip6t_eui64: reject invalid MAC header for all packets9.4 CriticalbpftoolTuxCarenet: sched: act_csum: validate nested VLAN headers5.5 MediumbpftoolTuxCarenetfilter: xt_multiport: validate range encoding in checkentry5.5 MediumbpftoolTuxCarenet: ipv6: flowlabel: defer exclusive option free until RCU teardown7.8 HighbpftoolTuxCareopenvswitch: validate MPLS set/set_masked payload length7.1 HighbpftoolTuxCareopenvswitch: defer tunnel netdev_put to RCU release7.8 HighbpftoolTuxCarecrypto: af_alg - limit RX SG extraction by receive buffer budget5.5 Medium- Show moreLoading…