bpftool vulnerabilities (TuxCare)
4,797 vulnerabilities.
bpftoolTuxCaretipc: fix double-free in tipc_buf_append()9.8 CriticalbpftoolTuxCaresched/psi: fix race between file release and pressure write7.8 HighbpftoolTuxCarenetfilter: nf_conntrack_sip: don't use simple_strtoul9.8 CriticalbpftoolTuxCarenetdevsim: zero initialize struct iphdr in dummy sk_buff5.5 MediumbpftoolTuxCarenet/sched: netem: fix queue limit check to include reordered packets5.5 MediumbpftoolTuxCareneigh: let neigh_xmit take skb ownership7.5 HighbpftoolTuxCarecrypto: af_alg - Cap AEAD AD length to 0x800000005.5 MediumbpftoolTuxCarenetfilter: nft_ct: fix missing expect put in obj eval5.5 MediumbpftoolTuxCareKVM: Reject wrapped offset in kvm_reset_dirty_gfn()7.8 HighbpftoolTuxCareALSA: usb-audio: Bound MIDI endpoint descriptor scans5.5 MediumbpftoolTuxCareceph: fix a buffer leak in __ceph_setxattr()7.8 HighbpftoolTuxCareceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size5.5 MediumbpftoolTuxCarelibceph: Fix potential out-of-bounds access in osdmap_decode()9.1 CriticalbpftoolTuxCarelibceph: Fix potential null-ptr-deref in decode_choose_args()7.5 HighbpftoolTuxCarelibceph: Fix potential out-of-bounds access in __ceph_x_decrypt()7.5 HighbpftoolTuxCarelibceph: Fix potential out-of-bounds access in crush_decode()9.8 CriticalbpftoolTuxCarelibceph: handle rbtree insertion error in decode_choose_args()7.5 HighbpftoolTuxCarei2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl5.5 MediumbpftoolTuxCarenet: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove7.8 HighbpftoolTuxCarenet: skbuff: fix missing zerocopy reference in pskb_carve helpers7.8 HighbpftoolTuxCarenetfilter: nf_log: validate MAC header was set before dumping it7.1 HighbpftoolTuxCarexfrm: espintcp: do not reuse an in-progress partial send7.8 HighbpftoolTuxCaresctp: stream: fully roll back denied add-stream state7.5 HighbpftoolTuxCaresctp: purge outqueue on stale COOKIE-ECHO handling9.8 CriticalbpftoolTuxCareipc: limit next_id allocation to the valid ID range7.8 HighbpftoolTuxCarenetfilter: ipset: stop hash:* range iteration at end5.5 MediumbpftoolTuxCarenetfilter: xt_policy: fix strict mode inbound policy matching8.3 HighbpftoolTuxCareBluetooth: serialize accept_q access8.8 HighbpftoolTuxCaresctp: diag: reject stale associations in dump_one path7.1 HighbpftoolTuxCarenetfilter: nf_queue: hold bridge skb->dev while queued7.8 HighbpftoolTuxCarebpf: Free reuseport cBPF prog after RCU grace period.7.8 HighbpftoolTuxCareip6_vti: set netns_immutable on the fallback device.7.8 HighbpftoolTuxCarenet/sched: fix pedit partial COW leading to page cache corruption7.8 HighbpftoolTuxCaredm: fix unlocked test for dm_suspended_md7.8 HighbpftoolTuxCarenetfilter: nf_tables: use list_del_rcu for netlink hooks7.8 HighbpftoolTuxCaretun: free page on build_skb failure in tun_xdp_one()7.1 HighbpftoolTuxCaretun: free page on short-frame rejection in tun_xdp_one()7.1 HighbpftoolTuxCaretap: free page on error paths in tap_get_user_xdp()7.4 HighbpftoolTuxCarenet/sched: act_ct: Only release RCU read lock after ct_ft7.8 HighbpftoolTuxCarenvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free7.5 HighbpftoolTuxCareisofs: validate Rock Ridge CE continuation extent against volume size8.2 HighbpftoolTuxCaredm: fix a buffer overflow in ioctl processing7.8 HighbpftoolTuxCareinet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP9.1 CriticalbpftoolTuxCareprocfs: fix missing RCU protection when reading real_parent in do_task_stat()7.8 HighbpftoolTuxCarepstore/ram: fix buffer overflow in persistent_ram_save_old()7.8 HighbpftoolTuxCareocteontx2-af: Fix PF driver crash with kexec kernel booting5.5 MediumbpftoolTuxCaresmb: client: reject userspace cifs.spnego descriptions7.1 HighbpftoolTuxCareIn the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn3: Avoid...7.1 HighbpftoolTuxCarevsock: fix buffer size clamping order7.8 HighbpftoolTuxCaredrm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg7.1 High- Show moreLoading…