bpftool vulnerabilities (TuxCare)
4,797 vulnerabilities.
bpftoolTuxCareaf_unix: Fix UAF read of tail->len in unix_stream_data_wait()8.8 HighbpftoolTuxCarescsi: isci: Fix use-after-free in device removal path7.8 HighbpftoolTuxCareRDMA/siw: Reject MPA FPDU length underflow before signed receive math9.8 CriticalbpftoolTuxCaredrm/amd/display: Validate GPIO pin LUT table size before iterating7.8 HighbpftoolTuxCarenet: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring9.8 CriticalbpftoolTuxCarenet: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer9.3 CriticalbpftoolTuxCarenet: mana: validate rx_req_idx to prevent out-of-bounds array access9.3 CriticalbpftoolTuxCaresecurity/keys: fix missed RCU read section on lookup7.8 HighbpftoolTuxCarexfrm: Check for underflow in xfrm_state_mtu7.8 HighbpftoolTuxCarenetfilter: synproxy: refresh tcphdr after skb_ensure_writable9.8 CriticalbpftoolTuxCareipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()7.8 HighbpftoolTuxCareALSA: pcm: oss: Fix setup list UAF on proc write error7.8 HighbpftoolTuxCaretunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()9.8 CriticalbpftoolTuxCarevxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu()9.8 CriticalbpftoolTuxCaretunnels: do not assume transport header in iptunnel_pmtud_check_icmp()9.1 CriticalbpftoolTuxCarebonding: refuse to enslave CAN devices5.5 MediumbpftoolTuxCarenet/sched: fix packet loop on netem when duplicate is on5.5 MediumbpftoolTuxCareBluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp8.8 HighbpftoolTuxCaresctp: fix race between sctp_wait_for_connect and peeloff7.8 HighbpftoolTuxCareipv6: fix possible infinite loop in fib6_select_path()7.5 HighbpftoolTuxCareusb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes()5.5 MediumbpftoolTuxCareUSB: serial: safe_serial: fix memory corruption with small endpoint7.8 HighbpftoolTuxCareBluetooth: ISO: fix UAF in iso_recv_frame8.8 HighbpftoolTuxCareBluetooth: ISO: serialize iso_sock_clear_timer with socket lock7.8 HighbpftoolTuxCareusb: dwc2: Fix use after free in debug code7.8 HighbpftoolTuxCareipv6: exthdrs: refresh nh after handling HAO option9.8 CriticalbpftoolTuxCareip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().8.8 HighbpftoolTuxCarexfrm: input: hold netns during deferred transport reinjection8.8 HighbpftoolTuxCareip6: vti: Use ip6_tnl.net in vti6_changelink().8.8 HighbpftoolTuxCareHID: wacom: Fix OOB write in wacom_hid_set_device_mode()8.8 HighbpftoolTuxCareusb: usbtmc: check URB actual_length for interrupt-IN notifications7.1 HighbpftoolTuxCarethunderbolt: property: Reject dir_len < 4 to prevent size_t underflow5.1 MediumbpftoolTuxCarescsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker5.5 MediumbpftoolTuxCarescsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()9.8 CriticalbpftoolTuxCarescsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf9.8 CriticalbpftoolTuxCarescsi: target: iscsi: Validate CHAP_R length before base64 decode9.8 CriticalbpftoolTuxCaredrm/i915: Fix potential UAF in TTM object purge7.8 HighbpftoolTuxCarenetfilter: nf_tables: add hook transactions for device deletions7.8 HighbpftoolTuxCarenet: ip_gre: require CAP_NET_ADMIN in the device netns for changelink8.8 HighbpftoolTuxCarefbdev: fix use-after-free in store_modes()7.8 HighbpftoolTuxCareexfat: fix potential use-after-free in exfat_find_dir_entry()9.8 CriticalbpftoolTuxCareKVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level8.8 HighbpftoolTuxCaretipc: fix slab-use-after-free Read in tipc_aead_decrypt_done8.8 HighbpftoolTuxCarepNFS: Fix use-after-free in pnfs_update_layout()9.8 CriticalbpftoolTuxCareKVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path7.8 HighbpftoolTuxCarenfsd: release layout stid on setlease failure9.8 CriticalbpftoolTuxCarenfsd: fix posix_acl leak on SETACL decode failure7.5 HighbpftoolTuxCareNFSv4/flexfiles: reject zero filehandle version count7.5 HighbpftoolTuxCareNFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr7.5 HighbpftoolTuxCarefuse: re-lock request before replacing page cache folio7.8 High- Show moreLoading…