bpftool vulnerabilities (TuxCare)
4,797 vulnerabilities.
bpftoolTuxCareHID: picolcd: clamp eeprom debugfs read to bytes actually receivedNo scorebpftoolTuxCareHID: roccat: free buffered reports when destroying device2.4 LowbpftoolTuxCareHID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind5.4 MediumbpftoolTuxCarefsnotify: Fix stale object mask after concurrent mark updates2.0 LowbpftoolTuxCarebnx2x: fix double free in bnx2x_init_firmware() error path7.1 HighbpftoolTuxCaredm raid1: reserve space for NUL-terminator in build_constructor_string()No scorebpftoolTuxCaredm array: validate array block headers on read7.8 HighbpftoolTuxCaredm array: reject an array block whose value size is not the caller's7.8 HighbpftoolTuxCareBluetooth: RFCOMM: serialize security confirmation handling8.8 HighbpftoolTuxCareip: orphan prefetched skbs before multicast forwarding7.8 HighbpftoolTuxCarelibnvdimm/labels: Prevent integer overflow in __nd_label_validate()7.8 HighbpftoolTuxCarempls: reload header after pskb_may_pull()9.8 CriticalbpftoolTuxCarenouveau/gem: reserve the bo in the info ioctl around the vma lookup7.8 HighbpftoolTuxCareSUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow9.8 CriticalbpftoolTuxCareSUNRPC: svcauth_gss: enforce krb5 token minimum length9.8 CriticalbpftoolTuxCaresunrpc: route to a populated pool in svc_pool_for_cpu()7.5 HighbpftoolTuxCareSUNRPC: always drain cache_cleaner before destroying a cache_detail7.8 HighbpftoolTuxCareSUNRPC: harden gss_krb5_unwrap_v2 against short tokens9.8 CriticalbpftoolTuxCareSUNRPC: harden gss_unwrap_resp_priv length checks9.8 CriticalbpftoolTuxCaresunrpc: init gssp_lock before publishing proc entry7.8 HighbpftoolTuxCareSUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v29.1 CriticalbpftoolTuxCaresvcrdma: Reject connection when transport allocation fails8.2 HighbpftoolTuxCaresvcrdma: Reject inline replies that overflow the pull-up buffer9.8 CriticalbpftoolTuxCaresvcrdma: Use svc_xprt_put to free listener on create failure4.6 MediumbpftoolTuxCareudf: reject VAT indexes equal to the entry count7.1 HighbpftoolTuxCaresched/core: Make core-sched flips wait for in-flight selections7.8 HighbpftoolTuxCarescsi: core: Fill in DMA padding bytes in scsi_alloc_sgtables()0.0 NonebpftoolTuxCareRDMA/ucma: Lock the handler in ucma_set_ib_path()7.8 HighbpftoolTuxCareocfs2: validate directory-index entry counts when reading metadata9.8 CriticalbpftoolTuxCareopenvswitch: Fix CT limit teardown use-after-free7.8 HighbpftoolTuxCareopenvswitch: only skb_tx_error() a packet we are about to drop7.8 HighbpftoolTuxCarelockd: pin next file across nlm_inspect_file lock-drop9.8 CriticalbpftoolTuxCarelockd: fix NULL dereference on lockowner allocation failure5.7 MediumbpftoolTuxCarenvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone9.8 CriticalbpftoolTuxCarenvme-tcp: fix host memory disclosure on R2T for a read command7.5 HighbpftoolTuxCarenvme-tcp: reject a read that transferred too few bytes7.5 HighbpftoolTuxCaresctp: stop processing a packet once its association is deleted9.8 CriticalbpftoolTuxCaresctp: drop a chunk if its transport was removed9.8 CriticalbpftoolTuxCaresctp: fix NULL deref on untransmitted RECONF completion7.5 HighbpftoolTuxCaresctp: fix stream->outcnt underflow on duplicate RECONF responses7.5 HighbpftoolTuxCareiommu/vt-d: Force requesting ACS when tboot is enabled9.3 CriticalbpftoolTuxCarenet/iucv: filter frames in afiucv_hs_rcv() by ingress device8.1 HighbpftoolTuxCareslip: fix use-after-free in sl_sync()7.8 HighbpftoolTuxCarenet: tun: bound receive headroom7.8 HighbpftoolTuxCarenet: openvswitch: fix flow mask use-after-free on flow deletion7.8 HighbpftoolTuxCareNTB: ntb_transport: Reject oversized TX buffers7.5 HighbpftoolTuxCarenet: skbuff: don't touch shared zerocopy state in skb_tx_error()7.8 HighbpftoolTuxCaremfd: sm501: Fix potential memory leaks during removeNo scorebpftoolTuxCareALSA: 6fire: bound the MIDI event length from the device2.4 LowbpftoolTuxCareALSA: aloop: Check card index validity at probeNo score- Show moreLoading…