bpftool vulnerabilities (TuxCare)
4,797 vulnerabilities.
bpftoolTuxCarelibceph: validate banner payload length7.5 HighbpftoolTuxCareslip: remove slip_hangup() to fix use-after-free in slip_receive_buf()7.8 HighbpftoolTuxCareHID: sony: clean up device list on probe failure8.8 HighbpftoolTuxCareALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()7.0 HighbpftoolTuxCaretracing: Take trace_array reference when opening options file7.8 HighbpftoolTuxCarescsi: target: iscsi: Reserve a terminator byte for the login payload9.1 CriticalbpftoolTuxCareHID: rmi: fix OOB access with undersized RMI reports8.8 HighbpftoolTuxCarenvme: add missing SRCU grace period in error path9.8 CriticalbpftoolTuxCarenvdimm/btt: reject an arena whose nfree is below the lane count7.8 HighbpftoolTuxCareKVM: nVMX: Always flush vpid02 on first use8.8 HighbpftoolTuxCaremedia: cx23885: cancel NetUP CI work before teardown7.8 HighbpftoolTuxCaremedia: em28xx: defer audio-only extension registration7.0 HighbpftoolTuxCarescsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()8.1 HighbpftoolTuxCarescsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation8.4 HighbpftoolTuxCarescsi: qla2xxx: Fix cs84xx use-after-free on host teardown7.8 HighbpftoolTuxCarescsi: qla2xxx: Avoid double completion in async IOCB timeout9.8 CriticalbpftoolTuxCarescsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read9.1 CriticalbpftoolTuxCaredrm: fix race between partial drm_dev_register() failure and ioctl7.8 HighbpftoolTuxCaredrm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check7.1 HighbpftoolTuxCaredrm/gud: NUL-terminate TV mode names read from the device5.2 MediumbpftoolTuxCareext4: fix out-of-bounds read in ext4_read_inline_dir()9.1 CriticalbpftoolTuxCareSUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6No scorebpftoolTuxCarexfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full9.8 CriticalbpftoolTuxCareisofs: fix out-of-bounds page array access on empty zisofs block9.8 CriticalbpftoolTuxCaretracing: Fix use-after-free with same-name named triggers7.8 HighbpftoolTuxCareHID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature8.8 HighbpftoolTuxCarelib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()No scorebpftoolTuxCarePCI/sysfs: Fix out-of-bounds read in pci_write_legacy_io()No scorebpftoolTuxCareNFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check8.2 HighbpftoolTuxCarenfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown9.8 CriticalbpftoolTuxCarenfsd: release path refs on follow_down() error7.5 HighbpftoolTuxCarenfsd: validate symlink target length in NFSv4 CREATE7.5 HighbpftoolTuxCarenfsd: fix clock domain mismatch in clients_still_reclaiming()7.5 HighbpftoolTuxCarenfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net8.1 HighbpftoolTuxCarenfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget9.8 CriticalbpftoolTuxCarenfsd: gate nfs2 setacl by argp->mask9.1 CriticalbpftoolTuxCarenfsd: gate nfs3 setacl by argp->mask9.1 CriticalbpftoolTuxCarenfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops5.3 MediumbpftoolTuxCareNFSD: Prevent client use-after-free during delegation revoke9.8 CriticalbpftoolTuxCarelibceph: reject buckets with mismatched CRUSH ids9.8 CriticalbpftoolTuxCareceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock9.8 CriticalbpftoolTuxCareceph: fix UAF in check_new_map() on session freed during unlock9.8 CriticalbpftoolTuxCareceph: bound xattr value length in __build_xattrs()9.1 CriticalbpftoolTuxCareaudit: avoid dropping live tree ref on fsnotify rule autoremove9.8 CriticalbpftoolTuxCarecifs: call pagecache_isize_extended() in cifs_setsize() when extending4.8 MediumbpftoolTuxCaresmb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions7.8 HighbpftoolTuxCaresmb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T29.8 CriticalbpftoolTuxCaresmb: client: clear ce->tgthint in free_tgts()9.8 CriticalbpftoolTuxCaresmb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()9.8 CriticalbpftoolTuxCaresmb: client: reject a tree connect response whose byte count is too small9.1 Critical- Show moreLoading…