kernel-64k-modules-extra vulnerabilities (TuxCare)
2,720 vulnerabilities.
kernel-64k-modules-extraTuxCareproc: protect ptrace_may_access() with exec_update_lock (FD links)7.8 Highkernel-64k-modules-extraTuxCareproc: protect ptrace_may_access() with exec_update_lock (part 1)5.5 Mediumkernel-64k-modules-extraTuxCareHID: lg-g15: cancel pending work on remove to fix a use-after-free7.8 Highkernel-64k-modules-extraTuxCarebpf: Validate BTF repeated field counts before expansion7.8 Highkernel-64k-modules-extraTuxCarebpf: Allow LPM map access from sleepable BPF programs7.8 Highkernel-64k-modules-extraTuxCarenet: usb: kalmia: bound RX frame length in kalmia_rx_fixup()5.5 Mediumkernel-64k-modules-extraTuxCareusb: free iso schedules on failed submit7.8 Highkernel-64k-modules-extraTuxCareUSB: idmouse: fix use-after-free on disconnect race7.8 Highkernel-64k-modules-extraTuxCareUSB: ldusb: fix use-after-free on disconnect race7.8 Highkernel-64k-modules-extraTuxCareUSB: iowarrior: fix use-after-free on disconnect7.8 Highkernel-64k-modules-extraTuxCareUSB: iowarrior: fix use-after-free on disconnect race7.8 Highkernel-64k-modules-extraTuxCareUSB: legousbtower: fix use-after-free on disconnect race7.8 Highkernel-64k-modules-extraTuxCareusb: typec: tcpm: Validate SVID index in svdm_consume_modes()7.8 Highkernel-64k-modules-extraTuxCareusb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove7.8 Highkernel-64k-modules-extraTuxCareudf: validate VAT header length against the VAT inode size7.1 Highkernel-64k-modules-extraTuxCareudf: validate sparing table length as an entry count, not a byte count7.8 Highkernel-64k-modules-extraTuxCarenvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page9.1 Criticalkernel-64k-modules-extraTuxCarenvmet-auth: validate reply message payload bounds against transfer length9.1 Criticalkernel-64k-modules-extraTuxCarecrypto: qat - protect service table iterations with service_lock7.8 Highkernel-64k-modules-extraTuxCarecrypto: qat - validate RSA CRT component lengths7.8 Highkernel-64k-modules-extraTuxCarespi: fsl-lpspi: terminate the RX channel on TX prepare failure path9.8 Criticalkernel-64k-modules-extraTuxCaremm: do file ownership checks with the proper mount idmap5.5 Mediumkernel-64k-modules-extraTuxCareKVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU8.2 Highkernel-64k-modules-extraTuxCareInput: synaptics-rmi4 - bound the F3A keymap to the GPIO count7.8 Highkernel-64k-modules-extraTuxCareInput: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count7.8 Highkernel-64k-modules-extraTuxCareRDMA/siw: bound Read Response placement to the RREAD length9.8 Criticalkernel-64k-modules-extraTuxCaresmb: client: reject overlapping data areas in SMB2 responses9.1 Criticalkernel-64k-modules-extraTuxCareInput: elan_i2c - validate firmware size before use7.1 Highkernel-64k-modules-extraTuxCareocteontx2-af: CGX: add bounds check to cgx_speed_mbps index7.8 Highkernel-64k-modules-extraTuxCaredrm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async7.0 Highkernel-64k-modules-extraTuxCareKVM: x86: Check for invalid/obsolete root *after* making MMU pages available8.8 Highkernel-64k-modules-extraTuxCarei2c: stub: Reject I2C block transfers with invalid length7.8 Highkernel-64k-modules-extraTuxCarenetfilter: ipset: fix race between dump and ip_set_list resize7.8 Highkernel-64k-modules-extraTuxCarewifi: cfg80211: advance loop vars in cfg80211_merge_profile()5.5 Mediumkernel-64k-modules-extraTuxCaretracing: Do not call map->ops->elt_free() if elt_alloc() fails5.5 Mediumkernel-64k-modules-extraTuxCarenet: ifb: report ethtool stats over num_tx_queues7.1 Highkernel-64k-modules-extraTuxCareipv4: raw: reject IP_HDRINCL packets with ihl < 57.8 Highkernel-64k-modules-extraTuxCareixgbevf: fix use-after-free in VEPA multicast source pruning9.8 Criticalkernel-64k-modules-extraTuxCareaf_unix: Fix UAF read of tail->len in unix_stream_data_wait()8.8 Highkernel-64k-modules-extraTuxCaredrm/virtio: use uninterruptible resv lock for plane updates7.8 Highkernel-64k-modules-extraTuxCaredrm/amd/display: Validate GPIO pin LUT table size before iterating7.8 Highkernel-64k-modules-extraTuxCarenet: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring9.8 Criticalkernel-64k-modules-extraTuxCarenet: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer9.3 Criticalkernel-64k-modules-extraTuxCareALSA: seq: Serialize UMP output teardown with event_input7.8 Highkernel-64k-modules-extraTuxCarenet: mana: validate rx_req_idx to prevent out-of-bounds array access9.3 Criticalkernel-64k-modules-extraTuxCareblk-mq: pop cached request if it is usable7.8 Highkernel-64k-modules-extraTuxCaresecurity/keys: fix missed RCU read section on lookup7.8 Highkernel-64k-modules-extraTuxCarexfrm: Check for underflow in xfrm_state_mtu7.8 Highkernel-64k-modules-extraTuxCarenetfilter: synproxy: refresh tcphdr after skb_ensure_writable9.8 Criticalkernel-64k-modules-extraTuxCareipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()7.8 High- Show moreLoading…