kernel-core vulnerabilities (TuxCare)
4,700 vulnerabilities.
kernel-coreTuxCareio_uring/napi: cap busy_poll_to 10 msec5.5 Mediumkernel-coreTuxCarewifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr()5.5 Mediumkernel-coreTuxCarewifi: mt76: mt7921: Place upper limit on station AID5.5 Mediumkernel-coreTuxCaretty: hvc_iucv: fix off-by-one in number of supported devices5.5 Mediumkernel-coreTuxCarescsi: sg: Resolve soft lockup issue when opening /dev/sgX5.5 Mediumkernel-coreTuxCaremailbox: add sanity check for channel array5.5 Mediumkernel-coreTuxCaremailbox: mailbox-test: don't free the reused channel7.8 Highkernel-coreTuxCareALSA: hda/conexant: Fix missing error check for jack detection5.5 Mediumkernel-coreTuxCareaudit: fix incorrect inheritable capability in CAPSET records5.5 Mediumkernel-coreTuxCareiommu/vt-d: Avoid NULL pointer dereference or refcount corruption8.8 Highkernel-coreTuxCareipv6: mcast: Fix use-after-free when processing MLD queries8.8 Highkernel-coreTuxCareipvs: clear the svc scheduler ptr early on edit7.8 Highkernel-coreTuxCarenetfilter: synproxy: add mutex to guard hook reference counting5.5 Mediumkernel-coreTuxCarenetfilter: conntrack_irc: fix possible out-of-bounds read8.2 Highkernel-coreTuxCarenetfilter: bridge: make ebt_snat ARP rewrite writable8.8 Highkernel-coreTuxCaredm cache policy smq: check allocation under invalidate lock7.8 Highkernel-coreTuxCarenet/sched: act_api: use RCU with deferred freeing for action lifecycle7.8 Highkernel-coreTuxCare6lowpan: fix off-by-one in multicast context address compression5.5 Mediumkernel-coreTuxCareBluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()8.0 Highkernel-coreTuxCareBluetooth: MGMT: validate advertising TLV before type checks7.1 Highkernel-coreTuxCareBluetooth: RFCOMM: validate skb length in MCC handlers8.1 Highkernel-coreTuxCareBluetooth: bnep: reject short frames before parsing7.1 Highkernel-coreTuxCareBluetooth: fix memory leak in error path of hci_alloc_dev()5.5 Mediumkernel-coreTuxCareBluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync5.5 Mediumkernel-coreTuxCarexsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata()7.8 Highkernel-coreTuxCareipv4: restrict IPOPT_SSRR and IPOPT_LSRR options5.5 Mediumkernel-coreTuxCaresctp: validate cached peer INIT chunk length in COOKIE_ECHO processing9.8 Criticalkernel-coreTuxCarenet/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr5.5 Mediumkernel-coreTuxCareALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams7.8 Highkernel-coreTuxCareALSA: seq: dummy: fix UMP event stack overread5.5 Mediumkernel-coreTuxCarexfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()7.8 Highkernel-coreTuxCarenetlabel: validate unlabeled address and mask attribute lengths5.5 Mediumkernel-coreTuxCaretcp: restrict SO_ATTACH_FILTER to priv users5.5 Mediumkernel-coreTuxCarenet/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list8.7 Highkernel-coreTuxCarenet/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure7.5 Highkernel-coreTuxCareipv6: sit: reload inner IPv6 header after GSO offloads9.8 Criticalkernel-coreTuxCarenet: openvswitch: fix possible kfree_skb of ERR_PTR5.5 Mediumkernel-coreTuxCaresctp: fix uninit-value in __sctp_rcv_asconf_lookup()9.1 Criticalkernel-coreTuxCaresctp: validate embedded INIT chunk and address list lengths in cookie9.1 Criticalkernel-coreTuxCarenet: guard timestamp cmsgs to real error queue skbs7.1 Highkernel-coreTuxCareip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()9.8 Criticalkernel-coreTuxCarenetfilter: x_tables: avoid leaking percpu counter pointers5.5 Mediumkernel-coreTuxCarenetfilter: nft_exthdr: fix register tracking for F_PRESENT flag5.5 Mediumkernel-coreTuxCarenetfilter: nft_tunnel: fix use-after-free on object destroy7.8 Highkernel-coreTuxCareBluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig5.5 Mediumkernel-coreTuxCareaccel/ivpu: Add bounds check for firmware runtime memory5.5 Mediumkernel-coreTuxCareaccel/ivpu: Add bounds checks for firmware log indices7.1 Highkernel-coreTuxCareaccel/ivpu: Add buffer overflow check in MS get_info_ioctl7.1 Highkernel-coreTuxCareaccel/ivpu: Fix signed integer truncation in IPC receive7.8 Highkernel-coreTuxCareUSB: serial: io_ti: fix heap overflow in get_manuf_info()6.8 Medium- Show moreLoading…