kernel-debug-devel vulnerabilities (TuxCare)
5,124 vulnerabilities.
kernel-debug-develTuxCarePCI/sysfs: Fix out-of-bounds read in pci_write_legacy_io()No scorekernel-debug-develTuxCareNFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock9.8 Criticalkernel-debug-develTuxCareNFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check8.2 Highkernel-debug-develTuxCarenfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown9.8 Criticalkernel-debug-develTuxCarenfsd: release path refs on follow_down() error7.5 Highkernel-debug-develTuxCarenfsd: validate symlink target length in NFSv4 CREATE7.5 Highkernel-debug-develTuxCarenfsd: defer vfree of compound ops to fix rpc_status UAF7.8 Highkernel-debug-develTuxCarenfsd: fix clock domain mismatch in clients_still_reclaiming()7.5 Highkernel-debug-develTuxCarenfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net8.1 Highkernel-debug-develTuxCarenfsd: gate nfs2 setacl by argp->mask9.1 Criticalkernel-debug-develTuxCarenfsd: gate nfs3 setacl by argp->mask9.1 Criticalkernel-debug-develTuxCarenfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops5.3 Mediumkernel-debug-develTuxCareNFSD: Prevent client use-after-free during delegation revoke9.8 Criticalkernel-debug-develTuxCarelibceph: reject buckets with mismatched CRUSH ids9.8 Criticalkernel-debug-develTuxCareceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock9.8 Criticalkernel-debug-develTuxCareceph: bound xattr value length in __build_xattrs()9.1 Criticalkernel-debug-develTuxCareaudit: avoid dropping live tree ref on fsnotify rule autoremove9.8 Criticalkernel-debug-develTuxCarecifs: call pagecache_isize_extended() in cifs_setsize() when extending4.8 Mediumkernel-debug-develTuxCaresmb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions7.8 Highkernel-debug-develTuxCaresmb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T29.8 Criticalkernel-debug-develTuxCaresmb: client: clear ce->tgthint in free_tgts()9.8 Criticalkernel-debug-develTuxCaresmb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()9.8 Criticalkernel-debug-develTuxCaresmb: client: reject a tree connect response whose byte count is too small9.1 Criticalkernel-debug-develTuxCareHID: picolcd: clamp eeprom debugfs read to bytes actually receivedNo scorekernel-debug-develTuxCareHID: roccat: free buffered reports when destroying device2.4 Lowkernel-debug-develTuxCareHID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind5.4 Mediumkernel-debug-develTuxCareecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet7.8 Highkernel-debug-develTuxCarefsnotify: Fix stale object mask after concurrent mark updates2.0 Lowkernel-debug-develTuxCarebnx2x: fix double free in bnx2x_init_firmware() error path7.1 Highkernel-debug-develTuxCaredm raid1: reserve space for NUL-terminator in build_constructor_string()No scorekernel-debug-develTuxCaredm array: validate array block headers on read7.8 Highkernel-debug-develTuxCaredm array: reject an array block whose value size is not the caller's7.8 Highkernel-debug-develTuxCareBluetooth: RFCOMM: serialize security confirmation handling8.8 Highkernel-debug-develTuxCareip: orphan prefetched skbs before multicast forwarding7.8 Highkernel-debug-develTuxCarelibnvdimm/labels: Prevent integer overflow in __nd_label_validate()7.8 Highkernel-debug-develTuxCarempls: reload header after pskb_may_pull()9.8 Criticalkernel-debug-develTuxCarenouveau/gem: reserve the bo in the info ioctl around the vma lookup7.8 Highkernel-debug-develTuxCareparams: fix charp corruption on allocation failureNo scorekernel-debug-develTuxCareSUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow9.8 Criticalkernel-debug-develTuxCareSUNRPC: svcauth_gss: enforce krb5 token minimum length9.8 Criticalkernel-debug-develTuxCaresunrpc: route to a populated pool in svc_pool_for_cpu()7.5 Highkernel-debug-develTuxCareSUNRPC: always drain cache_cleaner before destroying a cache_detail7.8 Highkernel-debug-develTuxCaresunrpc: defer rq_argp and rq_resp free until after RCU grace period7.8 Highkernel-debug-develTuxCareSUNRPC: harden gss_krb5_unwrap_v2 against short tokens9.8 Criticalkernel-debug-develTuxCareSUNRPC: harden gss_unwrap_resp_priv length checks9.8 Criticalkernel-debug-develTuxCaresunrpc: init gssp_lock before publishing proc entry7.8 Highkernel-debug-develTuxCareSUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v29.1 Criticalkernel-debug-develTuxCaresvcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails8.8 Highkernel-debug-develTuxCaresvcrdma: Fix offset arithmetic in read_chunk_range9.8 Criticalkernel-debug-develTuxCaresvcrdma: Reject connection when transport allocation fails8.2 High- Show moreLoading…