kernel-devel vulnerabilities (TuxCare)
5,124 vulnerabilities.
kernel-develTuxCareIB/mlx4: Fix use-after-free on pkey sysfs registration failureNo scorekernel-develTuxCarewifi: brcmsmac: fix UAF in brcms_free_timer()9.8 Criticalkernel-develTuxCarewifi: libertas_tf: fix UAF in lbtf_free_adapter()No scorekernel-develTuxCarewifi: libipw: reject TKIP frames without a full MIC6.9 Mediumkernel-develTuxCarewifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length9.8 Criticalkernel-develTuxCarewifi: mwifiex: validate scan response extentsNo scorekernel-develTuxCaredrm/amdkfd: Avoid integer underflow in EOP ring size calculation.5.7 Mediumkernel-develTuxCaresmb: client: cancel reconnect work in clean_demultiplex_info()7.5 Highkernel-develTuxCaresmb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs8.8 Highkernel-develTuxCarenvdimm: pmem: keep PREFLUSH before data writes5.5 Mediumkernel-develTuxCareRDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters9.8 Criticalkernel-develTuxCareACPI: platform: Use acpi_bus_get_primary_device()7.8 Highkernel-develTuxCarenvme-rdma: fix -EIO cleanup order in queue_rq7.0 Highkernel-develTuxCaresctp: fix a TOCTOU race in SCTP_CMD_TIMER_START8.1 Highkernel-develTuxCareALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF7.8 Highkernel-develTuxCareBluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan7.5 Highkernel-develTuxCareipv6: mcast: use rcu_assign_pointer() for __rcu list updates4.7 Mediumkernel-develTuxCareipv6: sr: restore network header before routing and forwarding7.4 Highkernel-develTuxCarenetfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()No scorekernel-develTuxCarebpf: reject BPF_PSEUDO_FUNC reference to the main programNo scorekernel-develTuxCareALSA: caiaq: Fix potential double-free at error pathNo scorekernel-develTuxCarebpf: Don't predict JMP32 pointer vs zero comparisons7.0 Highkernel-develTuxCarenexthop: Initialize extack in remove_nh_grp_entry()No scorekernel-develTuxCarenet: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflowNo scorekernel-develTuxCarebpf: mark a NULL call argument precise8.4 Highkernel-develTuxCarenet/sched: defer qdisc freeing after failed creation7.8 Highkernel-develTuxCarenet/mlx5e: Fix use-after-free race in sample_restore_put()No scorekernel-develTuxCarenet/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_putNo scorekernel-develTuxCarevdpa_sim_blk: reject out-of-range sector starts7.8 Highkernel-develTuxCareppp_synctty: ensure a writeable skb headerNo scorekernel-develTuxCareconfigfs: unhash the dentry before dropping the item in rmdirNo scorekernel-develTuxCareipv6: fix fib6 walker UAF on seq stop7.8 Highkernel-develTuxCarereboot: fix cad_pid use-after-free raceNo scorekernel-develTuxCaretracing: Set the trace clock before registering the histogram trigger9.8 Criticalkernel-develTuxCareALSA: us122l: Prevent write upgrades for read mappings7.0 Highkernel-develTuxCareALSA: usbusx2y: fix in04_last array size mismatch with in04_bufNo scorekernel-develTuxCareALSA: usbusx2y: validate URB actual_length in interrupt callback2.4 Lowkernel-develTuxCaretracing: Undo the registration when enabling the histogram trigger failsNo scorekernel-develTuxCarenet: mpls: clear inner_protocol when the last label is popped7.8 Highkernel-develTuxCarenet: openvswitch: fix use-after-free of the flow table mask array7.8 Highkernel-develTuxCarenetfilter: cttimeout: prevent UAF during module unload7.0 Highkernel-develTuxCarenetfilter: nf_log: unregister loggers before per-net teardown7.0 Highkernel-develTuxCareipvs: reject invalid states in connection template sync recordsNo scorekernel-develTuxCaresmb: client: reject short READ responses in CIFSSMBRead()7.1 Highkernel-develTuxCaresmb: client: reject userspace cifs.idmap descriptions8.5 Highkernel-develTuxCaresmb: client: honor forceuid/forcegid when mapping SIDs to uid/gid5.3 Mediumkernel-develTuxCaresmb: client: fix heap overflow in DACL owner/group rewrite8.8 Highkernel-develTuxCarewifi: ath9k_htc: don't store usb_device_idNo scorekernel-develTuxCarenet: usb: pegasus: don't rely on id table pointer arithmeticNo scorekernel-develTuxCareusb: xusbatm: don't rely on id table pointer arithmeticNo score- Show moreLoading…