kernel-doc vulnerabilities (TuxCare)
4,609 vulnerabilities.
kernel-docTuxCareBluetooth: bnep: pin L2CAP connection during netdev registration8.8 Highkernel-docTuxCareBluetooth: L2CAP: validate option length before reading conf opt value7.1 Highkernel-docTuxCaresmb: client: fix query directory replay double-free9.8 Criticalkernel-docTuxCaresmb: client: fix query_info() replay double-free9.8 Criticalkernel-docTuxCaresmb: client: fix double-free in SMB2_ioctl() replay9.8 Criticalkernel-docTuxCaresmb: client: fix change notify replay double-free9.8 Criticalkernel-docTuxCaresmb: client: fix double-free in SMB2_flush() replay9.8 Criticalkernel-docTuxCaresmb: client: fix double-free in SMB2_open() replay8.8 Highkernel-docTuxCaresmb: client: Fix next buffer leak in receive_encrypted_standard()7.8 Highkernel-docTuxCaresmb: client: harden POSIX SID length parsing8.2 Highkernel-docTuxCaresmb: client: mask server-provided mode to 07777 in modefromsid7.1 Highkernel-docTuxCarewriteback: fix race between cgroup_writeback_umount() and inode_switch_wbs()7.8 Highkernel-docTuxCareproc: protect ptrace_may_access() with exec_update_lock (FD links)7.8 Highkernel-docTuxCaresched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT7.5 Highkernel-docTuxCarecpufreq: pcc: fix use-after-free and double free in _OSC evaluation7.8 Highkernel-docTuxCareproc: protect ptrace_may_access() with exec_update_lock (part 1)5.5 Mediumkernel-docTuxCareposix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path5.5 Mediumkernel-docTuxCareHID: lg-g15: cancel pending work on remove to fix a use-after-free7.8 Highkernel-docTuxCarebpf: Reject fragmented frames in devmap9.8 Criticalkernel-docTuxCarebpf: Validate BTF repeated field counts before expansion7.8 Highkernel-docTuxCarebpf: Allow LPM map access from sleepable BPF programs7.8 Highkernel-docTuxCarenet: usb: kalmia: bound RX frame length in kalmia_rx_fixup()5.5 Mediumkernel-docTuxCareusb: free iso schedules on failed submit7.8 Highkernel-docTuxCareUSB: idmouse: fix use-after-free on disconnect race7.8 Highkernel-docTuxCareUSB: ldusb: fix use-after-free on disconnect race7.8 Highkernel-docTuxCareUSB: iowarrior: fix use-after-free on disconnect7.8 Highkernel-docTuxCareUSB: iowarrior: fix use-after-free on disconnect race7.8 Highkernel-docTuxCareUSB: legousbtower: fix use-after-free on disconnect race7.8 Highkernel-docTuxCareUSB: serial: keyspan_pda: fix information leak5.5 Mediumkernel-docTuxCareUSB: serial: digi_acceleport: fix broken rx after throttle5.5 Mediumkernel-docTuxCareUSB: serial: digi_acceleport: fix hard lockup on disconnect5.5 Mediumkernel-docTuxCareusb: typec: tcpm: Validate SVID index in svdm_consume_modes()7.8 Highkernel-docTuxCareusb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove7.8 Highkernel-docTuxCareudf: validate VAT header length against the VAT inode size7.1 Highkernel-docTuxCareudf: validate sparing table length as an entry count, not a byte count7.8 Highkernel-docTuxCarenvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page9.1 Criticalkernel-docTuxCarenvmet-auth: validate reply message payload bounds against transfer length9.1 Criticalkernel-docTuxCareisofs: bound Rock Ridge symlink components to the SL record7.1 Highkernel-docTuxCarecrypto: ecc - Fix carry overflow in vli multiplication8.8 Highkernel-docTuxCarecrypto: drbg - Fix returning success on failure in CTR_DRBG5.5 Mediumkernel-docTuxCarecrypto: qat - protect service table iterations with service_lock7.8 Highkernel-docTuxCarecrypto: qat - validate RSA CRT component lengths7.8 Highkernel-docTuxCarespi: fsl-lpspi: terminate the RX channel on TX prepare failure path9.8 Criticalkernel-docTuxCaretracing: Prevent out-of-bounds read in glob matching7.1 Highkernel-docTuxCareNFSv4: include MAY_WRITE in open permission mask for O_TRUNC7.1 Highkernel-docTuxCaremm: do file ownership checks with the proper mount idmap5.5 Mediumkernel-docTuxCareKVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU8.2 Highkernel-docTuxCarei2c: core: fix adapter deregistration race7.8 Highkernel-docTuxCareInput: synaptics-rmi4 - bound the F3A keymap to the GPIO count7.8 Highkernel-docTuxCareInput: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count7.8 High- Show moreLoading…