kernel-doc vulnerabilities (TuxCare)
4,609 vulnerabilities.
kernel-docTuxCaresctp: keep chunk->transport in step with the list it is queued on9.8 Criticalkernel-docTuxCaresctp: fix use-after-free of cached ASCONF chunk9.8 Criticalkernel-docTuxCareRDMA/bnxt_re: zero shared page before exposing to userspace7.1 Highkernel-docTuxCarenet/sched: cls_route: fix fastmap use-after-free on filter7.8 Highkernel-docTuxCarepacket: use consistent hard_header_len in non-ring send paths7.8 Highkernel-docTuxCarenet: ipv6: clear suppressed fib6 rule result9.8 Criticalkernel-docTuxCarevhost: reset the vring metadata cache on vring reconfiguration8.8 Highkernel-docTuxCarethunderbolt: Prevent XDomain delayed work use-after-free on disconnect8.8 Highkernel-docTuxCarenetfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()9.8 Criticalkernel-docTuxCarenetfilter: nf_tables: make nft_object rhltable per table7.8 Highkernel-docTuxCarescsi: libiscsi: Fix stale-data leak into the SCSI sense buffer7.5 Highkernel-docTuxCarescsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer9.8 Criticalkernel-docTuxCarenet: do not send ICMP/NDISC Redirects when peer allocation fails7.5 Highkernel-docTuxCarehwmon: (adt7470) Fix busy-loop and I2C flooding in update threadNo scorekernel-docTuxCarenet/sched: cls_u32: validate offshift to prevent shift-out-of-bounds7.8 Highkernel-docTuxCareBluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp8.8 Highkernel-docTuxCaremm/hugetlb: fix list corruption in allocate_file_region_entries()7.8 Highkernel-docTuxCareBluetooth: mgmt: fix UAF in pair command cancellation7.8 Highkernel-docTuxCareBluetooth: HIDP: validate numbered report payloads7.1 Highkernel-docTuxCareALSA: 6fire: Fix UAF at error handling during probe7.0 Highkernel-docTuxCareALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes7.8 Highkernel-docTuxCareALSA: usb-audio: fix use-after-free in ump_to_endpoint()5.4 Mediumkernel-docTuxCareALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output()7.0 Highkernel-docTuxCareALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set7.3 Highkernel-docTuxCareALSA: usb-audio: Clamp frame size in implicit-feedback mode8.4 Highkernel-docTuxCareigbvf: Fix leak in TX DMA error cleanup9.8 Criticalkernel-docTuxCarebinfmt_misc: reject a flag character as the field delimiter7.1 Highkernel-docTuxCaremm/page_reporting: use system_freezable_wq to fix UAF during suspend7.8 Highkernel-docTuxCarenet: bridge: stop fast-leave after deleting a port group9.8 Criticalkernel-docTuxCarenet: pktgen: fix proc entry use-after-free7.8 Highkernel-docTuxCarevxlan: use neigh_ha_snapshot() in route_shortcircuit()10.0 Criticalkernel-docTuxCarevxlan: use pskb_network_may_pull() for transmit path header pulls9.8 Criticalkernel-docTuxCarevxlan: use pskb_network_may_pull() in route_shortcircuit()9.8 Criticalkernel-docTuxCaretracing: Check return value of __register_event() in trace_module_add_events()7.8 Highkernel-docTuxCarescsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write7.8 Highkernel-docTuxCaresctp: prevent peer transport count overflow8.8 Highkernel-docTuxCarenet: openvswitch: fix potential UAF on meter attach failure7.8 Highkernel-docTuxCarenet: openvswitch: fix skb leak on flow key update failure during ct6.8 Mediumkernel-docTuxCarecan: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents7.0 Highkernel-docTuxCarecan: peak_usb: add bounds check for USB channel index5.1 Mediumkernel-docTuxCarecan: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error7.8 Highkernel-docTuxCaredrm/amd/pm: fix pptable use-after-free7.8 Highkernel-docTuxCaredrm/vmwgfx: validate DRAW_PRIMITIVES header size before division7.8 Highkernel-docTuxCaredrm/vmwgfx: bound DMA command body size against suffix pointer8.8 Highkernel-docTuxCareusb: typec: ucsi: Fix race condition and ordering in port unregistrationNo scorekernel-docTuxCarerxrpc: serialize kernel accept preallocation with socket teardown9.8 Criticalkernel-docTuxCarefbcon: fix NULL pointer dereference for a console without vc_dataNo scorekernel-docTuxCaredrm/radeon: fix integer overflow in radeon_align_pitch()7.8 Highkernel-docTuxCaredrm/radeon: fix memory leak in radeon_ring_restore() on lock failure5.7 Mediumkernel-docTuxCarewifi: ath9k: fix OOB access from firmware tx status queue ID8.8 High- Show moreLoading…