kernel-doc vulnerabilities (TuxCare)
4,609 vulnerabilities.
kernel-docTuxCarefbdev: bound mode sysfs output to the sysfs buffer7.8 Highkernel-docTuxCarefbdev: clear fb_info->mode before deleting a videomode7.8 Highkernel-docTuxCaredrm/amdgpu: reject oversized IBs with per-ring packet limits8.8 Highkernel-docTuxCareInput: focaltech - fix array out-of-bounds in focaltech_process_rel_packet8.4 Highkernel-docTuxCarelibceph: Avoid using invalid osd indices from primary_temp9.8 Criticalkernel-docTuxCarexfs: bounds-check buffer log item's dirty bitmap8.4 Highkernel-docTuxCarexfs: fix ilock leak on error in xfs_dq_get_next_id7.0 Highkernel-docTuxCarexfs: don't swallow dquot recovery verification errors5.3 Mediumkernel-docTuxCareperf: Reject exited events as group leaders7.8 Highkernel-docTuxCaresctp: validate cookie AUTH state before use9.8 Criticalkernel-docTuxCarenetfilter: ipset: fix refcount race between list:set GC and swap7.8 Highkernel-docTuxCarenetfilter: flowtable: publish GC-visible tuple last9.8 Criticalkernel-docTuxCareipvlan: inherit needed_headroom and needed_tailroom from phy_dev9.8 Criticalkernel-docTuxCaremacvlan: inherit needed_headroom and needed_tailroom from lowerdev9.8 Criticalkernel-docTuxCarenet/sched: cls_bpf: reject dev-bound programs bound to a different device7.8 Highkernel-docTuxCareNFS: Pin the 'struct nfs_server' during a FREE_STATEID call9.8 Criticalkernel-docTuxCarebonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor7.3 Highkernel-docTuxCareenic: fix tx_hang_reset use-after-free on device removal7.8 Highkernel-docTuxCarebpf: Preserve pointer state for commuted arithmetic7.8 Highkernel-docTuxCarenet/mlx5: fw_tracer, return NULL on create error7.5 Highkernel-docTuxCarebpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()7.8 Highkernel-docTuxCarexsk: require at least 16 bytes of TX metadata7.8 Highkernel-docTuxCareudp: fix potential use-after-free in tunnel segmentation10.0 Criticalkernel-docTuxCarenet/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter8.2 Highkernel-docTuxCarenet/openvswitch: check Ethernet header length in key_extract()7.8 Highkernel-docTuxCarenet/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers7.8 Highkernel-docTuxCarenet/atm: fix slab-out-of-bounds read in vcc_setsockopt()7.1 Highkernel-docTuxCaresctp: clear control chunk transport if it is being removed9.8 Criticalkernel-docTuxCareALSA: usb-audio: fix OOB write on Type II inbound URBs7.0 Highkernel-docTuxCareusb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()2.4 Lowkernel-docTuxCaremm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAFNo scorekernel-docTuxCareima: fix out-of-bounds read in xattr_verify()5.3 Mediumkernel-docTuxCareipvs: clear IPv4 options after rebasing tunnel ICMP errors9.8 Criticalkernel-docTuxCarenet/packet: reset the MAC header on the packet-socket transmit path7.8 Highkernel-docTuxCarenetfilter: ebt_nflog: pin the NFLOG backend7.8 Highkernel-docTuxCareipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops4.8 Mediumkernel-docTuxCareipv4: fix use-after-free in fib_nhc_update_mtu()7.8 Highkernel-docTuxCareALSA: usb: Fix UAF at delayed release of MIDI2 EPs5.4 Mediumkernel-docTuxCareALSA: usx2y: bound the hwdep mmap fault offset7.8 Highkernel-docTuxCareperf/core: Fix group leader use-after-free after sibling detach7.8 Highkernel-docTuxCarefbdev: bitblit: bound-check glyph index in bit_cursor()7.8 Highkernel-docTuxCareipv6: prevent in6_dev_get() from resurrecting inet6_dev7.8 Highkernel-docTuxCarenetfilter: nf_conntrack: defer invalid log until after unlock7.5 Highkernel-docTuxCarenet/sched: act_ct: fix sk_buff leak when the header checks reject a packet7.5 Highkernel-docTuxCaretipc: read le->link under the node lock in tipc_node_link_down()7.8 Highkernel-docTuxCaresmb: client: Fix use-after-free in cifs_try_adding_channels()9.8 Criticalkernel-docTuxCareRevert "thermal/drivers/hwmon: Cleanup coding style a bit"8.4 Highkernel-docTuxCaremm/ptdump: always stabilise against page table freeing using init_mmNo scorekernel-docTuxCareip6_tunnel: clear skb2->cb[] in ip6ip6_err()9.8 Criticalkernel-docTuxCarebpf, sockmap: Fix sk_redir use-after-free in send verdict8.4 High- Show moreLoading…