kernel-doc vulnerabilities (TuxCare)
4,609 vulnerabilities.
kernel-docTuxCaresmb: client: clear ce->tgthint in free_tgts()9.8 Criticalkernel-docTuxCaresmb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()9.8 Criticalkernel-docTuxCaresmb: client: reject a tree connect response whose byte count is too small9.1 Criticalkernel-docTuxCareHID: picolcd: clamp eeprom debugfs read to bytes actually receivedNo scorekernel-docTuxCareHID: roccat: free buffered reports when destroying device2.4 Lowkernel-docTuxCareHID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind5.4 Mediumkernel-docTuxCareecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet7.8 Highkernel-docTuxCarefsnotify: Fix stale object mask after concurrent mark updates2.0 Lowkernel-docTuxCarebnx2x: fix double free in bnx2x_init_firmware() error path7.1 Highkernel-docTuxCaredm raid1: reserve space for NUL-terminator in build_constructor_string()No scorekernel-docTuxCaredm array: validate array block headers on read7.8 Highkernel-docTuxCaredm array: reject an array block whose value size is not the caller's7.8 Highkernel-docTuxCareBluetooth: RFCOMM: serialize security confirmation handling8.8 Highkernel-docTuxCareip: orphan prefetched skbs before multicast forwarding7.8 Highkernel-docTuxCarelibnvdimm/labels: Prevent integer overflow in __nd_label_validate()7.8 Highkernel-docTuxCarempls: reload header after pskb_may_pull()9.8 Criticalkernel-docTuxCarenouveau/gem: reserve the bo in the info ioctl around the vma lookup7.8 Highkernel-docTuxCareparams: fix charp corruption on allocation failureNo scorekernel-docTuxCareSUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow9.8 Criticalkernel-docTuxCareSUNRPC: svcauth_gss: enforce krb5 token minimum length9.8 Criticalkernel-docTuxCaresunrpc: route to a populated pool in svc_pool_for_cpu()7.5 Highkernel-docTuxCareSUNRPC: always drain cache_cleaner before destroying a cache_detail7.8 Highkernel-docTuxCaresunrpc: defer rq_argp and rq_resp free until after RCU grace period7.8 Highkernel-docTuxCareSUNRPC: harden gss_krb5_unwrap_v2 against short tokens9.8 Criticalkernel-docTuxCareSUNRPC: harden gss_unwrap_resp_priv length checks9.8 Criticalkernel-docTuxCaresunrpc: init gssp_lock before publishing proc entry7.8 Highkernel-docTuxCaresvcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails8.8 Highkernel-docTuxCaresvcrdma: Fix offset arithmetic in read_chunk_range9.8 Criticalkernel-docTuxCaresvcrdma: Reject connection when transport allocation fails8.2 Highkernel-docTuxCaresvcrdma: Use svc_xprt_put to free listener on create failure4.6 Mediumkernel-docTuxCareudf: reject VAT indexes equal to the entry count7.1 Highkernel-docTuxCaresched/core: Make core-sched flips wait for in-flight selections7.8 Highkernel-docTuxCarescsi: core: Fill in DMA padding bytes in scsi_alloc_sgtables()0.0 Nonekernel-docTuxCareRDMA/ucma: Lock the handler in ucma_set_ib_path()7.8 Highkernel-docTuxCareopenvswitch: Fix CT limit teardown use-after-free7.8 Highkernel-docTuxCarelockd: pin next file across nlm_inspect_file lock-drop9.8 Criticalkernel-docTuxCarelockd: fix NULL dereference on lockowner allocation failure5.7 Mediumkernel-docTuxCaresctp: stop processing a packet once its association is deleted9.8 Criticalkernel-docTuxCaresctp: drop a chunk if its transport was removed9.8 Criticalkernel-docTuxCaresctp: fix stream->outcnt underflow on duplicate RECONF responses7.5 Highkernel-docTuxCarepower: supply: max17040: propagate register read errorsNo scorekernel-docTuxCareiommu/vt-d: Force requesting ACS when tboot is enabled9.3 Criticalkernel-docTuxCarenet/iucv: filter frames in afiucv_hs_rcv() by ingress device8.1 Highkernel-docTuxCareslip: fix use-after-free in sl_sync()7.8 Highkernel-docTuxCarenet: tun: bound receive headroom7.8 Highkernel-docTuxCarenet: openvswitch: fix flow mask use-after-free on flow deletion7.8 Highkernel-docTuxCareNTB: ntb_transport: Reject oversized TX buffers7.5 Highkernel-docTuxCarenet: skbuff: don't touch shared zerocopy state in skb_tx_error()7.8 Highkernel-docTuxCareseg6: reset IP6CB after IPv6 decapsulation9.8 Criticalkernel-docTuxCaremfd: sm501: Fix potential memory leaks during removeNo score- Show moreLoading…