kernel-firmware vulnerabilities (TuxCare)
474 vulnerabilities.
kernel-firmwareTuxCareALSA: seq: close a re-opened queue timer in the destructor7.8 Highkernel-firmwareTuxCareBluetooth: RFCOMM: Fix session UAF in set_termios7.3 Highkernel-firmwareTuxCarephonet: pep: fix use-after-free in pep_get_sb()9.8 Criticalkernel-firmwareTuxCarenet: slip: serialize receive against buffer reallocation7.8 Highkernel-firmwareTuxCarepppoe: reload header pointer after dev_hard_header()7.8 Highkernel-firmwareTuxCareKVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplugNo scorekernel-firmwareTuxCaresctp: don't free the ASCONF's own transport in DEL-IP processing9.8 Criticalkernel-firmwareTuxCareBluetooth: btusb: fix use-after-free on registration failure7.8 Highkernel-firmwareTuxCarenet: ipv4: bound TCP reordering sysctl writes and MTU probe sizes7.1 Highkernel-firmwareTuxCareusb: free iso schedules on failed submit7.8 Highkernel-firmwareTuxCareUSB: idmouse: fix use-after-free on disconnect race7.8 Highkernel-firmwareTuxCareUSB: ldusb: fix use-after-free on disconnect race7.8 Highkernel-firmwareTuxCareUSB: iowarrior: fix use-after-free on disconnect7.8 Highkernel-firmwareTuxCareUSB: iowarrior: fix use-after-free on disconnect race7.8 Highkernel-firmwareTuxCareUSB: legousbtower: fix use-after-free on disconnect race7.8 Highkernel-firmwareTuxCareudf: validate VAT header length against the VAT inode size7.1 Highkernel-firmwareTuxCareudf: validate sparing table length as an entry count, not a byte count7.8 Highkernel-firmwareTuxCareNFSv4: include MAY_WRITE in open permission mask for O_TRUNC7.1 Highkernel-firmwareTuxCareInput: touchwin - reset the packet index on every complete packet7.8 Highkernel-firmwareTuxCareipv4: raw: reject IP_HDRINCL packets with ihl < 57.8 Highkernel-firmwareTuxCarenet/sched: fix packet loop on netem when duplicate is on5.5 Mediumkernel-firmwareTuxCareUSB: serial: safe_serial: fix memory corruption with small endpoint7.8 Highkernel-firmwareTuxCareipv6: exthdrs: refresh nh after handling HAO option9.8 Criticalkernel-firmwareTuxCarefbdev: fix use-after-free in store_modes()7.8 Highkernel-firmwareTuxCarenfsd: fix posix_acl leak on SETACL decode failure7.5 Highkernel-firmwareTuxCareipv6: mcast: Fix use-after-free when processing MLD queries8.8 Highkernel-firmwareTuxCarenetfilter: conntrack_irc: fix possible out-of-bounds read8.2 Highkernel-firmwareTuxCarenetfilter: bridge: make ebt_snat ARP rewrite writable8.8 Highkernel-firmwareTuxCareBluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()8.0 Highkernel-firmwareTuxCareBluetooth: RFCOMM: validate skb length in MCC handlers8.1 Highkernel-firmwareTuxCareBluetooth: bnep: reject short frames before parsing7.1 Highkernel-firmwareTuxCaresctp: validate cached peer INIT chunk length in COOKIE_ECHO processing9.8 Criticalkernel-firmwareTuxCaresctp: validate embedded INIT chunk and address list lengths in cookie9.1 Criticalkernel-firmwareTuxCareUSB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr()7.8 Highkernel-firmwareTuxCareRDMA/srp: bound SRP_RSP sense copy by the received length9.1 Criticalkernel-firmwareTuxCarenetfilter: require Ethernet MAC header before using eth_hdr()9.4 Criticalkernel-firmwareTuxCaredm log: fix out-of-bounds write due to region_count overflow7.8 Highkernel-firmwareTuxCaresctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks7.8 Highkernel-firmwareTuxCarenetfilter: conntrack: remove sprintf usage9.8 Criticalkernel-firmwareTuxCarenetfilter: nfnetlink_osf: fix potential NULL dereference in ttl check7.5 Highkernel-firmwareTuxCarenetfilter: nf_conntrack_sip: don't use simple_strtoul9.8 Criticalkernel-firmwareTuxCarenetfilter: xt_policy: fix strict mode inbound policy matching8.3 Highkernel-firmwareTuxCareBluetooth: serialize accept_q access8.8 Highkernel-firmwareTuxCaredm: fix a buffer overflow in ioctl processing7.8 Highkernel-firmwareTuxCareinet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP9.1 Criticalkernel-firmwareTuxCaresmb: client: reject userspace cifs.spnego descriptions7.1 Highkernel-firmwareTuxCarefbcon: Avoid OOB font access if console rotation fails7.1 Highkernel-firmwareTuxCarewifi: b43legacy: enforce bounds check on firmware key index in RX path7.8 Highkernel-firmwareTuxCarewifi: b43: enforce bounds check on firmware key index in b43_rx()7.8 Highkernel-firmwareTuxCarexfrm: defensively unhash xfrm_state lists in __xfrm_state_delete7.8 High- Show moreLoading…