kernel-firmware vulnerabilities (TuxCare)
474 vulnerabilities.
kernel-firmwareTuxCareecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet7.8 Highkernel-firmwareTuxCaredm raid1: reserve space for NUL-terminator in build_constructor_string()No scorekernel-firmwareTuxCareparams: fix charp corruption on allocation failureNo scorekernel-firmwareTuxCareSUNRPC: svcauth_gss: enforce krb5 token minimum length9.8 Criticalkernel-firmwareTuxCaresunrpc: route to a populated pool in svc_pool_for_cpu()7.5 Highkernel-firmwareTuxCaresvcrdma: Reject connection when transport allocation fails8.2 Highkernel-firmwareTuxCaresctp: drop a chunk if its transport was removed9.8 Criticalkernel-firmwareTuxCarepower: supply: max17040: propagate register read errorsNo scorekernel-firmwareTuxCareslip: fix use-after-free in sl_sync()7.8 Highkernel-firmwareTuxCaremfd: sm501: Fix potential memory leaks during removeNo scorekernel-firmwareTuxCareselinux: require every boolean value to be definedNo scorekernel-firmwareTuxCaresctp: reject stale cookies with mismatched verification tags6.3 Mediumkernel-firmwareTuxCareipvs: use parsed transport offset in TCP state lookup6.9 Mediumkernel-firmwareTuxCarexfrm: ah6: validate routing header segments_left7.3 Highkernel-firmwareTuxCareALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output()5.1 Mediumkernel-firmwareTuxCareUSB: serial: option: fix slab OOB read in interrupt URB callback2.4 Lowkernel-firmwareTuxCareBluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept6.0 Mediumkernel-firmwareTuxCarerndis_host: add overflow check in rndis_rx_fixup()5.2 Mediumkernel-firmwareTuxCareALSA: dummy: Check card index validity at probeNo scorekernel-firmwareTuxCareipv4: reject undersized MTUs in ip_do_fragment()6.8 Mediumkernel-firmwareTuxCarefbdev: serialize mode sysfs access with lock_fb_info()No scorekernel-firmwareTuxCareHID: core: fix OOB read of field->usage in hid_set_field()2.4 Lowkernel-firmwareTuxCareselinux: reject a class permission count below its inherited commonNo scorekernel-firmwareTuxCareselinux: reject a permission value exceeding the class permission countNo scorekernel-firmwareTuxCareaf_packet: Don't send zero-byte data in tpacket_snd().4.8 Mediumkernel-firmwareTuxCarechar: tlclk: fix use-after-free in tlclk_cleanup()7.8 Highkernel-firmwareTuxCareinet: frags: strip GSO state from fragments before reassembly8.6 Highkernel-firmwareTuxCarexfs: bounds-check buffer log item's dirty bitmap8.4 Highkernel-firmwareTuxCaresctp: validate cookie AUTH state before use9.8 Criticalkernel-firmwareTuxCarenet/atm: fix slab-out-of-bounds read in vcc_setsockopt()7.1 Highkernel-firmwareTuxCareALSA: usx2y: bound the hwdep mmap fault offset7.8 Highkernel-firmwareTuxCareipv6: prevent in6_dev_get() from resurrecting inet6_dev7.8 Highkernel-firmwareTuxCareip6_tunnel: clear skb2->cb[] in ip6ip6_err()9.8 Criticalkernel-firmwareTuxCaresctp: keep chunk->transport in step with the list it is queued on9.8 Criticalkernel-firmwareTuxCarescsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer9.8 Criticalkernel-firmwareTuxCareALSA: seq: oss: Fix UAF at handling events with embedded SysEx data7.8 Highkernel-firmwareTuxCareALSA: seq: midi: Serialize output teardown with event_input7.8 Highkernel-firmwareTuxCareconfigfs_lookup(): don't leave ->s_dentry dangling on failure7.8 Highkernel-firmwareTuxCaresctp: validate embedded address parameter length9.1 Criticalkernel-firmwareTuxCaresctp: fix err_chunk memory leaks in INIT handling8.7 Highkernel-firmwareTuxCaresctp: add INIT verification after cookie unpacking9.8 Criticalkernel-firmwareTuxCarebridge: stp: Fix a potential use-after-free when deleting a bridge7.8 Highkernel-firmwareTuxCareipv6: mcast: Fix potential UAF in MLD delayed work9.8 Criticalkernel-firmwareTuxCaredm-log: fix a bitset_size overflow on 32bit machines7.8 Highkernel-firmwareTuxCarewifi: libertas_tf: fix use-after-free in lbtf_free_adapter()5.4 Mediumkernel-firmwareTuxCareIB/mad: Drop unmatched RMPP responses before reassembly7.1 Highkernel-firmwareTuxCarewifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one()No scorekernel-firmwareTuxCaresctp: fix auth_hmacs array size in struct sctp_cookie8.1 Highkernel-firmwareTuxCareUSB: serial: io_edgeport: cap received transmit credits7.0 Highkernel-firmwareTuxCaresctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid7.3 High- Show moreLoading…