kernel-headers vulnerabilities (TuxCare)
5,124 vulnerabilities.
kernel-headersTuxCarenetfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()8.6 Highkernel-headersTuxCarenetfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case8.2 Highkernel-headersTuxCarenetfilter: nf_conntrack_h323: check for zero length in DecodeQ931()9.1 Criticalkernel-headersTuxCarenet: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown7.0 Highkernel-headersTuxCarePM: runtime: Fix a race condition related to device removal4.7 Mediumkernel-headersTuxCarenet: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check7.8 Highkernel-headersTuxCarenet: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check7.8 Highkernel-headersTuxCarewifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure7.8 Highkernel-headersTuxCareipv6: add NULL checks for idev in SRv6 paths5.5 Mediumkernel-headersTuxCareudp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n5.5 Mediumkernel-headersTuxCaremtd: rawnand: serialize lock/unlock against other NAND operations7.1 Highkernel-headersTuxCaredrm/xe/reg_sr: Fix leak on xa_store failure5.5 Mediumkernel-headersTuxCaretls: Purge async_hold in tls_decrypt_async_wait()7.5 Highkernel-headersTuxCareclsact: Fix use-after-free in init/destroy rollback asymmetry7.8 Highkernel-headersTuxCarenetfilter: bpf: defer hook memory release until rcu readers are done7.8 Highkernel-headersTuxCareapparmor: Fix double free of ns_name in aa_replace_profiles()7.8 Highkernel-headersTuxCareKVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE5.5 Mediumkernel-headersTuxCarenf_tables: nft_dynset: fix possible stateful expression memleak in error path5.5 Mediumkernel-headersTuxCareicmp: fix NULL pointer dereference in icmp_tag_validation()5.5 Mediumkernel-headersTuxCarenfnetlink_osf: validate individual option lengths in fingerprints7.1 Highkernel-headersTuxCareBluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ8.8 Highkernel-headersTuxCarebridge: cfm: Fix race condition in peer_mep deletion7.8 Highkernel-headersTuxCarenetfilter: nf_tables: release flowtable after rcu grace period on error7.8 Highkernel-headersTuxCarenetfilter: xt_CT: drop pending enqueued packets on template removal7.8 Highkernel-headersTuxCareice: Fix memory leak in ice_set_ringparam()5.5 Mediumkernel-headersTuxCareSquashfs: check metadata block offset is within range7.1 Highkernel-headersTuxCaregve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL5.5 Mediumkernel-headersTuxCareHID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them5.5 Mediumkernel-headersTuxCarenet: bridge: fix nd_tbl NULL dereference when IPv6 is disabled5.5 Mediumkernel-headersTuxCarenet/sched: ets: fix divide by zero in the offload path5.5 Mediumkernel-headersTuxCareice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz5.5 Mediumkernel-headersTuxCareblktrace: fix __this_cpu_read/write in preemptible context5.5 Mediumkernel-headersTuxCarenfc: rawsock: cancel tx_work before socket teardown7.8 Highkernel-headersTuxCaresched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting5.5 Mediumkernel-headersTuxCareplatform/x86: dell-wmi-sysman: Don't hex dump plaintext password data5.5 Mediumkernel-headersTuxCarenet: phy: register phy led_triggers during probe to avoid AB-BA deadlock5.5 Mediumkernel-headersTuxCarewifi: radiotap: reject radiotap with unknown bits5.5 Mediumkernel-headersTuxCarenet: usb: kalmia: validate USB endpoints5.5 Mediumkernel-headersTuxCarewifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211()7.1 Highkernel-headersTuxCarebpf: Fix stack-out-of-bounds write in devmap7.8 Highkernel-headersTuxCarecan: mcp251x: fix deadlock in error path of mcp251x_open5.5 Mediumkernel-headersTuxCarex86/efi: defer freeing of boot services memory5.5 Mediumkernel-headersTuxCarecxl: Fix race of nvdimm_bus object when creating nvdimm objects4.7 Mediumkernel-headersTuxCarexdp: produce a warning when calculated tailroom is negative7.8 Highkernel-headersTuxCarenet: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs7.8 Highkernel-headersTuxCarewifi: cfg80211: cancel rfkill_block work in wiphy_unregister()7.8 Highkernel-headersTuxCareRDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()5.5 Mediumkernel-headersTuxCarecxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()7.1 Highkernel-headersTuxCareALSA: usb-audio: Use correct version for UAC3 header validation7.1 Highkernel-headersTuxCaredrm/vmwgfx: Return the correct value in vmw_translate_ptr functions7.8 High- Show moreLoading…