kernel-headers vulnerabilities (TuxCare)
5,124 vulnerabilities.
kernel-headersTuxCarenetfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry9.4 Criticalkernel-headersTuxCarefs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath8.8 Highkernel-headersTuxCareHID: roccat: fix use-after-free in roccat_report_event7.8 Highkernel-headersTuxCarewifi: brcmfmac: validate bsscfg indices in IF events8.8 Highkernel-headersTuxCarexfrm: account XFRMA_IF_ID in aevent size calculation5.5 Mediumkernel-headersTuxCarexsk: tighten UMEM headroom validation to account for tailroom and min frame7.8 Highkernel-headersTuxCarexsk: validate MTU against usable frame size on bind5.5 Mediumkernel-headersTuxCarexfrm: Wait for RCU readers during policy netns exit7.8 Highkernel-headersTuxCarexfrm_user: fix info leak in build_mapping()5.5 Mediumkernel-headersTuxCarenet: af_key: zero aligned sockaddr tail in PF_KEY exports5.5 Mediumkernel-headersTuxCarenetfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator5.5 Mediumkernel-headersTuxCarel2tp: Drop large packets with UDP encap5.5 Mediumkernel-headersTuxCareperf/x86/intel/uncore: Skip discovery table for offline dies5.5 Mediumkernel-headersTuxCareeventpoll: defer struct eventpoll free to RCU grace period7.8 Highkernel-headersTuxCaredcache: Limit the minimal number of bucket to two9.1 Criticalkernel-headersTuxCareext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal()5.5 Mediumkernel-headersTuxCareext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths5.5 Mediumkernel-headersTuxCareext4: always drain queued discard work in ext4_mb_release()5.5 Mediumkernel-headersTuxCareBluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp()7.1 Highkernel-headersTuxCarenetfilter: nft_ct: drop pending enqueued packets on removal7.8 Highkernel-headersTuxCareBluetooth: MGMT: Fix list corruption and UAF in command complete handlers7.8 Highkernel-headersTuxCarenet: mana: fix use-after-free in add_adev() error path7.8 Highkernel-headersTuxCarexfs: close crash window in attr dabtree inactivation4.7 Mediumkernel-headersTuxCarewifi: mac80211: check tdls flag in ieee80211_tdls_oper7.1 Highkernel-headersTuxCareHID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq8.1 Highkernel-headersTuxCareatm: lec: fix use-after-free in sock_def_readable()7.0 Highkernel-headersTuxCareHID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure7.8 Highkernel-headersTuxCareHID: core: Mitigate potential OOB by removing bogus memset()8.8 Highkernel-headersTuxCareHID: multitouch: Check to ensure report responses match the request7.8 Highkernel-headersTuxCarecrypto: af-alg - fix NULL pointer dereference in scatterwalk5.5 Mediumkernel-headersTuxCarempls: add seqcount to protect the platform_label{,s} pair7.1 Highkernel-headersTuxCarenet: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak5.5 Mediumkernel-headersTuxCarenet: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak7.1 Highkernel-headersTuxCareipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()9.8 Criticalkernel-headersTuxCareip6_tunnel: clear skb2->cb[] in ip4ip6_err()9.8 Criticalkernel-headersTuxCarenet: use skb_header_pointer() for TCPv4 GSO frag_off check5.5 Mediumkernel-headersTuxCarenet: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak5.5 Mediumkernel-headersTuxCarebpf: Fix regsafe() for pointers to packet7.8 Highkernel-headersTuxCarenetfilter: x_tables: ensure names are nul-terminated7.1 Highkernel-headersTuxCarenetfilter: nf_conntrack_helper: pass helper to expect cleanup7.8 Highkernel-headersTuxCarenetfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent5.5 Mediumkernel-headersTuxCarenetfilter: ctnetlink: ignore explicit helper on new expectations7.3 Highkernel-headersTuxCarenetfilter: nf_tables: reject immediate NF_QUEUE verdict5.5 Mediumkernel-headersTuxCareBluetooth: SCO: fix race conditions in sco_sock_connect()7.8 Highkernel-headersTuxCareBluetooth: MGMT: validate LTK enc_size on load7.8 Highkernel-headersTuxCarebpf: Reject sleepable kprobe_multi programs at attach time5.5 Mediumkernel-headersTuxCaredrm/ioc32: stop speculation on the drm_compat_ioctl path5.5 Mediumkernel-headersTuxCareALSA: caiaq: fix stack out-of-bounds read in init_card7.1 Highkernel-headersTuxCareALSA: ctxfi: Check the error for index mapping5.5 Mediumkernel-headersTuxCareBluetooth: SMP: derive legacy responder STK authentication from MITM state8.8 High- Show moreLoading…