kernel-headers vulnerabilities (TuxCare)
5,124 vulnerabilities.
kernel-headersTuxCarenvmet-tcp: fix race between ICReq handling and queue teardown9.8 Criticalkernel-headersTuxCareRDMA/rxe: Reject unknown opcodes before ICRC processing7.5 Highkernel-headersTuxCarenet: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo5.5 Mediumkernel-headersTuxCareKVM: x86: check for nEPT/nNPT in slow flush hypercalls5.5 Mediumkernel-headersTuxCareipmi: Check event message buffer response for bad data5.5 Mediumkernel-headersTuxCarewifi: mac80211: remove station if connection prep fails8.8 Highkernel-headersTuxCarewifi: b43: enforce bounds check on firmware key index in b43_rx()7.8 Highkernel-headersTuxCareip6_gre: Use cached t->net in ip6erspan_changelink().7.8 Highkernel-headersTuxCarelibceph: Fix slab-out-of-bounds access in auth message processing9.1 Criticalkernel-headersTuxCarexfrm: defensively unhash xfrm_state lists in __xfrm_state_delete7.8 Highkernel-headersTuxCareblock: add pgmap check to biovec_phys_mergeable9.8 Criticalkernel-headersTuxCareRDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads7.5 Highkernel-headersTuxCareKVM: x86: Fix shadow paging use-after-free due to unexpected GFN8.8 Highkernel-headersTuxCareipmi:si: Return state to normal if message allocation fails5.5 Mediumkernel-headersTuxCaredm-thin: fix metadata refcount underflow7.8 Highkernel-headersTuxCaresmb: client: validate dacloffset before building DACL pointers9.8 Criticalkernel-headersTuxCarenet: strparser: fix skb_head leak in strp_abort_strp()7.5 Highkernel-headersTuxCarenetfilter: reject zero shift in nft_bitwise5.5 Mediumkernel-headersTuxCareext4: fix bounds check in check_xattrs() to prevent out-of-bounds access7.1 Highkernel-headersTuxCarewifi: rtw88: check for PCI upstream bridge existence5.5 Mediumkernel-headersTuxCareALSA: aloop: Fix peer runtime UAF during format-change stop7.8 Highkernel-headersTuxCarezram: do not forget to endio for partial discard requests5.5 Mediumkernel-headersTuxCareALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names()5.5 Mediumkernel-headersTuxCareKVM: SVM: Inject #UD for INVLPGA if EFER.SVME=05.5 Mediumkernel-headersTuxCarerbd: fix null-ptr-deref when device_add_disk() fails5.5 Mediumkernel-headersTuxCareerofs: fix the out-of-bounds nameoff handling for trailing dirents7.1 Highkernel-headersTuxCareKVM: nSVM: Avoid clearing VMCB_LBR in vmcb125.5 Mediumkernel-headersTuxCaremd/raid5: validate payload size before accessing journal metadata7.1 Highkernel-headersTuxCarewifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup()7.8 Highkernel-headersTuxCareBluetooth: hci_event: fix potential UAF in SSP passkey handlers8.8 Highkernel-headersTuxCareceph: only d_add() negative dentries when they are unhashed7.5 Highkernel-headersTuxCaremd/raid5: fix soft lockup in retry_aligned_read()5.5 Mediumkernel-headersTuxCaremd/raid10: fix deadlock with check operation and nowait requests5.5 Mediumkernel-headersTuxCareALSA: ctxfi: Add fallback to default RSR for S/PDIF5.5 Mediumkernel-headersTuxCarenet: qrtr: ns: Fix use-after-free in driver remove()7.8 Highkernel-headersTuxCareRDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv9.1 Criticalkernel-headersTuxCareinotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails5.5 Mediumkernel-headersTuxCarenet: qrtr: ns: Free the node during ctrl_cmd_bye()5.5 Mediumkernel-headersTuxCarecrypto: authencesn - reject short ahash digests during instance creation7.1 Highkernel-headersTuxCarelibceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()7.5 Highkernel-headersTuxCaredm mirror: fix integer overflow in create_dirty_log()5.5 Mediumkernel-headersTuxCarethermal: core: Fix thermal zone governor cleanup issues5.5 Mediumkernel-headersTuxCareALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES5.5 Mediumkernel-headersTuxCaretcp: call sk_data_ready() after listener migration7.8 Highkernel-headersTuxCaredrm/nouveau: fix u32 overflow in pushbuf reloc bounds check7.8 Highkernel-headersTuxCarexfs: fix a resource leak in xfs_alloc_buftarg()5.5 Mediumkernel-headersTuxCarescsi: sd: fix missing put_disk() when device_add(&disk_dev) fails5.5 Mediumkernel-headersTuxCarespi: imx: fix use-after-free on unbind7.8 Highkernel-headersTuxCareudf: fix partition descriptor append bookkeeping7.8 Highkernel-headersTuxCareKVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L25.5 Medium- Show moreLoading…