kernel-headers vulnerabilities (TuxCare)
5,124 vulnerabilities.
kernel-headersTuxCarevsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting5.5 Mediumkernel-headersTuxCaretipc: fix double-free in tipc_buf_append()9.8 Criticalkernel-headersTuxCaresched/psi: fix race between file release and pressure write7.8 Highkernel-headersTuxCarenetfilter: nf_conntrack_sip: don't use simple_strtoul9.8 Criticalkernel-headersTuxCarenetdevsim: zero initialize struct iphdr in dummy sk_buff5.5 Mediumkernel-headersTuxCarenet/sched: netem: fix queue limit check to include reordered packets5.5 Mediumkernel-headersTuxCareneigh: let neigh_xmit take skb ownership7.5 Highkernel-headersTuxCarenet: tls: fix strparser anchor skb leak on offload RX setup failure7.5 Highkernel-headersTuxCarecrypto: af_alg - Cap AEAD AD length to 0x800000005.5 Mediumkernel-headersTuxCarenetfilter: nft_ct: fix missing expect put in obj eval5.5 Mediumkernel-headersTuxCareKVM: Reject wrapped offset in kvm_reset_dirty_gfn()7.8 Highkernel-headersTuxCareALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans5.5 Mediumkernel-headersTuxCareALSA: usb-audio: Bound MIDI endpoint descriptor scans5.5 Mediumkernel-headersTuxCareceph: fix a buffer leak in __ceph_setxattr()7.8 Highkernel-headersTuxCareceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size5.5 Mediumkernel-headersTuxCarelibceph: Fix potential out-of-bounds access in osdmap_decode()9.1 Criticalkernel-headersTuxCarelibceph: Fix potential null-ptr-deref in decode_choose_args()7.5 Highkernel-headersTuxCarelibceph: Fix potential out-of-bounds access in __ceph_x_decrypt()7.5 Highkernel-headersTuxCarelibceph: Fix potential out-of-bounds access in crush_decode()9.8 Criticalkernel-headersTuxCarelibceph: handle rbtree insertion error in decode_choose_args()7.5 Highkernel-headersTuxCaredrm/xe/dma-buf: handle empty bo and UAF races7.8 Highkernel-headersTuxCarei2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl5.5 Mediumkernel-headersTuxCarenet: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove7.8 Highkernel-headersTuxCarefs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling7.5 Highkernel-headersTuxCarenetfilter: nf_log: validate MAC header was set before dumping it7.1 Highkernel-headersTuxCarexfrm: espintcp: do not reuse an in-progress partial send7.8 Highkernel-headersTuxCareio_uring/poll: fix signed comparison in io_poll_get_ownership()7.8 Highkernel-headersTuxCaresctp: stream: fully roll back denied add-stream state7.5 Highkernel-headersTuxCaresctp: purge outqueue on stale COOKIE-ECHO handling9.8 Criticalkernel-headersTuxCareipc: limit next_id allocation to the valid ID range7.8 Highkernel-headersTuxCarenetfilter: ipset: stop hash:* range iteration at end5.5 Mediumkernel-headersTuxCarenetfilter: xt_policy: fix strict mode inbound policy matching8.3 Highkernel-headersTuxCareBluetooth: serialize accept_q access8.8 Highkernel-headersTuxCaresctp: diag: reject stale associations in dump_one path7.1 Highkernel-headersTuxCarenetfilter: nf_queue: hold bridge skb->dev while queued7.8 Highkernel-headersTuxCarebpf: Free reuseport cBPF prog after RCU grace period.7.8 Highkernel-headersTuxCareip6_vti: set netns_immutable on the fallback device.7.8 Highkernel-headersTuxCarenet/sched: fix pedit partial COW leading to page cache corruption7.8 Highkernel-headersTuxCaredm: fix unlocked test for dm_suspended_md7.8 Highkernel-headersTuxCarenetfilter: nf_tables: use list_del_rcu for netlink hooks7.8 Highkernel-headersTuxCarenet: gro: don't merge zcopy skbs7.8 Highkernel-headersTuxCaretun: free page on build_skb failure in tun_xdp_one()7.1 Highkernel-headersTuxCaretap: free page on error paths in tap_get_user_xdp()7.4 Highkernel-headersTuxCarenet/sched: act_ct: Only release RCU read lock after ct_ft7.8 Highkernel-headersTuxCareKVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry9.3 Criticalkernel-headersTuxCarenvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free7.5 Highkernel-headersTuxCareisofs: validate Rock Ridge CE continuation extent against volume size8.2 Highkernel-headersTuxCaredm: fix a buffer overflow in ioctl processing7.8 Highkernel-headersTuxCarepmdomain: core: Fix detach procedure for virtual devices in genpd5.5 Mediumkernel-headersTuxCareio-wq: check that the predecessor is hashed in io_wq_remove_pending()7.8 High- Show moreLoading…