kernel-headers vulnerabilities (TuxCare)
5,124 vulnerabilities.
kernel-headersTuxCarecpufreq: pcc: fix use-after-free and double free in _OSC evaluation7.8 Highkernel-headersTuxCareproc: protect ptrace_may_access() with exec_update_lock (part 1)5.5 Mediumkernel-headersTuxCareposix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path5.5 Mediumkernel-headersTuxCareHID: appleir: fix UAF on pending key_up_timer in remove()7.8 Highkernel-headersTuxCareHID: lg-g15: cancel pending work on remove to fix a use-after-free7.8 Highkernel-headersTuxCarebpf: Reject fragmented frames in devmap9.8 Criticalkernel-headersTuxCarebpf: Validate BTF repeated field counts before expansion7.8 Highkernel-headersTuxCarebpf: Allow LPM map access from sleepable BPF programs7.8 Highkernel-headersTuxCarenet: usb: kalmia: bound RX frame length in kalmia_rx_fixup()5.5 Mediumkernel-headersTuxCareusb: free iso schedules on failed submit7.8 Highkernel-headersTuxCareUSB: idmouse: fix use-after-free on disconnect race7.8 Highkernel-headersTuxCareUSB: ldusb: fix use-after-free on disconnect race7.8 Highkernel-headersTuxCareUSB: iowarrior: fix use-after-free on disconnect7.8 Highkernel-headersTuxCareUSB: iowarrior: fix use-after-free on disconnect race7.8 Highkernel-headersTuxCareUSB: legousbtower: fix use-after-free on disconnect race7.8 Highkernel-headersTuxCareUSB: serial: keyspan_pda: fix information leak5.5 Mediumkernel-headersTuxCareUSB: serial: digi_acceleport: fix broken rx after throttle5.5 Mediumkernel-headersTuxCareUSB: serial: digi_acceleport: fix hard lockup on disconnect5.5 Mediumkernel-headersTuxCareusb: typec: tcpm: Validate SVID index in svdm_consume_modes()7.8 Highkernel-headersTuxCareusb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove7.8 Highkernel-headersTuxCareudf: validate VAT header length against the VAT inode size7.1 Highkernel-headersTuxCareudf: validate sparing table length as an entry count, not a byte count7.8 Highkernel-headersTuxCarenvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page9.1 Criticalkernel-headersTuxCarenvmet-auth: validate reply message payload bounds against transfer length9.1 Criticalkernel-headersTuxCareisofs: bound Rock Ridge symlink components to the SL record7.1 Highkernel-headersTuxCarecrypto: ecc - Fix carry overflow in vli multiplication8.8 Highkernel-headersTuxCarecrypto: drbg - Fix returning success on failure in CTR_DRBG5.5 Mediumkernel-headersTuxCarecrypto: qat - protect service table iterations with service_lock7.8 Highkernel-headersTuxCarecrypto: qat - validate RSA CRT component lengths7.8 Highkernel-headersTuxCarespi: fsl-lpspi: terminate the RX channel on TX prepare failure path9.8 Criticalkernel-headersTuxCaretracing: Prevent out-of-bounds read in glob matching7.1 Highkernel-headersTuxCareNFSv4: include MAY_WRITE in open permission mask for O_TRUNC7.1 Highkernel-headersTuxCaremm: do file ownership checks with the proper mount idmap5.5 Mediumkernel-headersTuxCareKVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU8.2 Highkernel-headersTuxCarei2c: core: fix adapter deregistration race7.8 Highkernel-headersTuxCareInput: synaptics-rmi4 - bound the F3A keymap to the GPIO count7.8 Highkernel-headersTuxCareInput: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count7.8 Highkernel-headersTuxCareInput: elan_i2c - prevent division by zero and arithmetic underflow5.5 Mediumkernel-headersTuxCareInput: touchwin - reset the packet index on every complete packet7.8 Highkernel-headersTuxCareRDMA/siw: bound Read Response placement to the RREAD length9.8 Criticalkernel-headersTuxCarefuse: re-lock request before returning from fuse_ref_folio()7.8 Highkernel-headersTuxCaresmb: client: reject overlapping data areas in SMB2 responses9.1 Criticalkernel-headersTuxCareInput: elan_i2c - validate firmware size before use7.1 Highkernel-headersTuxCareocteontx2-af: CGX: add bounds check to cgx_speed_mbps index7.8 Highkernel-headersTuxCaredrm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async7.0 Highkernel-headersTuxCarehwmon: (lm90) Add lock protection to lm90_alert5.5 Mediumkernel-headersTuxCarenet/mlx5e: xsk: Fix unlocked writing to ICOSQ7.5 Highkernel-headersTuxCareKVM: x86: Check for invalid/obsolete root *after* making MMU pages available8.8 Highkernel-headersTuxCarei2c: stub: Reject I2C block transfers with invalid length7.8 Highkernel-headersTuxCarenetfilter: ipset: fix race between dump and ip_set_list resize7.8 High- Show moreLoading…