kernel-headers vulnerabilities (TuxCare)
5,124 vulnerabilities.
kernel-headersTuxCarescsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE9.8 Criticalkernel-headersTuxCarenet/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete7.8 Highkernel-headersTuxCarewifi: libertas_tf: fix use-after-free in lbtf_free_adapter()5.4 Mediumkernel-headersTuxCarelocking/rt: Fix the incorrect RCU protection in rt_spin_unlock()9.8 Criticalkernel-headersTuxCarenet: sit: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-headersTuxCarenet: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-headersTuxCarenet: ip_vti: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-headersTuxCarenet: ipip: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-headersTuxCarenet: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-headersTuxCarebnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()No scorekernel-headersTuxCarenet/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked7.8 Highkernel-headersTuxCareata: libata-core: Reject an invalid concurrent positioning ranges count7.0 Highkernel-headersTuxCarenet: wwan: iosm: bound device offsets in the MUX downlink decoder8.8 Highkernel-headersTuxCareipvs: use parsed transport offset in SCTP state lookup8.2 Highkernel-headersTuxCareipvs: reset full ip_vs_seq structs in ip_vs_conn_new9.8 Criticalkernel-headersTuxCaremacsec: don't read an unset MAC header in macsec_encrypt()7.3 Highkernel-headersTuxCarenet: macb: drop in-flight Tx SKBs on close5.6 Mediumkernel-headersTuxCarewifi: rt2x00: avoid full teardown before work setup in probe7.8 Highkernel-headersTuxCarewifi: mac80211: validate extension-frame layout before RX8.8 Highkernel-headersTuxCarewifi: mwifiex: fix permanently busy scans after multiple roam iterationsNo scorekernel-headersTuxCareovl: check access to copy_file_range source with src mounter creds2.0 Lowkernel-headersTuxCaredrm/vmwgfx: Validate vmw_surface_metadata::array_size7.8 Highkernel-headersTuxCarefirmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()No scorekernel-headersTuxCarewifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925_mcu_bss_he_tlv()No scorekernel-headersTuxCaredrm/amd/display: use kvzalloc to allocate struct dcNo scorekernel-headersTuxCarelibceph: bound get_version reply decode to front len8.6 Highkernel-headersTuxCarevxlan: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-headersTuxCaredrm/amdgpu/gfx8: drop unecessary BUG_ON()No scorekernel-headersTuxCaredrm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe()No scorekernel-headersTuxCareKVM: x86/mmu: Fix use-after-free on vendor module reloadNo scorekernel-headersTuxCarexfrm: fix stale skb->prev after async crypto steals a GSO segment9.8 Criticalkernel-headersTuxCareIB/mad: Drop unmatched RMPP responses before reassembly7.1 Highkernel-headersTuxCareRDMA/irdma: Prevent rereg_mr for non-mem regions7.8 Highkernel-headersTuxCarewifi: cfg80211: cancel sched scan results work on unregister7.5 Highkernel-headersTuxCarewifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one()No scorekernel-headersTuxCarewifi: mac80211_hwsim: clamp virtio RX length before skb_putNo scorekernel-headersTuxCarewifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lockNo scorekernel-headersTuxCarewifi: cfg80211: bound element ID read when checking non-inheritance7.1 Highkernel-headersTuxCarebpf: Fix UAF in sock clone early bailouts7.8 Highkernel-headersTuxCareppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF7.8 Highkernel-headersTuxCarenet/iucv: take a reference on the socket found in afiucv_hs_rcv()8.8 Highkernel-headersTuxCareBluetooth: MGMT: revalidate LOAD_CONN_PARAM queued update7.8 Highkernel-headersTuxCareBluetooth: hci_sync: extend conn_hash lookup critical sections8.8 Highkernel-headersTuxCareBluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds7.8 Highkernel-headersTuxCaresmb/client: handle overlapping allocated ranges in fallocate9.8 Criticalkernel-headersTuxCarebpf, sockmap: Reject unhashed UDP sockets on sockmap update5.6 Mediumkernel-headersTuxCarenet/sched: act_tunnel_key: Defer dst_release to RCU callback7.8 Highkernel-headersTuxCaresctp: fix auth_hmacs array size in struct sctp_cookie8.1 Highkernel-headersTuxCareUSB: serial: io_edgeport: cap received transmit credits7.0 Highkernel-headersTuxCarewifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request4.1 Medium- Show moreLoading…