kernel-headers vulnerabilities (TuxCare)
5,124 vulnerabilities.
kernel-headersTuxCarexprtrdma: Fix ep kref imbalance on ADDR_CHANGE8.8 Highkernel-headersTuxCarexfrm: Fix dev use-after-free in xfrm async resumption9.8 Criticalkernel-headersTuxCaremd/raid10: fix writes_pending and barrier reference leaks on discard failures7.5 Highkernel-headersTuxCareipv4: fib: Don't ignore error route in local/main tables.10.0 Criticalkernel-headersTuxCaresctp: fix err_chunk memory leaks in INIT handling8.7 Highkernel-headersTuxCaretipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()7.8 Highkernel-headersTuxCarebpf: Mask pseudo pointer values in verifier logs4.8 Mediumkernel-headersTuxCaresctp: add INIT verification after cookie unpacking9.8 Criticalkernel-headersTuxCarehwmon: adm1275: Prevent reading uninitialized stack2.4 Lowkernel-headersTuxCareipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump5.7 Mediumkernel-headersTuxCarenet/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF7.8 Highkernel-headersTuxCarebridge: stp: Fix a potential use-after-free when deleting a bridge7.8 Highkernel-headersTuxCaresctp: fix addr_wq_timer race in sctp_free_addr_wq()7.8 Highkernel-headersTuxCarenetfilter: xt_u32: reject invalid shift counts7.8 Highkernel-headersTuxCarenetfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop9.1 Criticalkernel-headersTuxCareipv4: igmp: Fix potential UAF in igmp_gq_start_timer()9.8 Criticalkernel-headersTuxCareipv6: mcast: Fix potential UAF in MLD delayed work9.8 Criticalkernel-headersTuxCareipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer()5.7 Mediumkernel-headersTuxCareipvs: ensure inner headers in ICMP errors are in headroom9.8 Criticalkernel-headersTuxCaremlxsw: fix refcount leak in mlxsw_sp_port_lag_join()No scorekernel-headersTuxCaretipc: restrict socket queue dumps in enqueue tracepoints9.8 Criticalkernel-headersTuxCarenet: atm: reject out-of-range traffic classes in QoS validation7.1 Highkernel-headersTuxCareKVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs7.1 Highkernel-headersTuxCareASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get7.8 Highkernel-headersTuxCareASoC: SOF: ipc3-control: Validate size in snd_sof_update_control7.8 Highkernel-headersTuxCarenetfilter: xt_cluster: reject template conntracks in hash match4.8 Mediumkernel-headersTuxCarenetfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst7.8 Highkernel-headersTuxCarenetfilter: nf_nat_sip: reload possible stale data pointer9.8 Criticalkernel-headersTuxCarenetfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag7.8 Highkernel-headersTuxCareselinux: check connect-related permissions on TCP Fast Open8.4 Highkernel-headersTuxCaremfd: sm501: Fix reference leak on failed device registrationNo scorekernel-headersTuxCarex86/boot: Validate console=uart8250 baud rate to fix early boot hangNo scorekernel-headersTuxCarenet: thunderbolt: Fix frags[] overflow by bounding frame_count8.8 Highkernel-headersTuxCareplatform/x86: dell-laptop: fix missing cleanups in init error path7.8 Highkernel-headersTuxCarenvmet-auth: reject short AUTH_RECEIVE buffers9.8 Criticalkernel-headersTuxCarenvmet-rdma: handle inline data with a nonzero offset9.8 Criticalkernel-headersTuxCarecan: isotp: use unconditional synchronize_rcu() in isotp_release()7.8 Highkernel-headersTuxCarecan: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER7.8 Highkernel-headersTuxCarecan: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure7.3 Highkernel-headersTuxCarecan: bcm: add locking when updating filter and timer values8.8 Highkernel-headersTuxCarecan: bcm: fix CAN frame rx/tx statistics2.0 Lowkernel-headersTuxCarecan: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler()2.0 Lowkernel-headersTuxCarecan: bcm: fix stale rx/tx ops after device removal7.1 Highkernel-headersTuxCarecan: bcm: track a single source interface for ANYDEV timeout/throttle ops8.1 Highkernel-headersTuxCarecan: bcm: add missing device refcount for CAN filter removal7.8 Highkernel-headersTuxCaredm thin metadata: fix metadata snapshot consistency on commit failure7.8 Highkernel-headersTuxCaredm-ioctl: fix a possible overflow in list_version_get_info9.8 Criticalkernel-headersTuxCaredm-log: fix a bitset_size overflow on 32bit machines7.8 Highkernel-headersTuxCaredm-verity: fix buffer overflow in FEC calculation9.8 Criticalkernel-headersTuxCaredm-verity: make error counter atomicNo score- Show moreLoading…