kernel-headers vulnerabilities (TuxCare)
5,124 vulnerabilities.
kernel-headersTuxCarePCI/sysfs: Fix out-of-bounds read in pci_write_legacy_io()No scorekernel-headersTuxCareNFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock9.8 Criticalkernel-headersTuxCareNFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check8.2 Highkernel-headersTuxCarenfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown9.8 Criticalkernel-headersTuxCarenfsd: release path refs on follow_down() error7.5 Highkernel-headersTuxCarenfsd: validate symlink target length in NFSv4 CREATE7.5 Highkernel-headersTuxCarenfsd: defer vfree of compound ops to fix rpc_status UAF7.8 Highkernel-headersTuxCarenfsd: fix clock domain mismatch in clients_still_reclaiming()7.5 Highkernel-headersTuxCarenfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net8.1 Highkernel-headersTuxCarenfsd: gate nfs2 setacl by argp->mask9.1 Criticalkernel-headersTuxCarenfsd: gate nfs3 setacl by argp->mask9.1 Criticalkernel-headersTuxCarenfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops5.3 Mediumkernel-headersTuxCareNFSD: Prevent client use-after-free during delegation revoke9.8 Criticalkernel-headersTuxCarelibceph: reject buckets with mismatched CRUSH ids9.8 Criticalkernel-headersTuxCareceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock9.8 Criticalkernel-headersTuxCareceph: bound xattr value length in __build_xattrs()9.1 Criticalkernel-headersTuxCareaudit: avoid dropping live tree ref on fsnotify rule autoremove9.8 Criticalkernel-headersTuxCarecifs: call pagecache_isize_extended() in cifs_setsize() when extending4.8 Mediumkernel-headersTuxCaresmb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions7.8 Highkernel-headersTuxCaresmb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T29.8 Criticalkernel-headersTuxCaresmb: client: clear ce->tgthint in free_tgts()9.8 Criticalkernel-headersTuxCaresmb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()9.8 Criticalkernel-headersTuxCaresmb: client: reject a tree connect response whose byte count is too small9.1 Criticalkernel-headersTuxCareHID: picolcd: clamp eeprom debugfs read to bytes actually receivedNo scorekernel-headersTuxCareHID: roccat: free buffered reports when destroying device2.4 Lowkernel-headersTuxCareHID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind5.4 Mediumkernel-headersTuxCareecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet7.8 Highkernel-headersTuxCarefsnotify: Fix stale object mask after concurrent mark updates2.0 Lowkernel-headersTuxCarebnx2x: fix double free in bnx2x_init_firmware() error path7.1 Highkernel-headersTuxCaredm raid1: reserve space for NUL-terminator in build_constructor_string()No scorekernel-headersTuxCaredm array: validate array block headers on read7.8 Highkernel-headersTuxCaredm array: reject an array block whose value size is not the caller's7.8 Highkernel-headersTuxCareBluetooth: RFCOMM: serialize security confirmation handling8.8 Highkernel-headersTuxCareip: orphan prefetched skbs before multicast forwarding7.8 Highkernel-headersTuxCarelibnvdimm/labels: Prevent integer overflow in __nd_label_validate()7.8 Highkernel-headersTuxCarempls: reload header after pskb_may_pull()9.8 Criticalkernel-headersTuxCarenouveau/gem: reserve the bo in the info ioctl around the vma lookup7.8 Highkernel-headersTuxCareparams: fix charp corruption on allocation failureNo scorekernel-headersTuxCareSUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow9.8 Criticalkernel-headersTuxCareSUNRPC: svcauth_gss: enforce krb5 token minimum length9.8 Criticalkernel-headersTuxCaresunrpc: route to a populated pool in svc_pool_for_cpu()7.5 Highkernel-headersTuxCareSUNRPC: always drain cache_cleaner before destroying a cache_detail7.8 Highkernel-headersTuxCaresunrpc: defer rq_argp and rq_resp free until after RCU grace period7.8 Highkernel-headersTuxCareSUNRPC: harden gss_krb5_unwrap_v2 against short tokens9.8 Criticalkernel-headersTuxCareSUNRPC: harden gss_unwrap_resp_priv length checks9.8 Criticalkernel-headersTuxCaresunrpc: init gssp_lock before publishing proc entry7.8 Highkernel-headersTuxCareSUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v29.1 Criticalkernel-headersTuxCaresvcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails8.8 Highkernel-headersTuxCaresvcrdma: Fix offset arithmetic in read_chunk_range9.8 Criticalkernel-headersTuxCaresvcrdma: Reject connection when transport allocation fails8.2 High- Show moreLoading…