kernel-modules-extra vulnerabilities (TuxCare)
4,700 vulnerabilities.
kernel-modules-extraTuxCaresctp: fix addr_wq_timer race in sctp_free_addr_wq()7.8 Highkernel-modules-extraTuxCareipv4: igmp: Fix potential UAF in igmp_gq_start_timer()9.8 Criticalkernel-modules-extraTuxCareipv6: mcast: Fix potential UAF in MLD delayed work9.8 Criticalkernel-modules-extraTuxCaretipc: restrict socket queue dumps in enqueue tracepoints9.8 Criticalkernel-modules-extraTuxCareASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get7.8 Highkernel-modules-extraTuxCareASoC: SOF: ipc3-control: Validate size in snd_sof_update_control7.8 Highkernel-modules-extraTuxCarenetfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst7.8 Highkernel-modules-extraTuxCareselinux: check connect-related permissions on TCP Fast Open8.4 Highkernel-modules-extraTuxCarenet: thunderbolt: Fix frags[] overflow by bounding frame_count8.8 Highkernel-modules-extraTuxCarenvmet-auth: reject short AUTH_RECEIVE buffers9.8 Criticalkernel-modules-extraTuxCarenvmet-rdma: handle inline data with a nonzero offset9.8 Criticalkernel-modules-extraTuxCarecan: isotp: use unconditional synchronize_rcu() in isotp_release()7.8 Highkernel-modules-extraTuxCarecan: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER7.8 Highkernel-modules-extraTuxCaredm-verity: fix buffer overflow in FEC calculation9.8 Criticalkernel-modules-extraTuxCarenet/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete7.8 Highkernel-modules-extraTuxCarelocking/rt: Fix the incorrect RCU protection in rt_spin_unlock()9.8 Criticalkernel-modules-extraTuxCarenet: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-modules-extraTuxCareata: libata-core: Reject an invalid concurrent positioning ranges count7.0 Highkernel-modules-extraTuxCarenet: wwan: iosm: bound device offsets in the MUX downlink decoder8.8 Highkernel-modules-extraTuxCarewifi: mac80211: validate extension-frame layout before RX8.8 Highkernel-modules-extraTuxCareovl: check access to copy_file_range source with src mounter creds2.0 Lowkernel-modules-extraTuxCaredrm/vmwgfx: Validate vmw_surface_metadata::array_size7.8 Highkernel-modules-extraTuxCarefirmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()No scorekernel-modules-extraTuxCarewifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925_mcu_bss_he_tlv()No scorekernel-modules-extraTuxCaredrm/amd/display: use kvzalloc to allocate struct dcNo scorekernel-modules-extraTuxCarelibceph: bound get_version reply decode to front len8.6 Highkernel-modules-extraTuxCarevxlan: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-modules-extraTuxCaredrm/amdgpu/gfx8: drop unecessary BUG_ON()No scorekernel-modules-extraTuxCaredrm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe()No scorekernel-modules-extraTuxCareKVM: x86/mmu: Fix use-after-free on vendor module reloadNo scorekernel-modules-extraTuxCarexfrm: fix stale skb->prev after async crypto steals a GSO segment9.8 Criticalkernel-modules-extraTuxCareRDMA/irdma: Prevent rereg_mr for non-mem regions7.8 Highkernel-modules-extraTuxCarewifi: cfg80211: cancel sched scan results work on unregister7.5 Highkernel-modules-extraTuxCarewifi: mac80211_hwsim: clamp virtio RX length before skb_putNo scorekernel-modules-extraTuxCarewifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lockNo scorekernel-modules-extraTuxCarewifi: cfg80211: bound element ID read when checking non-inheritance7.1 Highkernel-modules-extraTuxCarebpf: Fix UAF in sock clone early bailouts7.8 Highkernel-modules-extraTuxCareppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF7.8 Highkernel-modules-extraTuxCarenet/iucv: take a reference on the socket found in afiucv_hs_rcv()8.8 Highkernel-modules-extraTuxCareBluetooth: MGMT: revalidate LOAD_CONN_PARAM queued update7.8 Highkernel-modules-extraTuxCareBluetooth: hci_sync: extend conn_hash lookup critical sections8.8 Highkernel-modules-extraTuxCareBluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds7.8 Highkernel-modules-extraTuxCaresmb/client: handle overlapping allocated ranges in fallocate9.8 Criticalkernel-modules-extraTuxCarebpf, sockmap: Reject unhashed UDP sockets on sockmap update5.6 Mediumkernel-modules-extraTuxCarenet/sched: act_tunnel_key: Defer dst_release to RCU callback7.8 Highkernel-modules-extraTuxCaresctp: fix auth_hmacs array size in struct sctp_cookie8.1 Highkernel-modules-extraTuxCareUSB: serial: io_edgeport: cap received transmit credits7.0 Highkernel-modules-extraTuxCarewifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request4.1 Mediumkernel-modules-extraTuxCarewifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_beginNo scorekernel-modules-extraTuxCarewifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()6.0 Medium- Show moreLoading…