kernel-modules-internal vulnerabilities (TuxCare)
4,700 vulnerabilities.
kernel-modules-internalTuxCarenvmet-auth: validate reply message payload bounds against transfer length9.1 Criticalkernel-modules-internalTuxCareisofs: bound Rock Ridge symlink components to the SL record7.1 Highkernel-modules-internalTuxCarecrypto: ecc - Fix carry overflow in vli multiplication8.8 Highkernel-modules-internalTuxCarecrypto: drbg - Fix returning success on failure in CTR_DRBG5.5 Mediumkernel-modules-internalTuxCarecrypto: qat - protect service table iterations with service_lock7.8 Highkernel-modules-internalTuxCarecrypto: qat - validate RSA CRT component lengths7.8 Highkernel-modules-internalTuxCarespi: fsl-lpspi: terminate the RX channel on TX prepare failure path9.8 Criticalkernel-modules-internalTuxCaretracing: Prevent out-of-bounds read in glob matching7.1 Highkernel-modules-internalTuxCareNFSv4: include MAY_WRITE in open permission mask for O_TRUNC7.1 Highkernel-modules-internalTuxCaremm: do file ownership checks with the proper mount idmap5.5 Mediumkernel-modules-internalTuxCareKVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU8.2 Highkernel-modules-internalTuxCarei2c: core: fix adapter deregistration race7.8 Highkernel-modules-internalTuxCareInput: synaptics-rmi4 - bound the F3A keymap to the GPIO count7.8 Highkernel-modules-internalTuxCareInput: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count7.8 Highkernel-modules-internalTuxCareInput: elan_i2c - prevent division by zero and arithmetic underflow5.5 Mediumkernel-modules-internalTuxCareRDMA/siw: bound Read Response placement to the RREAD length9.8 Criticalkernel-modules-internalTuxCarefuse: re-lock request before returning from fuse_ref_folio()7.8 Highkernel-modules-internalTuxCaresmb: client: reject overlapping data areas in SMB2 responses9.1 Criticalkernel-modules-internalTuxCareInput: elan_i2c - validate firmware size before use7.1 Highkernel-modules-internalTuxCareocteontx2-af: CGX: add bounds check to cgx_speed_mbps index7.8 Highkernel-modules-internalTuxCaredrm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async7.0 Highkernel-modules-internalTuxCarehwmon: (lm90) Add lock protection to lm90_alert5.5 Mediumkernel-modules-internalTuxCarenet/mlx5e: xsk: Fix unlocked writing to ICOSQ7.5 Highkernel-modules-internalTuxCareKVM: x86: Check for invalid/obsolete root *after* making MMU pages available8.8 Highkernel-modules-internalTuxCarei2c: stub: Reject I2C block transfers with invalid length7.8 Highkernel-modules-internalTuxCarenetfilter: ipset: fix race between dump and ip_set_list resize7.8 Highkernel-modules-internalTuxCarewifi: cfg80211: advance loop vars in cfg80211_merge_profile()5.5 Mediumkernel-modules-internalTuxCaretracing: Do not call map->ops->elt_free() if elt_alloc() fails5.5 Mediumkernel-modules-internalTuxCarefirmware: arm_ffa: Check for NULL FF-A ID table while driver registration5.5 Mediumkernel-modules-internalTuxCarenet: ifb: report ethtool stats over num_tx_queues7.1 Highkernel-modules-internalTuxCarevsock/vmci: fix UAF when peer resets connection during handshake8.8 Highkernel-modules-internalTuxCareipv4: raw: reject IP_HDRINCL packets with ihl < 57.8 Highkernel-modules-internalTuxCareixgbevf: fix use-after-free in VEPA multicast source pruning9.8 Criticalkernel-modules-internalTuxCareaf_unix: Fix UAF read of tail->len in unix_stream_data_wait()8.8 Highkernel-modules-internalTuxCareRDMA/siw: Reject MPA FPDU length underflow before signed receive math9.8 Criticalkernel-modules-internalTuxCaredrm/virtio: use uninterruptible resv lock for plane updates7.8 Highkernel-modules-internalTuxCaredrm/amd/display: Validate GPIO pin LUT table size before iterating7.8 Highkernel-modules-internalTuxCarenet: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring9.8 Criticalkernel-modules-internalTuxCarenet: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer9.3 Criticalkernel-modules-internalTuxCareALSA: seq: Serialize UMP output teardown with event_input7.8 Highkernel-modules-internalTuxCarenet: mana: validate rx_req_idx to prevent out-of-bounds array access9.3 Criticalkernel-modules-internalTuxCareblk-mq: pop cached request if it is usable7.8 Highkernel-modules-internalTuxCaresecurity/keys: fix missed RCU read section on lookup7.8 Highkernel-modules-internalTuxCarexfrm: Check for underflow in xfrm_state_mtu7.8 Highkernel-modules-internalTuxCarenetfilter: synproxy: refresh tcphdr after skb_ensure_writable9.8 Criticalkernel-modules-internalTuxCareipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()7.8 Highkernel-modules-internalTuxCareethtool: cmis: require exact CDB reply length7.8 Highkernel-modules-internalTuxCaretunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()9.8 Criticalkernel-modules-internalTuxCarevxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu()9.8 Criticalkernel-modules-internalTuxCaretunnels: do not assume transport header in iptunnel_pmtud_check_icmp()9.1 Critical- Show moreLoading…