kernel-rt-64k-modules-extra vulnerabilities (TuxCare)
1,572 vulnerabilities.
kernel-rt-64k-modules-extraTuxCaresctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks7.8 Highkernel-rt-64k-modules-extraTuxCarenetfilter: nfnetlink_osf: fix out-of-bounds read on option matching9.1 Criticalkernel-rt-64k-modules-extraTuxCarenetfilter: nfnetlink_osf: fix potential NULL dereference in ttl check7.5 Highkernel-rt-64k-modules-extraTuxCarevsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting5.5 Mediumkernel-rt-64k-modules-extraTuxCaretipc: fix double-free in tipc_buf_append()9.8 Criticalkernel-rt-64k-modules-extraTuxCarenetfilter: nf_conntrack_sip: don't use simple_strtoul9.8 Criticalkernel-rt-64k-modules-extraTuxCarenetdevsim: zero initialize struct iphdr in dummy sk_buff5.5 Mediumkernel-rt-64k-modules-extraTuxCarenet/sched: netem: fix queue limit check to include reordered packets5.5 Mediumkernel-rt-64k-modules-extraTuxCarenet: tls: fix strparser anchor skb leak on offload RX setup failure7.5 Highkernel-rt-64k-modules-extraTuxCarecrypto: af_alg - Cap AEAD AD length to 0x800000005.5 Mediumkernel-rt-64k-modules-extraTuxCarenetfilter: nft_ct: fix missing expect put in obj eval5.5 Mediumkernel-rt-64k-modules-extraTuxCareKVM: Reject wrapped offset in kvm_reset_dirty_gfn()7.8 Highkernel-rt-64k-modules-extraTuxCareALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans5.5 Mediumkernel-rt-64k-modules-extraTuxCareALSA: usb-audio: Bound MIDI endpoint descriptor scans5.5 Mediumkernel-rt-64k-modules-extraTuxCareceph: fix a buffer leak in __ceph_setxattr()7.8 Highkernel-rt-64k-modules-extraTuxCarelibceph: Fix potential null-ptr-deref in decode_choose_args()7.5 Highkernel-rt-64k-modules-extraTuxCarelibceph: Fix potential out-of-bounds access in __ceph_x_decrypt()7.5 Highkernel-rt-64k-modules-extraTuxCarelibceph: Fix potential out-of-bounds access in crush_decode()9.8 Criticalkernel-rt-64k-modules-extraTuxCarelibceph: handle rbtree insertion error in decode_choose_args()7.5 Highkernel-rt-64k-modules-extraTuxCaredrm/xe/dma-buf: handle empty bo and UAF races7.8 Highkernel-rt-64k-modules-extraTuxCarei2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl5.5 Mediumkernel-rt-64k-modules-extraTuxCarenet: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove7.8 Highkernel-rt-64k-modules-extraTuxCarexfrm: espintcp: do not reuse an in-progress partial send7.8 Highkernel-rt-64k-modules-extraTuxCareio_uring/poll: fix signed comparison in io_poll_get_ownership()7.8 Highkernel-rt-64k-modules-extraTuxCareipc: limit next_id allocation to the valid ID range7.8 Highkernel-rt-64k-modules-extraTuxCarenetfilter: ipset: stop hash:* range iteration at end5.5 Mediumkernel-rt-64k-modules-extraTuxCarenetfilter: xt_policy: fix strict mode inbound policy matching8.3 Highkernel-rt-64k-modules-extraTuxCarenet/sched: fix pedit partial COW leading to page cache corruption7.8 Highkernel-rt-64k-modules-extraTuxCarenetfilter: nf_tables: use list_del_rcu for netlink hooks7.8 Highkernel-rt-64k-modules-extraTuxCarenet: gro: don't merge zcopy skbs7.8 Highkernel-rt-64k-modules-extraTuxCaretun: free page on build_skb failure in tun_xdp_one()7.1 Highkernel-rt-64k-modules-extraTuxCaretap: free page on error paths in tap_get_user_xdp()7.4 Highkernel-rt-64k-modules-extraTuxCarenet/sched: act_ct: Only release RCU read lock after ct_ft7.8 Highkernel-rt-64k-modules-extraTuxCareKVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry9.3 Criticalkernel-rt-64k-modules-extraTuxCaredm: fix a buffer overflow in ioctl processing7.8 Highkernel-rt-64k-modules-extraTuxCarepmdomain: core: Fix detach procedure for virtual devices in genpd5.5 Mediumkernel-rt-64k-modules-extraTuxCareio-wq: check that the predecessor is hashed in io_wq_remove_pending()7.8 Highkernel-rt-64k-modules-extraTuxCareinet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP9.1 Criticalkernel-rt-64k-modules-extraTuxCareprocfs: fix missing RCU protection when reading real_parent in do_task_stat()7.8 Highkernel-rt-64k-modules-extraTuxCareregulator: core: fix locking in regulator_resolve_supply() error path5.5 Mediumkernel-rt-64k-modules-extraTuxCareocteontx2-af: Fix PF driver crash with kexec kernel booting5.5 Mediumkernel-rt-64k-modules-extraTuxCarenetfilter: nft_inner: Fix IPv6 inner_thoff desync9.1 Criticalkernel-rt-64k-modules-extraTuxCareeventpoll: fix ep_remove struct eventpoll / struct file UAF7.8 Highkernel-rt-64k-modules-extraTuxCaremedia: saa7164: add ioremap return checks and cleanups5.5 Mediumkernel-rt-64k-modules-extraTuxCarevsock: fix buffer size clamping order7.8 Highkernel-rt-64k-modules-extraTuxCaredrm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg7.1 Highkernel-rt-64k-modules-extraTuxCaredrm/amdkfd: Clear VRAM on allocation to prevent stale data exposure5.5 Mediumkernel-rt-64k-modules-extraTuxCaresctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL7.8 Highkernel-rt-64k-modules-extraTuxCaredrm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission5.5 Mediumkernel-rt-64k-modules-extraTuxCaredrm/amdgpu: Add bounds checking to ib_{get,set}_value7.1 High- Show moreLoading…