kernel-rt-debug-devel-matched vulnerabilities (TuxCare)
2,097 vulnerabilities.
kernel-rt-debug-devel-matchedTuxCarescsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write7.8 Highkernel-rt-debug-devel-matchedTuxCaresctp: prevent peer transport count overflow8.8 Highkernel-rt-debug-devel-matchedTuxCaredrm/amd/pm: fix pptable use-after-free7.8 Highkernel-rt-debug-devel-matchedTuxCaredrm/vmwgfx: validate DRAW_PRIMITIVES header size before division7.8 Highkernel-rt-debug-devel-matchedTuxCareusb: typec: ucsi: Fix race condition and ordering in port unregistrationNo scorekernel-rt-debug-devel-matchedTuxCarewifi: ath9k: fix OOB access from firmware tx status queue ID8.8 Highkernel-rt-debug-devel-matchedTuxCareRDMA/srpt: fix integer overflow in immediate data length check9.8 Criticalkernel-rt-debug-devel-matchedTuxCareRDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs7.8 Highkernel-rt-debug-devel-matchedTuxCareALSA: seq: midi: Serialize output teardown with event_input7.8 Highkernel-rt-debug-devel-matchedTuxCareconfigfs_lookup(): don't leave ->s_dentry dangling on failure7.8 Highkernel-rt-debug-devel-matchedTuxCareRDMA/siw: Fix endpoint/socket association handling9.8 Criticalkernel-rt-debug-devel-matchedTuxCareipv4: fib: Don't dump dying fib_info in fib_leaf_notify().7.8 Highkernel-rt-debug-devel-matchedTuxCaresctp: validate embedded address parameter length9.1 Criticalkernel-rt-debug-devel-matchedTuxCaretcp: clear sock_ops cb flags before force-closing a child socket9.8 Criticalkernel-rt-debug-devel-matchedTuxCarenfs: use nfsi->rwsem to protect traversal of the file lock list9.8 Criticalkernel-rt-debug-devel-matchedTuxCarexprtrdma: Fix ep kref imbalance on ADDR_CHANGE8.8 Highkernel-rt-debug-devel-matchedTuxCaremd/raid10: fix writes_pending and barrier reference leaks on discard failures7.5 Highkernel-rt-debug-devel-matchedTuxCaresctp: fix err_chunk memory leaks in INIT handling8.7 Highkernel-rt-debug-devel-matchedTuxCaretipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()7.8 Highkernel-rt-debug-devel-matchedTuxCarebpf: Mask pseudo pointer values in verifier logs4.8 Mediumkernel-rt-debug-devel-matchedTuxCaresctp: add INIT verification after cookie unpacking9.8 Criticalkernel-rt-debug-devel-matchedTuxCarebridge: stp: Fix a potential use-after-free when deleting a bridge7.8 Highkernel-rt-debug-devel-matchedTuxCaresctp: fix addr_wq_timer race in sctp_free_addr_wq()7.8 Highkernel-rt-debug-devel-matchedTuxCaretipc: restrict socket queue dumps in enqueue tracepoints9.8 Criticalkernel-rt-debug-devel-matchedTuxCareASoC: SOF: ipc3-control: Validate size in snd_sof_update_control7.8 Highkernel-rt-debug-devel-matchedTuxCarenet: thunderbolt: Fix frags[] overflow by bounding frame_count8.8 Highkernel-rt-debug-devel-matchedTuxCarecan: isotp: use unconditional synchronize_rcu() in isotp_release()7.8 Highkernel-rt-debug-devel-matchedTuxCarecan: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER7.8 Highkernel-rt-debug-devel-matchedTuxCaredm-verity: fix buffer overflow in FEC calculation9.8 Criticalkernel-rt-debug-devel-matchedTuxCarenet/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete7.8 Highkernel-rt-debug-devel-matchedTuxCarelocking/rt: Fix the incorrect RCU protection in rt_spin_unlock()9.8 Criticalkernel-rt-debug-devel-matchedTuxCarenet: wwan: iosm: bound device offsets in the MUX downlink decoder8.8 Highkernel-rt-debug-devel-matchedTuxCareovl: check access to copy_file_range source with src mounter creds2.0 Lowkernel-rt-debug-devel-matchedTuxCaredrm/vmwgfx: Validate vmw_surface_metadata::array_size7.8 Highkernel-rt-debug-devel-matchedTuxCarefirmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()No scorekernel-rt-debug-devel-matchedTuxCarewifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925_mcu_bss_he_tlv()No scorekernel-rt-debug-devel-matchedTuxCaredrm/amd/display: use kvzalloc to allocate struct dcNo scorekernel-rt-debug-devel-matchedTuxCarelibceph: bound get_version reply decode to front len8.6 Highkernel-rt-debug-devel-matchedTuxCarevxlan: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-rt-debug-devel-matchedTuxCaredrm/amdgpu/gfx8: drop unecessary BUG_ON()No scorekernel-rt-debug-devel-matchedTuxCaredrm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe()No scorekernel-rt-debug-devel-matchedTuxCareKVM: x86/mmu: Fix use-after-free on vendor module reloadNo scorekernel-rt-debug-devel-matchedTuxCarexfrm: fix stale skb->prev after async crypto steals a GSO segment9.8 Criticalkernel-rt-debug-devel-matchedTuxCareRDMA/irdma: Prevent rereg_mr for non-mem regions7.8 Highkernel-rt-debug-devel-matchedTuxCarewifi: cfg80211: cancel sched scan results work on unregister7.5 Highkernel-rt-debug-devel-matchedTuxCarewifi: mac80211_hwsim: clamp virtio RX length before skb_putNo scorekernel-rt-debug-devel-matchedTuxCarewifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lockNo scorekernel-rt-debug-devel-matchedTuxCarewifi: cfg80211: bound element ID read when checking non-inheritance7.1 Highkernel-rt-debug-devel-matchedTuxCareppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF7.8 Highkernel-rt-debug-devel-matchedTuxCarenet/iucv: take a reference on the socket found in afiucv_hs_rcv()8.8 High- Show moreLoading…