kernel-rt-debug vulnerabilities (TuxCare)
2,097 vulnerabilities.
kernel-rt-debugTuxCarebpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()8.4 Highkernel-rt-debugTuxCaredrm/edid: fix OOB read in drm_parse_tiled_block()7.1 Highkernel-rt-debugTuxCareBluetooth: btusb: fix use-after-free on registration failure7.8 Highkernel-rt-debugTuxCareBluetooth: btusb: fix use-after-free on marvell probe failure7.8 Highkernel-rt-debugTuxCaresmb: client: restrict implied bcc[0] exemption to responses without data area8.2 Highkernel-rt-debugTuxCarecrypto: qat - fix VF2PF work teardown race in adf_disable_sriov()8.8 Highkernel-rt-debugTuxCarenetpoll: fix a use-after-free on shutdown path7.8 Highkernel-rt-debugTuxCareipv4: igmp: remove multicast group from hash table on device destruction7.8 Highkernel-rt-debugTuxCarenet: ipv4: bound TCP reordering sysctl writes and MTU probe sizes7.1 Highkernel-rt-debugTuxCaresmb: client: fix query directory replay double-free9.8 Criticalkernel-rt-debugTuxCaresmb: client: fix query_info() replay double-free9.8 Criticalkernel-rt-debugTuxCaresmb: client: fix double-free in SMB2_ioctl() replay9.8 Criticalkernel-rt-debugTuxCaresmb: client: fix change notify replay double-free9.8 Criticalkernel-rt-debugTuxCaresmb: client: fix double-free in SMB2_flush() replay9.8 Criticalkernel-rt-debugTuxCaresmb: client: fix double-free in SMB2_open() replay8.8 Highkernel-rt-debugTuxCaresmb: client: Fix next buffer leak in receive_encrypted_standard()7.8 Highkernel-rt-debugTuxCaresmb: client: harden POSIX SID length parsing8.2 Highkernel-rt-debugTuxCaresmb: client: mask server-provided mode to 07777 in modefromsid7.1 Highkernel-rt-debugTuxCarewriteback: fix race between cgroup_writeback_umount() and inode_switch_wbs()7.8 Highkernel-rt-debugTuxCareproc: protect ptrace_may_access() with exec_update_lock (FD links)7.8 Highkernel-rt-debugTuxCareproc: protect ptrace_may_access() with exec_update_lock (part 1)5.5 Mediumkernel-rt-debugTuxCareHID: lg-g15: cancel pending work on remove to fix a use-after-free7.8 Highkernel-rt-debugTuxCarebpf: Validate BTF repeated field counts before expansion7.8 Highkernel-rt-debugTuxCarebpf: Allow LPM map access from sleepable BPF programs7.8 Highkernel-rt-debugTuxCareusb: free iso schedules on failed submit7.8 Highkernel-rt-debugTuxCareUSB: idmouse: fix use-after-free on disconnect race7.8 Highkernel-rt-debugTuxCareUSB: ldusb: fix use-after-free on disconnect race7.8 Highkernel-rt-debugTuxCareUSB: iowarrior: fix use-after-free on disconnect7.8 Highkernel-rt-debugTuxCareUSB: iowarrior: fix use-after-free on disconnect race7.8 Highkernel-rt-debugTuxCareUSB: legousbtower: fix use-after-free on disconnect race7.8 Highkernel-rt-debugTuxCareusb: typec: tcpm: Validate SVID index in svdm_consume_modes()7.8 Highkernel-rt-debugTuxCareusb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove7.8 Highkernel-rt-debugTuxCareudf: validate VAT header length against the VAT inode size7.1 Highkernel-rt-debugTuxCareudf: validate sparing table length as an entry count, not a byte count7.8 Highkernel-rt-debugTuxCarenvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page9.1 Criticalkernel-rt-debugTuxCarenvmet-auth: validate reply message payload bounds against transfer length9.1 Criticalkernel-rt-debugTuxCarecrypto: qat - protect service table iterations with service_lock7.8 Highkernel-rt-debugTuxCarecrypto: qat - validate RSA CRT component lengths7.8 Highkernel-rt-debugTuxCarespi: fsl-lpspi: terminate the RX channel on TX prepare failure path9.8 Criticalkernel-rt-debugTuxCareNFSv4: include MAY_WRITE in open permission mask for O_TRUNC7.1 Highkernel-rt-debugTuxCaremm: do file ownership checks with the proper mount idmap5.5 Mediumkernel-rt-debugTuxCareKVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU8.2 Highkernel-rt-debugTuxCarei2c: core: fix adapter deregistration race7.8 Highkernel-rt-debugTuxCareInput: elan_i2c - prevent division by zero and arithmetic underflow5.5 Mediumkernel-rt-debugTuxCareRDMA/siw: bound Read Response placement to the RREAD length9.8 Criticalkernel-rt-debugTuxCarefuse: re-lock request before returning from fuse_ref_folio()7.8 Highkernel-rt-debugTuxCaresmb: client: reject overlapping data areas in SMB2 responses9.1 Criticalkernel-rt-debugTuxCareInput: elan_i2c - validate firmware size before use7.1 Highkernel-rt-debugTuxCareocteontx2-af: CGX: add bounds check to cgx_speed_mbps index7.8 Highkernel-rt-debugTuxCaredrm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async7.0 High- Show moreLoading…