kernel-rt-debug vulnerabilities (TuxCare)
2,097 vulnerabilities.
kernel-rt-debugTuxCarescsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write7.8 Highkernel-rt-debugTuxCaresctp: prevent peer transport count overflow8.8 Highkernel-rt-debugTuxCaredrm/amd/pm: fix pptable use-after-free7.8 Highkernel-rt-debugTuxCaredrm/vmwgfx: validate DRAW_PRIMITIVES header size before division7.8 Highkernel-rt-debugTuxCareusb: typec: ucsi: Fix race condition and ordering in port unregistrationNo scorekernel-rt-debugTuxCarewifi: ath9k: fix OOB access from firmware tx status queue ID8.8 Highkernel-rt-debugTuxCareRDMA/srpt: fix integer overflow in immediate data length check9.8 Criticalkernel-rt-debugTuxCareRDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs7.8 Highkernel-rt-debugTuxCareALSA: seq: midi: Serialize output teardown with event_input7.8 Highkernel-rt-debugTuxCareconfigfs_lookup(): don't leave ->s_dentry dangling on failure7.8 Highkernel-rt-debugTuxCareRDMA/siw: Fix endpoint/socket association handling9.8 Criticalkernel-rt-debugTuxCareipv4: fib: Don't dump dying fib_info in fib_leaf_notify().7.8 Highkernel-rt-debugTuxCaresctp: validate embedded address parameter length9.1 Criticalkernel-rt-debugTuxCaretcp: clear sock_ops cb flags before force-closing a child socket9.8 Criticalkernel-rt-debugTuxCarenfs: use nfsi->rwsem to protect traversal of the file lock list9.8 Criticalkernel-rt-debugTuxCarexprtrdma: Fix ep kref imbalance on ADDR_CHANGE8.8 Highkernel-rt-debugTuxCaremd/raid10: fix writes_pending and barrier reference leaks on discard failures7.5 Highkernel-rt-debugTuxCaresctp: fix err_chunk memory leaks in INIT handling8.7 Highkernel-rt-debugTuxCaretipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()7.8 Highkernel-rt-debugTuxCarebpf: Mask pseudo pointer values in verifier logs4.8 Mediumkernel-rt-debugTuxCaresctp: add INIT verification after cookie unpacking9.8 Criticalkernel-rt-debugTuxCarebridge: stp: Fix a potential use-after-free when deleting a bridge7.8 Highkernel-rt-debugTuxCaresctp: fix addr_wq_timer race in sctp_free_addr_wq()7.8 Highkernel-rt-debugTuxCaretipc: restrict socket queue dumps in enqueue tracepoints9.8 Criticalkernel-rt-debugTuxCareASoC: SOF: ipc3-control: Validate size in snd_sof_update_control7.8 Highkernel-rt-debugTuxCarenet: thunderbolt: Fix frags[] overflow by bounding frame_count8.8 Highkernel-rt-debugTuxCarecan: isotp: use unconditional synchronize_rcu() in isotp_release()7.8 Highkernel-rt-debugTuxCarecan: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER7.8 Highkernel-rt-debugTuxCaredm-verity: fix buffer overflow in FEC calculation9.8 Criticalkernel-rt-debugTuxCarenet/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete7.8 Highkernel-rt-debugTuxCarelocking/rt: Fix the incorrect RCU protection in rt_spin_unlock()9.8 Criticalkernel-rt-debugTuxCarenet: wwan: iosm: bound device offsets in the MUX downlink decoder8.8 Highkernel-rt-debugTuxCareovl: check access to copy_file_range source with src mounter creds2.0 Lowkernel-rt-debugTuxCaredrm/vmwgfx: Validate vmw_surface_metadata::array_size7.8 Highkernel-rt-debugTuxCarefirmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()No scorekernel-rt-debugTuxCarewifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925_mcu_bss_he_tlv()No scorekernel-rt-debugTuxCaredrm/amd/display: use kvzalloc to allocate struct dcNo scorekernel-rt-debugTuxCarelibceph: bound get_version reply decode to front len8.6 Highkernel-rt-debugTuxCarevxlan: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-rt-debugTuxCaredrm/amdgpu/gfx8: drop unecessary BUG_ON()No scorekernel-rt-debugTuxCaredrm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe()No scorekernel-rt-debugTuxCareKVM: x86/mmu: Fix use-after-free on vendor module reloadNo scorekernel-rt-debugTuxCarexfrm: fix stale skb->prev after async crypto steals a GSO segment9.8 Criticalkernel-rt-debugTuxCareRDMA/irdma: Prevent rereg_mr for non-mem regions7.8 Highkernel-rt-debugTuxCarewifi: cfg80211: cancel sched scan results work on unregister7.5 Highkernel-rt-debugTuxCarewifi: mac80211_hwsim: clamp virtio RX length before skb_putNo scorekernel-rt-debugTuxCarewifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lockNo scorekernel-rt-debugTuxCarewifi: cfg80211: bound element ID read when checking non-inheritance7.1 Highkernel-rt-debugTuxCareppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF7.8 Highkernel-rt-debugTuxCarenet/iucv: take a reference on the socket found in afiucv_hs_rcv()8.8 High- Show moreLoading…