kernel vulnerabilities (TuxCare)
5,124 vulnerabilities.
kernelTuxCarenetfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry9.4 CriticalkernelTuxCarefs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath8.8 HighkernelTuxCareHID: roccat: fix use-after-free in roccat_report_event7.8 HighkernelTuxCarewifi: brcmfmac: validate bsscfg indices in IF events8.8 HighkernelTuxCarexfrm: account XFRMA_IF_ID in aevent size calculation5.5 MediumkernelTuxCarexsk: tighten UMEM headroom validation to account for tailroom and min frame7.8 HighkernelTuxCarexsk: validate MTU against usable frame size on bind5.5 MediumkernelTuxCarexfrm: Wait for RCU readers during policy netns exit7.8 HighkernelTuxCarexfrm_user: fix info leak in build_mapping()5.5 MediumkernelTuxCarenet: af_key: zero aligned sockaddr tail in PF_KEY exports5.5 MediumkernelTuxCarenetfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator5.5 MediumkernelTuxCarel2tp: Drop large packets with UDP encap5.5 MediumkernelTuxCareperf/x86/intel/uncore: Skip discovery table for offline dies5.5 MediumkernelTuxCareeventpoll: defer struct eventpoll free to RCU grace period7.8 HighkernelTuxCaredcache: Limit the minimal number of bucket to two9.1 CriticalkernelTuxCareext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal()5.5 MediumkernelTuxCareext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths5.5 MediumkernelTuxCareext4: always drain queued discard work in ext4_mb_release()5.5 MediumkernelTuxCareBluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp()7.1 HighkernelTuxCarenetfilter: nft_ct: drop pending enqueued packets on removal7.8 HighkernelTuxCareBluetooth: MGMT: Fix list corruption and UAF in command complete handlers7.8 HighkernelTuxCarenet: mana: fix use-after-free in add_adev() error path7.8 HighkernelTuxCarexfs: close crash window in attr dabtree inactivation4.7 MediumkernelTuxCarewifi: mac80211: check tdls flag in ieee80211_tdls_oper7.1 HighkernelTuxCareHID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq8.1 HighkernelTuxCareatm: lec: fix use-after-free in sock_def_readable()7.0 HighkernelTuxCareHID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure7.8 HighkernelTuxCareHID: core: Mitigate potential OOB by removing bogus memset()8.8 HighkernelTuxCareHID: multitouch: Check to ensure report responses match the request7.8 HighkernelTuxCarecrypto: af-alg - fix NULL pointer dereference in scatterwalk5.5 MediumkernelTuxCarempls: add seqcount to protect the platform_label{,s} pair7.1 HighkernelTuxCarenet: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak5.5 MediumkernelTuxCarenet: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak7.1 HighkernelTuxCareipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()9.8 CriticalkernelTuxCareip6_tunnel: clear skb2->cb[] in ip4ip6_err()9.8 CriticalkernelTuxCarenet: use skb_header_pointer() for TCPv4 GSO frag_off check5.5 MediumkernelTuxCarenet: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak5.5 MediumkernelTuxCarebpf: Fix regsafe() for pointers to packet7.8 HighkernelTuxCarenetfilter: x_tables: ensure names are nul-terminated7.1 HighkernelTuxCarenetfilter: nf_conntrack_helper: pass helper to expect cleanup7.8 HighkernelTuxCarenetfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent5.5 MediumkernelTuxCarenetfilter: ctnetlink: ignore explicit helper on new expectations7.3 HighkernelTuxCarenetfilter: nf_tables: reject immediate NF_QUEUE verdict5.5 MediumkernelTuxCareBluetooth: SCO: fix race conditions in sco_sock_connect()7.8 HighkernelTuxCareBluetooth: MGMT: validate LTK enc_size on load7.8 HighkernelTuxCarebpf: Reject sleepable kprobe_multi programs at attach time5.5 MediumkernelTuxCaredrm/ioc32: stop speculation on the drm_compat_ioctl path5.5 MediumkernelTuxCareALSA: caiaq: fix stack out-of-bounds read in init_card7.1 HighkernelTuxCareALSA: ctxfi: Check the error for index mapping5.5 MediumkernelTuxCareBluetooth: SMP: derive legacy responder STK authentication from MITM state8.8 High- Show moreLoading…