kernel vulnerabilities (TuxCare)
5,124 vulnerabilities.
kernelTuxCareBluetooth: bnep: reject short frames before parsing7.1 HighkernelTuxCareBluetooth: fix memory leak in error path of hci_alloc_dev()5.5 MediumkernelTuxCareBluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync5.5 MediumkernelTuxCarexsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata()7.8 HighkernelTuxCareipv4: restrict IPOPT_SSRR and IPOPT_LSRR options5.5 MediumkernelTuxCaresctp: validate cached peer INIT chunk length in COOKIE_ECHO processing9.8 CriticalkernelTuxCarenet/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr5.5 MediumkernelTuxCareALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams7.8 HighkernelTuxCareALSA: seq: dummy: fix UMP event stack overread5.5 MediumkernelTuxCarexfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()7.8 HighkernelTuxCarenetlabel: validate unlabeled address and mask attribute lengths5.5 MediumkernelTuxCaretcp: restrict SO_ATTACH_FILTER to priv users5.5 MediumkernelTuxCarenet/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list8.7 HighkernelTuxCarenet/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure7.5 HighkernelTuxCareipv6: sit: reload inner IPv6 header after GSO offloads9.8 CriticalkernelTuxCarenet: openvswitch: fix possible kfree_skb of ERR_PTR5.5 MediumkernelTuxCaresctp: fix uninit-value in __sctp_rcv_asconf_lookup()9.1 CriticalkernelTuxCaresctp: validate embedded INIT chunk and address list lengths in cookie9.1 CriticalkernelTuxCarenet: guard timestamp cmsgs to real error queue skbs7.1 HighkernelTuxCareip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()9.8 CriticalkernelTuxCarenetfilter: x_tables: avoid leaking percpu counter pointers5.5 MediumkernelTuxCarenetfilter: nft_exthdr: fix register tracking for F_PRESENT flag5.5 MediumkernelTuxCarenetfilter: nft_tunnel: fix use-after-free on object destroy7.8 HighkernelTuxCareBluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig5.5 MediumkernelTuxCareaccel/ivpu: Add bounds check for firmware runtime memory5.5 MediumkernelTuxCareaccel/ivpu: Add bounds checks for firmware log indices7.1 HighkernelTuxCareaccel/ivpu: Add buffer overflow check in MS get_info_ioctl7.1 HighkernelTuxCareaccel/ivpu: Fix signed integer truncation in IPC receive7.8 HighkernelTuxCareUSB: serial: io_ti: fix heap overflow in get_manuf_info()6.8 MediumkernelTuxCareUSB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr()7.8 HighkernelTuxCareALSA: timer: Forcibly close timer instances at closing7.8 HighkernelTuxCareALSA: timer: Fix UAF at snd_timer_user_params()7.8 HighkernelTuxCaredrm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait()5.5 MediumkernelTuxCaremm/huge_memory: update file PMD counter before folio_put()7.8 HighkernelTuxCareRDMA/srp: bound SRP_RSP sense copy by the received length9.1 CriticalkernelTuxCarezram: fix use-after-free in zram_bvec_write_partial()7.8 HighkernelTuxCareudp: clear skb->dev before running a sockmap verdict7.5 HighkernelTuxCarewifi: nl80211: reject oversized EMA RNR lists7.8 HighkernelTuxCarevsock/vmci: fix sk_ack_backlog leak on failed handshake5.5 MediumkernelTuxCarebnxt_en: Fix NULL pointer dereference5.5 MediumkernelTuxCareIB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN9.8 CriticalkernelTuxCarefuse: reject fuse_notify() pagecache ops on directories5.5 MediumkernelTuxCareIn the Linux kernel, the following vulnerability has been resolved: futex/requeue: Prevent NULL...5.5 MediumkernelTuxCarethunderbolt: Bound root directory content to block size7.1 HighkernelTuxCarethunderbolt: Clamp XDomain response data copy to allocation size7.8 HighkernelTuxCarethunderbolt: Validate XDomain request packet size before type cast8.1 HighkernelTuxCarethunderbolt: Limit XDomain response copy to actual frame size7.1 HighkernelTuxCaredrm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX117.8 HighkernelTuxCaredrm/amd/display: Bound VBIOS record-chain walk loops7.1 HighkernelTuxCaredrm/amd/display: Clamp VBIOS HDMI retimer register count to array size7.8 High- Show moreLoading…