kernel vulnerabilities (TuxCare)
5,124 vulnerabilities.
kernelTuxCarecpufreq: pcc: fix use-after-free and double free in _OSC evaluation7.8 HighkernelTuxCareproc: protect ptrace_may_access() with exec_update_lock (part 1)5.5 MediumkernelTuxCareposix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path5.5 MediumkernelTuxCareHID: appleir: fix UAF on pending key_up_timer in remove()7.8 HighkernelTuxCareHID: lg-g15: cancel pending work on remove to fix a use-after-free7.8 HighkernelTuxCarebpf: Reject fragmented frames in devmap9.8 CriticalkernelTuxCarebpf: Validate BTF repeated field counts before expansion7.8 HighkernelTuxCarebpf: Allow LPM map access from sleepable BPF programs7.8 HighkernelTuxCarenet: usb: kalmia: bound RX frame length in kalmia_rx_fixup()5.5 MediumkernelTuxCareusb: free iso schedules on failed submit7.8 HighkernelTuxCareUSB: idmouse: fix use-after-free on disconnect race7.8 HighkernelTuxCareUSB: ldusb: fix use-after-free on disconnect race7.8 HighkernelTuxCareUSB: iowarrior: fix use-after-free on disconnect7.8 HighkernelTuxCareUSB: iowarrior: fix use-after-free on disconnect race7.8 HighkernelTuxCareUSB: legousbtower: fix use-after-free on disconnect race7.8 HighkernelTuxCareUSB: serial: keyspan_pda: fix information leak5.5 MediumkernelTuxCareUSB: serial: digi_acceleport: fix broken rx after throttle5.5 MediumkernelTuxCareUSB: serial: digi_acceleport: fix hard lockup on disconnect5.5 MediumkernelTuxCareusb: typec: tcpm: Validate SVID index in svdm_consume_modes()7.8 HighkernelTuxCareusb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove7.8 HighkernelTuxCareudf: validate VAT header length against the VAT inode size7.1 HighkernelTuxCareudf: validate sparing table length as an entry count, not a byte count7.8 HighkernelTuxCarenvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page9.1 CriticalkernelTuxCarenvmet-auth: validate reply message payload bounds against transfer length9.1 CriticalkernelTuxCareisofs: bound Rock Ridge symlink components to the SL record7.1 HighkernelTuxCarecrypto: ecc - Fix carry overflow in vli multiplication8.8 HighkernelTuxCarecrypto: drbg - Fix returning success on failure in CTR_DRBG5.5 MediumkernelTuxCarecrypto: qat - protect service table iterations with service_lock7.8 HighkernelTuxCarecrypto: qat - validate RSA CRT component lengths7.8 HighkernelTuxCarespi: fsl-lpspi: terminate the RX channel on TX prepare failure path9.8 CriticalkernelTuxCaretracing: Prevent out-of-bounds read in glob matching7.1 HighkernelTuxCareNFSv4: include MAY_WRITE in open permission mask for O_TRUNC7.1 HighkernelTuxCaremm: do file ownership checks with the proper mount idmap5.5 MediumkernelTuxCareKVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU8.2 HighkernelTuxCarei2c: core: fix adapter deregistration race7.8 HighkernelTuxCareInput: synaptics-rmi4 - bound the F3A keymap to the GPIO count7.8 HighkernelTuxCareInput: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count7.8 HighkernelTuxCareInput: elan_i2c - prevent division by zero and arithmetic underflow5.5 MediumkernelTuxCareInput: touchwin - reset the packet index on every complete packet7.8 HighkernelTuxCareRDMA/siw: bound Read Response placement to the RREAD length9.8 CriticalkernelTuxCarefuse: re-lock request before returning from fuse_ref_folio()7.8 HighkernelTuxCaresmb: client: reject overlapping data areas in SMB2 responses9.1 CriticalkernelTuxCareInput: elan_i2c - validate firmware size before use7.1 HighkernelTuxCareocteontx2-af: CGX: add bounds check to cgx_speed_mbps index7.8 HighkernelTuxCaredrm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async7.0 HighkernelTuxCarehwmon: (lm90) Add lock protection to lm90_alert5.5 MediumkernelTuxCarenet/mlx5e: xsk: Fix unlocked writing to ICOSQ7.5 HighkernelTuxCareKVM: x86: Check for invalid/obsolete root *after* making MMU pages available8.8 HighkernelTuxCarei2c: stub: Reject I2C block transfers with invalid length7.8 HighkernelTuxCarenetfilter: ipset: fix race between dump and ip_set_list resize7.8 High- Show moreLoading…