kernel vulnerabilities (TuxCare)
5,124 vulnerabilities.
kernelTuxCarexprtrdma: Fix ep kref imbalance on ADDR_CHANGE8.8 HighkernelTuxCarexfrm: Fix dev use-after-free in xfrm async resumption9.8 CriticalkernelTuxCaremd/raid10: fix writes_pending and barrier reference leaks on discard failures7.5 HighkernelTuxCareipv4: fib: Don't ignore error route in local/main tables.10.0 CriticalkernelTuxCaresctp: fix err_chunk memory leaks in INIT handling8.7 HighkernelTuxCaretipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()7.8 HighkernelTuxCarebpf: Mask pseudo pointer values in verifier logs4.8 MediumkernelTuxCaresctp: add INIT verification after cookie unpacking9.8 CriticalkernelTuxCarehwmon: adm1275: Prevent reading uninitialized stack2.4 LowkernelTuxCareipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump5.7 MediumkernelTuxCarenet/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF7.8 HighkernelTuxCarebridge: stp: Fix a potential use-after-free when deleting a bridge7.8 HighkernelTuxCaresctp: fix addr_wq_timer race in sctp_free_addr_wq()7.8 HighkernelTuxCarenetfilter: xt_u32: reject invalid shift counts7.8 HighkernelTuxCarenetfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop9.1 CriticalkernelTuxCareipv4: igmp: Fix potential UAF in igmp_gq_start_timer()9.8 CriticalkernelTuxCareipv6: mcast: Fix potential UAF in MLD delayed work9.8 CriticalkernelTuxCareipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer()5.7 MediumkernelTuxCareipvs: ensure inner headers in ICMP errors are in headroom9.8 CriticalkernelTuxCaremlxsw: fix refcount leak in mlxsw_sp_port_lag_join()No scorekernelTuxCaretipc: restrict socket queue dumps in enqueue tracepoints9.8 CriticalkernelTuxCarenet: atm: reject out-of-range traffic classes in QoS validation7.1 HighkernelTuxCareKVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs7.1 HighkernelTuxCareASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get7.8 HighkernelTuxCareASoC: SOF: ipc3-control: Validate size in snd_sof_update_control7.8 HighkernelTuxCarenetfilter: xt_cluster: reject template conntracks in hash match4.8 MediumkernelTuxCarenetfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst7.8 HighkernelTuxCarenetfilter: nf_nat_sip: reload possible stale data pointer9.8 CriticalkernelTuxCarenetfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag7.8 HighkernelTuxCareselinux: check connect-related permissions on TCP Fast Open8.4 HighkernelTuxCaremfd: sm501: Fix reference leak on failed device registrationNo scorekernelTuxCarex86/boot: Validate console=uart8250 baud rate to fix early boot hangNo scorekernelTuxCarenet: thunderbolt: Fix frags[] overflow by bounding frame_count8.8 HighkernelTuxCareplatform/x86: dell-laptop: fix missing cleanups in init error path7.8 HighkernelTuxCarenvmet-auth: reject short AUTH_RECEIVE buffers9.8 CriticalkernelTuxCarenvmet-rdma: handle inline data with a nonzero offset9.8 CriticalkernelTuxCarecan: isotp: use unconditional synchronize_rcu() in isotp_release()7.8 HighkernelTuxCarecan: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER7.8 HighkernelTuxCarecan: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure7.3 HighkernelTuxCarecan: bcm: add locking when updating filter and timer values8.8 HighkernelTuxCarecan: bcm: fix CAN frame rx/tx statistics2.0 LowkernelTuxCarecan: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler()2.0 LowkernelTuxCarecan: bcm: fix stale rx/tx ops after device removal7.1 HighkernelTuxCarecan: bcm: track a single source interface for ANYDEV timeout/throttle ops8.1 HighkernelTuxCarecan: bcm: add missing device refcount for CAN filter removal7.8 HighkernelTuxCaredm thin metadata: fix metadata snapshot consistency on commit failure7.8 HighkernelTuxCaredm-ioctl: fix a possible overflow in list_version_get_info9.8 CriticalkernelTuxCaredm-log: fix a bitset_size overflow on 32bit machines7.8 HighkernelTuxCaredm-verity: fix buffer overflow in FEC calculation9.8 CriticalkernelTuxCaredm-verity: make error counter atomicNo score- Show moreLoading…