kernel vulnerabilities (TuxCare)
5,124 vulnerabilities.
kernelTuxCarerndis_host: add overflow check in rndis_rx_fixup()5.2 MediumkernelTuxCareALSA: dummy: Check card index validity at probeNo scorekernelTuxCareipv4: reject undersized MTUs in ip_do_fragment()6.8 MediumkernelTuxCarefbdev: serialize mode sysfs access with lock_fb_info()No scorekernelTuxCareHID: magicmouse: prevent unbounded recursion in magicmouse_raw_event()5.1 MediumkernelTuxCareHID: magicmouse: do not keep a stale msc->input if no input is claimed5.4 MediumkernelTuxCareHID: core: fix OOB read of field->usage in hid_set_field()2.4 LowkernelTuxCareHID: hyperv: validate initial device info boundsNo scorekernelTuxCareselinux: reject a class permission count below its inherited commonNo scorekernelTuxCareselinux: reject a permission value exceeding the class permission countNo scorekernelTuxCareaf_packet: Don't send zero-byte data in tpacket_snd().4.8 MediumkernelTuxCareIn the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear...9.3 CriticalkernelTuxCarenet: gro: properly validate BIG TCP aggregation criteria9.8 CriticalkernelTuxCaresctp: validate Adaptation Indication parameter length7.5 HighkernelTuxCareipvs: do not propagate one-packet flag to synced conns9.8 CriticalkernelTuxCarecan: softing: fw_parse(): validate firmware record spans7.8 HighkernelTuxCaretracing/mmiotrace: Add NULL check for mmio_trace_array in logging functionsNo scorekernelTuxCarevxlan: re-fetch eth header after route_shortcircuit()9.8 CriticalkernelTuxCareDrivers: hv: vmbus: use generic driver_override infrastructureNo scorekernelTuxCarenetfilter: xt_nat: reject unsupported target families7.3 HighkernelTuxCaremmc: vub300: defer reset until cmd_mutex is unlocked5.1 MediumkernelTuxCareALSA: seq: oss: Serialize readq reset state with q->lock7.8 HighkernelTuxCarechar: tlclk: fix use-after-free in tlclk_cleanup()7.8 HighkernelTuxCareveth: fix NAPI leak in XDP enable error path7.8 HighkernelTuxCarenetfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read9.1 CriticalkernelTuxCarehwmon: (asus_atk0110) Check package count before accessing element8.4 HighkernelTuxCareinet: frags: strip GSO state from fragments before reassembly8.6 HighkernelTuxCareblock: stop the timeout timer when releasing a never added disk9.8 CriticalkernelTuxCares390/qeth: validate user buffer length in SNMP and ARP query ioctls8.4 HighkernelTuxCarefbdev: bound mode sysfs output to the sysfs buffer7.8 HighkernelTuxCarefbdev: clear fb_info->mode before deleting a videomode7.8 HighkernelTuxCaredrm/amdgpu: reject oversized IBs with per-ring packet limits8.8 HighkernelTuxCareInput: focaltech - fix array out-of-bounds in focaltech_process_rel_packet8.4 HighkernelTuxCarelibceph: Avoid using invalid osd indices from primary_temp9.8 CriticalkernelTuxCarexfs: bounds-check buffer log item's dirty bitmap8.4 HighkernelTuxCarexfs: fix ilock leak on error in xfs_dq_get_next_id7.0 HighkernelTuxCarexfs: don't swallow dquot recovery verification errors5.3 MediumkernelTuxCareperf: Reject exited events as group leaders7.8 HighkernelTuxCaresctp: validate cookie AUTH state before use9.8 CriticalkernelTuxCarenetfilter: ipset: fix refcount race between list:set GC and swap7.8 HighkernelTuxCarenetfilter: flowtable: publish GC-visible tuple last9.8 CriticalkernelTuxCareipvlan: inherit needed_headroom and needed_tailroom from phy_dev9.8 CriticalkernelTuxCaremacvlan: inherit needed_headroom and needed_tailroom from lowerdev9.8 CriticalkernelTuxCarenet/sched: cls_bpf: reject dev-bound programs bound to a different device7.8 HighkernelTuxCareNFS: Pin the 'struct nfs_server' during a FREE_STATEID call9.8 CriticalkernelTuxCarebonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor7.3 HighkernelTuxCareenic: fix tx_hang_reset use-after-free on device removal7.8 HighkernelTuxCarebpf: Preserve pointer state for commuted arithmetic7.8 HighkernelTuxCarenet/mlx5: fw_tracer, return NULL on create error7.5 HighkernelTuxCarebpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()7.8 High- Show moreLoading…