kernel vulnerabilities (TuxCare)
5,124 vulnerabilities.
kernelTuxCarePCI/sysfs: Fix out-of-bounds read in pci_write_legacy_io()No scorekernelTuxCareNFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock9.8 CriticalkernelTuxCareNFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check8.2 HighkernelTuxCarenfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown9.8 CriticalkernelTuxCarenfsd: release path refs on follow_down() error7.5 HighkernelTuxCarenfsd: validate symlink target length in NFSv4 CREATE7.5 HighkernelTuxCarenfsd: defer vfree of compound ops to fix rpc_status UAF7.8 HighkernelTuxCarenfsd: fix clock domain mismatch in clients_still_reclaiming()7.5 HighkernelTuxCarenfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net8.1 HighkernelTuxCarenfsd: gate nfs2 setacl by argp->mask9.1 CriticalkernelTuxCarenfsd: gate nfs3 setacl by argp->mask9.1 CriticalkernelTuxCarenfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops5.3 MediumkernelTuxCareNFSD: Prevent client use-after-free during delegation revoke9.8 CriticalkernelTuxCarelibceph: reject buckets with mismatched CRUSH ids9.8 CriticalkernelTuxCareceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock9.8 CriticalkernelTuxCareceph: bound xattr value length in __build_xattrs()9.1 CriticalkernelTuxCareaudit: avoid dropping live tree ref on fsnotify rule autoremove9.8 CriticalkernelTuxCarecifs: call pagecache_isize_extended() in cifs_setsize() when extending4.8 MediumkernelTuxCaresmb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions7.8 HighkernelTuxCaresmb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T29.8 CriticalkernelTuxCaresmb: client: clear ce->tgthint in free_tgts()9.8 CriticalkernelTuxCaresmb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()9.8 CriticalkernelTuxCaresmb: client: reject a tree connect response whose byte count is too small9.1 CriticalkernelTuxCareHID: picolcd: clamp eeprom debugfs read to bytes actually receivedNo scorekernelTuxCareHID: roccat: free buffered reports when destroying device2.4 LowkernelTuxCareHID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind5.4 MediumkernelTuxCareecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet7.8 HighkernelTuxCarefsnotify: Fix stale object mask after concurrent mark updates2.0 LowkernelTuxCarebnx2x: fix double free in bnx2x_init_firmware() error path7.1 HighkernelTuxCaredm raid1: reserve space for NUL-terminator in build_constructor_string()No scorekernelTuxCaredm array: validate array block headers on read7.8 HighkernelTuxCaredm array: reject an array block whose value size is not the caller's7.8 HighkernelTuxCareBluetooth: RFCOMM: serialize security confirmation handling8.8 HighkernelTuxCareip: orphan prefetched skbs before multicast forwarding7.8 HighkernelTuxCarelibnvdimm/labels: Prevent integer overflow in __nd_label_validate()7.8 HighkernelTuxCarempls: reload header after pskb_may_pull()9.8 CriticalkernelTuxCarenouveau/gem: reserve the bo in the info ioctl around the vma lookup7.8 HighkernelTuxCareparams: fix charp corruption on allocation failureNo scorekernelTuxCareSUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow9.8 CriticalkernelTuxCareSUNRPC: svcauth_gss: enforce krb5 token minimum length9.8 CriticalkernelTuxCaresunrpc: route to a populated pool in svc_pool_for_cpu()7.5 HighkernelTuxCareSUNRPC: always drain cache_cleaner before destroying a cache_detail7.8 HighkernelTuxCaresunrpc: defer rq_argp and rq_resp free until after RCU grace period7.8 HighkernelTuxCareSUNRPC: harden gss_krb5_unwrap_v2 against short tokens9.8 CriticalkernelTuxCareSUNRPC: harden gss_unwrap_resp_priv length checks9.8 CriticalkernelTuxCaresunrpc: init gssp_lock before publishing proc entry7.8 HighkernelTuxCareSUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v29.1 CriticalkernelTuxCaresvcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails8.8 HighkernelTuxCaresvcrdma: Fix offset arithmetic in read_chunk_range9.8 CriticalkernelTuxCaresvcrdma: Reject connection when transport allocation fails8.2 High- Show moreLoading…