libbpf-dev vulnerabilities (TuxCare)
325 vulnerabilities.
libbpf-devTuxCaresctp: prevent peer transport count overflow8.8 Highlibbpf-devTuxCaredrm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size7.8 Highlibbpf-devTuxCaredrm/vmwgfx: validate DRAW_PRIMITIVES header size before division7.8 Highlibbpf-devTuxCarebridge: stp: Fix a potential use-after-free when deleting a bridge7.8 Highlibbpf-devTuxCarebtrfs: do not trim a device which is not writeableNo scorelibbpf-devTuxCarenet: ethernet: arc: emac: quiesce interrupts before requesting IRQ7.0 Highlibbpf-devTuxCarecan: esd_usb: kill anchored URBs before freeing netdevs7.8 Highlibbpf-devTuxCareusb: gadget: f_midi: cancel pending IN work before freeing the midi object7.8 Highlibbpf-devTuxCareRDMA/rxe: Fix a use-after-free problem in rxe_mmap7.8 Highlibbpf-devTuxCarexfrm: fix sk_dst_cache double-free in xfrm_user_policy()7.8 Highlibbpf-devTuxCarexfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()7.8 Highlibbpf-devTuxCarewifi: p54: validate RX frame length in p54_rx_eeprom_readback()5.1 Mediumlibbpf-devTuxCarebtrfs: reject free space cache with more entries than pages7.8 Highlibbpf-devTuxCaresctp: don't free the ASCONF's own transport in DEL-IP processing9.8 Criticallibbpf-devTuxCarerhashtable: clear stale iter->p on table restart7.8 Highlibbpf-devTuxCaredrm/edid: fix OOB read in drm_parse_tiled_block()7.1 Highlibbpf-devTuxCaretipc: fix use-after-free of the discoverer in tipc_disc_rcv()7.8 Highlibbpf-devTuxCarenet/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket9.8 Criticallibbpf-devTuxCareusb: gadget: function: rndis: add length check for header5.5 Mediumlibbpf-devTuxCareiio: accel: bmc150: clamp the device-reported FIFO frame count5.5 Mediumlibbpf-devTuxCareALSA: firewire: isight: bound the sample count to the packet payload5.4 Mediumlibbpf-devTuxCareBluetooth: btusb: fix use-after-free on registration failure7.8 Highlibbpf-devTuxCaresmb: client: Fix next buffer leak in receive_encrypted_standard()7.8 Highlibbpf-devTuxCarewriteback: fix race between cgroup_writeback_umount() and inode_switch_wbs()7.8 Highlibbpf-devTuxCarecpufreq: pcc: fix use-after-free and double free in _OSC evaluation7.8 Highlibbpf-devTuxCarenfc: llcp: Fix use-after-free in llcp_sock_release()7.8 Highlibbpf-devTuxCarexfrm: Check for underflow in xfrm_state_mtu7.8 Highlibbpf-devTuxCareALSA: pcm: oss: Fix setup list UAF on proc write error7.8 Highlibbpf-devTuxCareusb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes()5.5 Mediumlibbpf-devTuxCareipv6: exthdrs: refresh nh after handling HAO option9.8 Criticallibbpf-devTuxCaref2fs: bound i_inline_xattr_size for non-inline-xattr inodes8.4 Highlibbpf-devTuxCaref2fs: validate ACL entry sizes in f2fs_acl_from_disk()7.8 Highlibbpf-devTuxCaref2fs: protect extension_list reading with sb_lock in f2fs_sbi_show()7.1 Highlibbpf-devTuxCareipvs: clear the svc scheduler ptr early on edit7.8 Highlibbpf-devTuxCarenetfilter: bridge: make ebt_snat ARP rewrite writable8.8 Highlibbpf-devTuxCarenet/sched: act_api: use RCU with deferred freeing for action lifecycle7.8 Highlibbpf-devTuxCaresctp: validate cached peer INIT chunk length in COOKIE_ECHO processing9.8 Criticallibbpf-devTuxCareipv6: sit: reload inner IPv6 header after GSO offloads9.8 Criticallibbpf-devTuxCaresctp: validate embedded INIT chunk and address list lengths in cookie9.1 Criticallibbpf-devTuxCaremm/huge_memory: update file PMD counter before folio_put()7.8 Highlibbpf-devTuxCareRDMA/srp: bound SRP_RSP sense copy by the received length9.1 Criticallibbpf-devTuxCaredrm/amd/display: Bound VBIOS record-chain walk loops7.1 Highlibbpf-devTuxCaredrm/amd/display: Clamp VBIOS HDMI retimer register count to array size7.8 Highlibbpf-devTuxCarefs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START7.8 Highlibbpf-devTuxCarenet: pull headers in qdisc_pkt_len_segs_init()8.4 Highlibbpf-devTuxCareppp: require CAP_NET_ADMIN in target netns for unattached ioctls8.8 Highlibbpf-devTuxCareocfs2/dlm: validate qr_numregions in dlm_match_regions()9.1 Criticallibbpf-devTuxCareocfs2: validate bg_bits during freefrag scan7.1 Highlibbpf-devTuxCarebpf, arm64: Fix off-by-one in check_imm signed range check7.8 Highlibbpf-devTuxCareice: fix double-free of tx_buf skb7.8 High- Show moreLoading…