libbpf-devel vulnerabilities (TuxCare)
3,054 vulnerabilities.
libbpf-develTuxCareposix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path5.5 Mediumlibbpf-develTuxCareHID: lg-g15: cancel pending work on remove to fix a use-after-free7.8 Highlibbpf-develTuxCarebpf: Reject fragmented frames in devmap9.8 Criticallibbpf-develTuxCarebpf: Allow LPM map access from sleepable BPF programs7.8 Highlibbpf-develTuxCarenet: usb: kalmia: bound RX frame length in kalmia_rx_fixup()5.5 Mediumlibbpf-develTuxCareusb: free iso schedules on failed submit7.8 Highlibbpf-develTuxCareUSB: idmouse: fix use-after-free on disconnect race7.8 Highlibbpf-develTuxCareUSB: ldusb: fix use-after-free on disconnect race7.8 Highlibbpf-develTuxCareUSB: iowarrior: fix use-after-free on disconnect race7.8 Highlibbpf-develTuxCareUSB: legousbtower: fix use-after-free on disconnect race7.8 Highlibbpf-develTuxCareUSB: serial: keyspan_pda: fix information leak5.5 Mediumlibbpf-develTuxCareUSB: serial: digi_acceleport: fix broken rx after throttle5.5 Mediumlibbpf-develTuxCareUSB: serial: digi_acceleport: fix hard lockup on disconnect5.5 Mediumlibbpf-develTuxCareusb: typec: tcpm: Validate SVID index in svdm_consume_modes()7.8 Highlibbpf-develTuxCareusb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove7.8 Highlibbpf-develTuxCareudf: validate VAT header length against the VAT inode size7.1 Highlibbpf-develTuxCareudf: validate sparing table length as an entry count, not a byte count7.8 Highlibbpf-develTuxCarenvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page9.1 Criticallibbpf-develTuxCarenvmet-auth: validate reply message payload bounds against transfer length9.1 Criticallibbpf-develTuxCareisofs: bound Rock Ridge symlink components to the SL record7.1 Highlibbpf-develTuxCarecrypto: ecc - Fix carry overflow in vli multiplication8.8 Highlibbpf-develTuxCarecrypto: drbg - Fix returning success on failure in CTR_DRBG5.5 Mediumlibbpf-develTuxCarecrypto: qat - protect service table iterations with service_lock7.8 Highlibbpf-develTuxCarecrypto: qat - validate RSA CRT component lengths7.8 Highlibbpf-develTuxCarespi: fsl-lpspi: terminate the RX channel on TX prepare failure path9.8 Criticallibbpf-develTuxCaretracing: Prevent out-of-bounds read in glob matching7.1 Highlibbpf-develTuxCareNFSv4: include MAY_WRITE in open permission mask for O_TRUNC7.1 Highlibbpf-develTuxCarei2c: core: fix adapter deregistration race7.8 Highlibbpf-develTuxCareInput: synaptics-rmi4 - bound the F3A keymap to the GPIO count7.8 Highlibbpf-develTuxCareInput: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count7.8 Highlibbpf-develTuxCareInput: elan_i2c - prevent division by zero and arithmetic underflow5.5 Mediumlibbpf-develTuxCareRDMA/siw: bound Read Response placement to the RREAD length9.8 Criticallibbpf-develTuxCarefuse: re-lock request before returning from fuse_ref_folio()7.8 Highlibbpf-develTuxCareInput: elan_i2c - validate firmware size before use7.1 Highlibbpf-develTuxCareocteontx2-af: CGX: add bounds check to cgx_speed_mbps index7.8 Highlibbpf-develTuxCaredrm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async7.0 Highlibbpf-develTuxCarenet/mlx5e: xsk: Fix unlocked writing to ICOSQ7.5 Highlibbpf-develTuxCareKVM: x86: Check for invalid/obsolete root *after* making MMU pages available8.8 Highlibbpf-develTuxCarei2c: stub: Reject I2C block transfers with invalid length7.8 Highlibbpf-develTuxCarenetfilter: ipset: fix race between dump and ip_set_list resize7.8 Highlibbpf-develTuxCarewifi: cfg80211: advance loop vars in cfg80211_merge_profile()5.5 Mediumlibbpf-develTuxCaretracing: Do not call map->ops->elt_free() if elt_alloc() fails5.5 Mediumlibbpf-develTuxCareipv4: raw: reject IP_HDRINCL packets with ihl < 57.8 Highlibbpf-develTuxCareixgbevf: fix use-after-free in VEPA multicast source pruning9.8 Criticallibbpf-develTuxCareaf_unix: Fix UAF read of tail->len in unix_stream_data_wait()8.8 Highlibbpf-develTuxCaredrm/amd/display: Validate GPIO pin LUT table size before iterating7.8 Highlibbpf-develTuxCarenet: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring9.8 Criticallibbpf-develTuxCarenet: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer9.3 Criticallibbpf-develTuxCarenet: mana: validate rx_req_idx to prevent out-of-bounds array access9.3 Criticallibbpf-develTuxCaresecurity/keys: fix missed RCU read section on lookup7.8 High- Show moreLoading…