libbpf-static vulnerabilities (TuxCare)
3,054 vulnerabilities.
libbpf-staticTuxCarenfsd: fix clock domain mismatch in clients_still_reclaiming()7.5 Highlibbpf-staticTuxCarenfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net8.1 Highlibbpf-staticTuxCareNFSD: Prevent client use-after-free during delegation revoke9.8 Criticallibbpf-staticTuxCareaudit: avoid dropping live tree ref on fsnotify rule autoremove9.8 Criticallibbpf-staticTuxCaresmb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T29.8 Criticallibbpf-staticTuxCaresmb: client: clear ce->tgthint in free_tgts()9.8 Criticallibbpf-staticTuxCaresmb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()9.8 Criticallibbpf-staticTuxCareHID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind5.4 Mediumlibbpf-staticTuxCaredm raid1: reserve space for NUL-terminator in build_constructor_string()No scorelibbpf-staticTuxCareip: orphan prefetched skbs before multicast forwarding7.8 Highlibbpf-staticTuxCarelibnvdimm/labels: Prevent integer overflow in __nd_label_validate()7.8 Highlibbpf-staticTuxCarempls: reload header after pskb_may_pull()9.8 Criticallibbpf-staticTuxCarenouveau/gem: reserve the bo in the info ioctl around the vma lookup7.8 Highlibbpf-staticTuxCareSUNRPC: svcauth_gss: enforce krb5 token minimum length9.8 Criticallibbpf-staticTuxCaresched/core: Make core-sched flips wait for in-flight selections7.8 Highlibbpf-staticTuxCareRDMA/ucma: Lock the handler in ucma_set_ib_path()7.8 Highlibbpf-staticTuxCareopenvswitch: Fix CT limit teardown use-after-free7.8 Highlibbpf-staticTuxCareiommu/vt-d: Force requesting ACS when tboot is enabled9.3 Criticallibbpf-staticTuxCarenet: openvswitch: fix flow mask use-after-free on flow deletion7.8 Highlibbpf-staticTuxCarexfrm: ah6: validate routing header segments_left7.3 Highlibbpf-staticTuxCarenet/packet: defer vmalloc TX_RING free until skbs finish7.3 Highlibbpf-staticTuxCareIn the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear...9.3 Criticallibbpf-staticTuxCarenet: gro: properly validate BIG TCP aggregation criteria9.8 Criticallibbpf-staticTuxCareveth: fix NAPI leak in XDP enable error path7.8 Highlibbpf-staticTuxCareinet: frags: strip GSO state from fragments before reassembly8.6 Highlibbpf-staticTuxCareblock: stop the timeout timer when releasing a never added disk9.8 Criticallibbpf-staticTuxCaredrm/amdgpu: reject oversized IBs with per-ring packet limits8.8 Highlibbpf-staticTuxCareInput: focaltech - fix array out-of-bounds in focaltech_process_rel_packet8.4 Highlibbpf-staticTuxCarelibceph: Avoid using invalid osd indices from primary_temp9.8 Criticallibbpf-staticTuxCarexfs: bounds-check buffer log item's dirty bitmap8.4 Highlibbpf-staticTuxCarexfs: fix ilock leak on error in xfs_dq_get_next_id7.0 Highlibbpf-staticTuxCarexfs: don't swallow dquot recovery verification errors5.3 Mediumlibbpf-staticTuxCareperf: Reject exited events as group leaders7.8 Highlibbpf-staticTuxCaresctp: validate cookie AUTH state before use9.8 Criticallibbpf-staticTuxCarenetfilter: ipset: fix refcount race between list:set GC and swap7.8 Highlibbpf-staticTuxCarenetfilter: flowtable: publish GC-visible tuple last9.8 Criticallibbpf-staticTuxCareipvlan: inherit needed_headroom and needed_tailroom from phy_dev9.8 Criticallibbpf-staticTuxCaremacvlan: inherit needed_headroom and needed_tailroom from lowerdev9.8 Criticallibbpf-staticTuxCarenet/sched: cls_bpf: reject dev-bound programs bound to a different device7.8 Highlibbpf-staticTuxCareNFS: Pin the 'struct nfs_server' during a FREE_STATEID call9.8 Criticallibbpf-staticTuxCarebonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor7.3 Highlibbpf-staticTuxCareenic: fix tx_hang_reset use-after-free on device removal7.8 Highlibbpf-staticTuxCarebpf: Preserve pointer state for commuted arithmetic7.8 Highlibbpf-staticTuxCarenet/mlx5: fw_tracer, return NULL on create error7.5 Highlibbpf-staticTuxCarebpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()7.8 Highlibbpf-staticTuxCareudp: fix potential use-after-free in tunnel segmentation10.0 Criticallibbpf-staticTuxCarenet/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter8.2 Highlibbpf-staticTuxCarenet/openvswitch: check Ethernet header length in key_extract()7.8 Highlibbpf-staticTuxCarenet/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers7.8 Highlibbpf-staticTuxCarenet/atm: fix slab-out-of-bounds read in vcc_setsockopt()7.1 High- Show moreLoading…