libbpf vulnerabilities (TuxCare)
3,054 vulnerabilities.
libbpfTuxCarenetfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator5.5 MediumlibbpfTuxCarel2tp: Drop large packets with UDP encap5.5 MediumlibbpfTuxCareperf/x86/intel/uncore: Skip discovery table for offline dies5.5 MediumlibbpfTuxCaredcache: Limit the minimal number of bucket to two9.1 CriticallibbpfTuxCareext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal()5.5 MediumlibbpfTuxCareext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths5.5 MediumlibbpfTuxCareext4: always drain queued discard work in ext4_mb_release()5.5 MediumlibbpfTuxCareBluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp()7.1 HighlibbpfTuxCarenetfilter: nft_ct: drop pending enqueued packets on removal7.8 HighlibbpfTuxCareBluetooth: MGMT: Fix list corruption and UAF in command complete handlers7.8 HighlibbpfTuxCarexfs: close crash window in attr dabtree inactivation4.7 MediumlibbpfTuxCarewifi: mac80211: check tdls flag in ieee80211_tdls_oper7.1 HighlibbpfTuxCareHID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq8.1 HighlibbpfTuxCareatm: lec: fix use-after-free in sock_def_readable()7.0 HighlibbpfTuxCareHID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure7.8 HighlibbpfTuxCareHID: multitouch: Check to ensure report responses match the request7.8 HighlibbpfTuxCarecrypto: af-alg - fix NULL pointer dereference in scatterwalk5.5 MediumlibbpfTuxCarempls: add seqcount to protect the platform_label{,s} pair7.1 HighlibbpfTuxCarenet: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak5.5 MediumlibbpfTuxCarenet: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak7.1 HighlibbpfTuxCareipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()9.8 CriticallibbpfTuxCareip6_tunnel: clear skb2->cb[] in ip4ip6_err()9.8 CriticallibbpfTuxCarenet: use skb_header_pointer() for TCPv4 GSO frag_off check5.5 MediumlibbpfTuxCarenet: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak5.5 MediumlibbpfTuxCarenetfilter: nf_conntrack_helper: pass helper to expect cleanup7.8 HighlibbpfTuxCarenetfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent5.5 MediumlibbpfTuxCarenetfilter: ctnetlink: ignore explicit helper on new expectations7.3 HighlibbpfTuxCarenetfilter: nf_tables: reject immediate NF_QUEUE verdict5.5 MediumlibbpfTuxCareBluetooth: MGMT: validate LTK enc_size on load7.8 HighlibbpfTuxCarebpf: Reject sleepable kprobe_multi programs at attach time5.5 MediumlibbpfTuxCaredrm/ioc32: stop speculation on the drm_compat_ioctl path5.5 MediumlibbpfTuxCareALSA: caiaq: fix stack out-of-bounds read in init_card7.1 HighlibbpfTuxCareALSA: ctxfi: Check the error for index mapping5.5 MediumlibbpfTuxCareBluetooth: SMP: derive legacy responder STK authentication from MITM state8.8 HighlibbpfTuxCareusb: ulpi: fix double free in ulpi_register_interface() error path7.8 HighlibbpfTuxCareusb: usbtmc: Flush anchored URBs in usbtmc_release7.8 HighlibbpfTuxCarebridge: br_nd_send: validate ND option lengths5.5 MediumlibbpfTuxCarevxlan: validate ND option lengths in vxlan_na_create5.5 MediumlibbpfTuxCaresmb: client: validate the whole DACL before rewriting it in cifsacl8.8 HighlibbpfTuxCarecrypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed7.1 HighlibbpfTuxCarecrypto: ccp: Don't attempt to copy ID to userspace if PSP command failed7.1 HighlibbpfTuxCarerxrpc: Fix missing validation of ticket length in non-XDR key preparsing7.8 HighlibbpfTuxCarefuse: reject oversized dirents in page cache7.8 HighlibbpfTuxCarertnetlink: add missing netlink_ns_capable() check for peer netns5.5 MediumlibbpfTuxCarexen/privcmd: fix double free via VMA splitting7.8 HighlibbpfTuxCareBuffer overflow in drivers/xen/sys-hypervisor.c7.8 HighlibbpfTuxCareIn the Linux kernel, the following vulnerability has been resolved: driver core: enforce...7.8 HighlibbpfTuxCaremm/kasan: fix double free for kasan pXds7.8 HighlibbpfTuxCareA transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to...2.0 LowlibbpfTuxCarenetfilter: ip6t_eui64: reject invalid MAC header for all packets9.4 Critical- Show moreLoading…