libbpf vulnerabilities (TuxCare)
3,054 vulnerabilities.
libbpfTuxCarenetfilter: conntrack: remove sprintf usage9.8 CriticallibbpfTuxCaretipc: fix double-free in tipc_buf_append()9.8 CriticallibbpfTuxCarenetfilter: nf_conntrack_sip: don't use simple_strtoul9.8 CriticallibbpfTuxCarenetdevsim: zero initialize struct iphdr in dummy sk_buff5.5 MediumlibbpfTuxCarenet/sched: netem: fix queue limit check to include reordered packets5.5 MediumlibbpfTuxCareneigh: let neigh_xmit take skb ownership7.5 HighlibbpfTuxCarecrypto: af_alg - Cap AEAD AD length to 0x800000005.5 MediumlibbpfTuxCarenetfilter: nft_ct: fix missing expect put in obj eval5.5 MediumlibbpfTuxCareKVM: Reject wrapped offset in kvm_reset_dirty_gfn()7.8 HighlibbpfTuxCareALSA: usb-audio: Bound MIDI endpoint descriptor scans5.5 MediumlibbpfTuxCareceph: fix a buffer leak in __ceph_setxattr()7.8 HighlibbpfTuxCareceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size5.5 MediumlibbpfTuxCarelibceph: Fix potential out-of-bounds access in osdmap_decode()9.1 CriticallibbpfTuxCarelibceph: Fix potential null-ptr-deref in decode_choose_args()7.5 HighlibbpfTuxCarelibceph: Fix potential out-of-bounds access in __ceph_x_decrypt()7.5 HighlibbpfTuxCarelibceph: Fix potential out-of-bounds access in crush_decode()9.8 CriticallibbpfTuxCarelibceph: handle rbtree insertion error in decode_choose_args()7.5 HighlibbpfTuxCarei2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl5.5 MediumlibbpfTuxCarenet: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove7.8 HighlibbpfTuxCarexfrm: espintcp: do not reuse an in-progress partial send7.8 HighlibbpfTuxCaresctp: stream: fully roll back denied add-stream state7.5 HighlibbpfTuxCareipc: limit next_id allocation to the valid ID range7.8 HighlibbpfTuxCarenetfilter: ipset: stop hash:* range iteration at end5.5 MediumlibbpfTuxCarenetfilter: xt_policy: fix strict mode inbound policy matching8.3 HighlibbpfTuxCarebpf: Free reuseport cBPF prog after RCU grace period.7.8 HighlibbpfTuxCareip6_vti: set netns_immutable on the fallback device.7.8 HighlibbpfTuxCarenet/sched: fix pedit partial COW leading to page cache corruption7.8 HighlibbpfTuxCaredm: fix unlocked test for dm_suspended_md7.8 HighlibbpfTuxCarenetfilter: nf_tables: use list_del_rcu for netlink hooks7.8 HighlibbpfTuxCaretun: free page on build_skb failure in tun_xdp_one()7.1 HighlibbpfTuxCaretap: free page on error paths in tap_get_user_xdp()7.4 HighlibbpfTuxCarenvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free7.5 HighlibbpfTuxCareisofs: validate Rock Ridge CE continuation extent against volume size8.2 HighlibbpfTuxCaredm: fix a buffer overflow in ioctl processing7.8 HighlibbpfTuxCareinet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP9.1 CriticallibbpfTuxCareprocfs: fix missing RCU protection when reading real_parent in do_task_stat()7.8 HighlibbpfTuxCarepstore/ram: fix buffer overflow in persistent_ram_save_old()7.8 HighlibbpfTuxCareocteontx2-af: Fix PF driver crash with kexec kernel booting5.5 MediumlibbpfTuxCarevsock: fix buffer size clamping order7.8 HighlibbpfTuxCaredrm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg7.1 HighlibbpfTuxCaresctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL7.8 HighlibbpfTuxCaredrm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission5.5 MediumlibbpfTuxCaredrm/amdgpu: Add bounds checking to ib_{get,set}_value7.1 HighlibbpfTuxCaredrm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()7.8 HighlibbpfTuxCaredrm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg7.1 HighlibbpfTuxCaredrm/amdkfd: validate SVM ioctl nattr against buffer size7.8 HighlibbpfTuxCaretracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()5.5 MediumlibbpfTuxCarefbcon: Avoid OOB font access if console rotation fails7.1 HighlibbpfTuxCareRDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path7.8 HighlibbpfTuxCaresound: ua101: fix division by zero at probe5.5 Medium- Show moreLoading…