libbpf vulnerabilities (TuxCare)
3,054 vulnerabilities.
libbpfTuxCaresctp: validate embedded address parameter length9.1 CriticallibbpfTuxCaretipc: require net admin for TIPCv2 netlink mutators7.8 HighlibbpfTuxCaretipc: prevent snt_unacked underflow on CONN_ACK7.5 HighlibbpfTuxCaretcp: clear sock_ops cb flags before force-closing a child socket9.8 CriticallibbpfTuxCaretipc: fix UAF in tipc_l2_send_msg()9.8 CriticallibbpfTuxCaredmaengine: Fix possible use after free7.8 HighlibbpfTuxCarenfs: use nfsi->rwsem to protect traversal of the file lock list9.8 CriticallibbpfTuxCaremd/raid10: fix writes_pending and barrier reference leaks on discard failures7.5 HighlibbpfTuxCarebpf: Mask pseudo pointer values in verifier logs4.8 MediumlibbpfTuxCarehwmon: adm1275: Prevent reading uninitialized stack2.4 LowlibbpfTuxCarebridge: stp: Fix a potential use-after-free when deleting a bridge7.8 HighlibbpfTuxCaresctp: fix addr_wq_timer race in sctp_free_addr_wq()7.8 HighlibbpfTuxCareipv4: igmp: Fix potential UAF in igmp_gq_start_timer()9.8 CriticallibbpfTuxCaretipc: restrict socket queue dumps in enqueue tracepoints9.8 CriticallibbpfTuxCareASoC: SOF: ipc3-control: Validate size in snd_sof_update_control7.8 HighlibbpfTuxCarenetfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst7.8 HighlibbpfTuxCareselinux: check connect-related permissions on TCP Fast Open8.4 HighlibbpfTuxCarenet: thunderbolt: Fix frags[] overflow by bounding frame_count8.8 HighlibbpfTuxCarenvmet-auth: reject short AUTH_RECEIVE buffers9.8 CriticallibbpfTuxCarenvmet-rdma: handle inline data with a nonzero offset9.8 CriticallibbpfTuxCarecan: isotp: use unconditional synchronize_rcu() in isotp_release()7.8 HighlibbpfTuxCarecan: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER7.8 HighlibbpfTuxCaredm-verity: fix buffer overflow in FEC calculation9.8 CriticallibbpfTuxCareata: libata-core: Reject an invalid concurrent positioning ranges count7.0 HighlibbpfTuxCarewifi: mac80211: validate extension-frame layout before RX8.8 HighlibbpfTuxCaredrm/vmwgfx: Validate vmw_surface_metadata::array_size7.8 HighlibbpfTuxCaredrm/amd/display: use kvzalloc to allocate struct dcNo scorelibbpfTuxCarelibceph: bound get_version reply decode to front len8.6 HighlibbpfTuxCarevxlan: require CAP_NET_ADMIN in the device netns for changelink8.8 HighlibbpfTuxCarexfrm: fix stale skb->prev after async crypto steals a GSO segment9.8 CriticallibbpfTuxCarewifi: cfg80211: cancel sched scan results work on unregister7.5 HighlibbpfTuxCarewifi: cfg80211: bound element ID read when checking non-inheritance7.1 HighlibbpfTuxCarebpf: Fix UAF in sock clone early bailouts7.8 HighlibbpfTuxCareppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF7.8 HighlibbpfTuxCareBluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds7.8 HighlibbpfTuxCaresmb/client: handle overlapping allocated ranges in fallocate9.8 CriticallibbpfTuxCarenet/sched: act_tunnel_key: Defer dst_release to RCU callback7.8 HighlibbpfTuxCaresctp: fix auth_hmacs array size in struct sctp_cookie8.1 HighlibbpfTuxCareUSB: serial: io_edgeport: cap received transmit credits7.0 HighlibbpfTuxCarewifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request4.1 MediumlibbpfTuxCarewifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_beginNo scorelibbpfTuxCarewifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()6.0 MediumlibbpfTuxCarebonding: fix devconf_all NULL dereference when IPv6 is disabled5.7 MediumlibbpfTuxCareiommu/intel: Fix out-of-bounds memset in dmar_latency_disable()No scorelibbpfTuxCaresctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid7.3 HighlibbpfTuxCaresctp: validate stream count in sctp_process_strreset_inreq()7.5 HighlibbpfTuxCaretipc: fix infinite loop in __tipc_nl_compat_dumpit6.8 MediumlibbpfTuxCarenet: qrtr: restrict socket creation to the initial network namespace8.8 HighlibbpfTuxCarenet: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOADNo scorelibbpfTuxCaredrm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers0.0 None- Show moreLoading…