libbpf vulnerabilities (TuxCare)
3,054 vulnerabilities.
libbpfTuxCaredrm/amd/pm: bound pp_dpm_set_pp_table() memcpy7.8 HighlibbpfTuxCarenetfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()7.5 HighlibbpfTuxCarenet: stmmac: xgmac2: disable RBUE in default RX interrupt mask7.5 HighlibbpfTuxCareHID: hidpp: fix potential UAF in hidpp_connect_event()7.5 HighlibbpfTuxCarePCI: iproc: Protect root bus removal with rescan lockNo scorelibbpfTuxCareperf: Fix addr_filter_ranges lifetime7.8 HighlibbpfTuxCarenetfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state7.8 HighlibbpfTuxCareACPI: bus: Introduce acpi_bus_get_primary_device()No scorelibbpfTuxCarearm64: mm: Fix the lockless page-table walk in show_pte()No scorelibbpfTuxCaresvcrdma: Reject Write/Reply chunks with segcount 09.1 CriticallibbpfTuxCaresmb: client: harden DFS cache against invalid target hints7.1 HighlibbpfTuxCareASoC: rt700-sdw: always drain jack work on removeNo scorelibbpfTuxCaredrm/amd/display: Fix dangling pointer in CRTC reset function7.8 HighlibbpfTuxCarehwrng: core - fix rng list on registration errorNo scorelibbpfTuxCareusb: fix UAF when probe runs concurrent to dyn ID removalNo scorelibbpfTuxCareRDMA/rvt: Return NULL after port allocation failure9.8 CriticallibbpfTuxCarefs/resctrl: Prevent use-after-free in rdtgroup_kn_put()No scorelibbpfTuxCareuio: Fix stale info pointer in failed registration path7.0 HighlibbpfTuxCareRDMA/core: Fix potential use after free in counter_release()7.1 HighlibbpfTuxCareRDMA/core: Fix potential use after free in ib_free_cq()7.8 HighlibbpfTuxCareRDMA/mlx5: Fix integer overflow of user QP buffer size7.8 HighlibbpfTuxCarePCI: Fix UAF when probe runs concurrent to dyn ID removalNo scorelibbpfTuxCareIB/isert: reject PDUs declaring more data than was received9.1 CriticallibbpfTuxCareIB/isert: reject login PDUs declaring more data than was received9.1 CriticallibbpfTuxCarebpf: Fix potential UAF when reading bpf link info7.8 HighlibbpfTuxCarewifi: mt76: mt76x02: do not WARN on invalid rx descriptor length6.0 MediumlibbpfTuxCareHID: synchronize input before cleaning up a failed probe8.8 HighlibbpfTuxCareRDMA/siw: Fix use-after-free in siw_accept()7.8 HighlibbpfTuxCarenvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns()7.5 HighlibbpfTuxCareSquashfs: check block offset is not negative7.1 HighlibbpfTuxCareALSA: mtpav: shut down output timer before card teardown9.8 CriticallibbpfTuxCareip6mr: do not clone dst in ip6mr_cache_report()7.8 HighlibbpfTuxCareNFSv4.2: fix LAYOUTSTATS send buffer exhaustion7.5 HighlibbpfTuxCarelibceph: validate banner payload length7.5 HighlibbpfTuxCareslip: remove slip_hangup() to fix use-after-free in slip_receive_buf()7.8 HighlibbpfTuxCareHID: sony: clean up device list on probe failure8.8 HighlibbpfTuxCareALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()7.0 HighlibbpfTuxCarenvme: add missing SRCU grace period in error path9.8 CriticallibbpfTuxCarenvdimm/btt: reject an arena whose nfree is below the lane count7.8 HighlibbpfTuxCareKVM: nVMX: Always flush vpid02 on first use8.8 HighlibbpfTuxCarescsi: qla2xxx: Avoid double completion in async IOCB timeout9.8 CriticallibbpfTuxCarescsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read9.1 CriticallibbpfTuxCaredrm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check7.1 HighlibbpfTuxCaredrm/gud: NUL-terminate TV mode names read from the device5.2 MediumlibbpfTuxCareext4: fix out-of-bounds read in ext4_read_inline_dir()9.1 CriticallibbpfTuxCareisofs: fix out-of-bounds page array access on empty zisofs block9.8 CriticallibbpfTuxCareHID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature8.8 HighlibbpfTuxCareNFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check8.2 HighlibbpfTuxCarenfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown9.8 CriticallibbpfTuxCarenfsd: validate symlink target length in NFSv4 CREATE7.5 High- Show moreLoading…