libperf vulnerabilities (TuxCare)
2,097 vulnerabilities.
libperfTuxCarevsock: fix buffer size clamping order7.8 HighlibperfTuxCaredrm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg7.1 HighlibperfTuxCaredrm/amdkfd: Clear VRAM on allocation to prevent stale data exposure5.5 MediumlibperfTuxCaresctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL7.8 HighlibperfTuxCaredrm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission5.5 MediumlibperfTuxCaredrm/amdgpu: Add bounds checking to ib_{get,set}_value7.1 HighlibperfTuxCarevsock/virtio: fix accept queue count leak on transport mismatch5.5 MediumlibperfTuxCaredrm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()7.8 HighlibperfTuxCaredrm/xe: Fix dma-buf attachment leak in xe_gem_prime_import()7.8 HighlibperfTuxCaredrm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg7.1 HighlibperfTuxCaredrm/amdkfd: validate SVM ioctl nattr against buffer size7.8 HighlibperfTuxCaretracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()5.5 MediumlibperfTuxCarefbcon: Avoid OOB font access if console rotation fails7.1 HighlibperfTuxCareRDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path7.8 HighlibperfTuxCaresmb/client: fix out-of-bounds read in symlink_data()9.1 CriticallibperfTuxCaresound: ua101: fix division by zero at probe5.5 MediumlibperfTuxCarewifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task7.8 HighlibperfTuxCareRDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()7.8 HighlibperfTuxCareexit: prevent preemption of oopsing TASK_DEAD task7.8 HighlibperfTuxCareipv6: xfrm6: release dst on error in xfrm6_rcv_encap()5.5 MediumlibperfTuxCareusb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl5.5 MediumlibperfTuxCarewifi: mac80211: use safe list iteration in radar detect work8.8 HighlibperfTuxCareopenvswitch: vport: fix self-deadlock on release of tunnel ports5.5 MediumlibperfTuxCareice: fix double free in ice_sf_eth_activate() error path7.8 HighlibperfTuxCaremd/raid10: fix divide-by-zero in setup_geo() with zero far_copies5.5 MediumlibperfTuxCaresmb/client: fix out-of-bounds read in smb2_compound_op()9.1 CriticallibperfTuxCarewifi: mac80211: drop stray 'static' from fast-RX rx_result8.8 HighlibperfTuxCareusb: usblp: fix heap leak in IEEE 1284 device ID via short response5.5 MediumlibperfTuxCarefanotify: fix false positive on permission events7.1 HighlibperfTuxCareALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()5.5 MediumlibperfTuxCareRDMA/mana: Validate rx_hash_key_len7.8 HighlibperfTuxCareBluetooth: btmtk: validate WMT event SKB length before struct access7.1 HighlibperfTuxCaremptcp: pm: ADD_ADDR rtx: fix potential data-race9.8 CriticallibperfTuxCarewifi: mt76: mt7921: fix a potential clc buffer length underflow7.8 HighlibperfTuxCarenet: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo5.5 MediumlibperfTuxCareKVM: x86: check for nEPT/nNPT in slow flush hypercalls5.5 MediumlibperfTuxCareipmi: Check event message buffer response for bad data5.5 MediumlibperfTuxCarewifi: mac80211: remove station if connection prep fails8.8 HighlibperfTuxCareip6_gre: Use cached t->net in ip6erspan_changelink().7.8 HighlibperfTuxCarelibceph: Fix slab-out-of-bounds access in auth message processing9.1 CriticallibperfTuxCareblock: add pgmap check to biovec_phys_mergeable9.8 CriticallibperfTuxCareRDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads7.5 HighlibperfTuxCareKVM: x86: Fix shadow paging use-after-free due to unexpected GFN8.8 HighlibperfTuxCaredm-thin: fix metadata refcount underflow7.8 HighlibperfTuxCaresmb: client: validate dacloffset before building DACL pointers9.8 CriticallibperfTuxCarenetfilter: reject zero shift in nft_bitwise5.5 MediumlibperfTuxCareext4: fix bounds check in check_xattrs() to prevent out-of-bounds access7.1 HighlibperfTuxCarewifi: rtw88: check for PCI upstream bridge existence5.5 MediumlibperfTuxCarezram: do not forget to endio for partial discard requests5.5 MediumlibperfTuxCareALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names()5.5 Medium- Show moreLoading…