libperf vulnerabilities (TuxCare)
2,097 vulnerabilities.
libperfTuxCarebpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()8.4 HighlibperfTuxCaredrm/edid: fix OOB read in drm_parse_tiled_block()7.1 HighlibperfTuxCareBluetooth: btusb: fix use-after-free on registration failure7.8 HighlibperfTuxCareBluetooth: btusb: fix use-after-free on marvell probe failure7.8 HighlibperfTuxCaresmb: client: restrict implied bcc[0] exemption to responses without data area8.2 HighlibperfTuxCarecrypto: qat - fix VF2PF work teardown race in adf_disable_sriov()8.8 HighlibperfTuxCarenetpoll: fix a use-after-free on shutdown path7.8 HighlibperfTuxCareipv4: igmp: remove multicast group from hash table on device destruction7.8 HighlibperfTuxCarenet: ipv4: bound TCP reordering sysctl writes and MTU probe sizes7.1 HighlibperfTuxCaresmb: client: fix query directory replay double-free9.8 CriticallibperfTuxCaresmb: client: fix query_info() replay double-free9.8 CriticallibperfTuxCaresmb: client: fix double-free in SMB2_ioctl() replay9.8 CriticallibperfTuxCaresmb: client: fix change notify replay double-free9.8 CriticallibperfTuxCaresmb: client: fix double-free in SMB2_flush() replay9.8 CriticallibperfTuxCaresmb: client: fix double-free in SMB2_open() replay8.8 HighlibperfTuxCaresmb: client: Fix next buffer leak in receive_encrypted_standard()7.8 HighlibperfTuxCaresmb: client: harden POSIX SID length parsing8.2 HighlibperfTuxCaresmb: client: mask server-provided mode to 07777 in modefromsid7.1 HighlibperfTuxCarewriteback: fix race between cgroup_writeback_umount() and inode_switch_wbs()7.8 HighlibperfTuxCareproc: protect ptrace_may_access() with exec_update_lock (FD links)7.8 HighlibperfTuxCareproc: protect ptrace_may_access() with exec_update_lock (part 1)5.5 MediumlibperfTuxCareHID: lg-g15: cancel pending work on remove to fix a use-after-free7.8 HighlibperfTuxCarebpf: Validate BTF repeated field counts before expansion7.8 HighlibperfTuxCarebpf: Allow LPM map access from sleepable BPF programs7.8 HighlibperfTuxCareusb: free iso schedules on failed submit7.8 HighlibperfTuxCareUSB: idmouse: fix use-after-free on disconnect race7.8 HighlibperfTuxCareUSB: ldusb: fix use-after-free on disconnect race7.8 HighlibperfTuxCareUSB: iowarrior: fix use-after-free on disconnect7.8 HighlibperfTuxCareUSB: iowarrior: fix use-after-free on disconnect race7.8 HighlibperfTuxCareUSB: legousbtower: fix use-after-free on disconnect race7.8 HighlibperfTuxCareusb: typec: tcpm: Validate SVID index in svdm_consume_modes()7.8 HighlibperfTuxCareusb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove7.8 HighlibperfTuxCareudf: validate VAT header length against the VAT inode size7.1 HighlibperfTuxCareudf: validate sparing table length as an entry count, not a byte count7.8 HighlibperfTuxCarenvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page9.1 CriticallibperfTuxCarenvmet-auth: validate reply message payload bounds against transfer length9.1 CriticallibperfTuxCarecrypto: qat - protect service table iterations with service_lock7.8 HighlibperfTuxCarecrypto: qat - validate RSA CRT component lengths7.8 HighlibperfTuxCarespi: fsl-lpspi: terminate the RX channel on TX prepare failure path9.8 CriticallibperfTuxCareNFSv4: include MAY_WRITE in open permission mask for O_TRUNC7.1 HighlibperfTuxCaremm: do file ownership checks with the proper mount idmap5.5 MediumlibperfTuxCareKVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU8.2 HighlibperfTuxCarei2c: core: fix adapter deregistration race7.8 HighlibperfTuxCareInput: elan_i2c - prevent division by zero and arithmetic underflow5.5 MediumlibperfTuxCareRDMA/siw: bound Read Response placement to the RREAD length9.8 CriticallibperfTuxCarefuse: re-lock request before returning from fuse_ref_folio()7.8 HighlibperfTuxCaresmb: client: reject overlapping data areas in SMB2 responses9.1 CriticallibperfTuxCareInput: elan_i2c - validate firmware size before use7.1 HighlibperfTuxCareocteontx2-af: CGX: add bounds check to cgx_speed_mbps index7.8 HighlibperfTuxCaredrm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async7.0 High- Show moreLoading…