linux-buildinfo-4.4.0-288-generic vulnerabilities (TuxCare)
198 vulnerabilities.
linux-buildinfo-4.4.0-288-genericTuxCareecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet7.8 Highlinux-buildinfo-4.4.0-288-genericTuxCaredm raid1: reserve space for NUL-terminator in build_constructor_string()No scorelinux-buildinfo-4.4.0-288-genericTuxCaredm array: validate array block headers on read7.8 Highlinux-buildinfo-4.4.0-288-genericTuxCarenouveau/gem: reserve the bo in the info ioctl around the vma lookup7.8 Highlinux-buildinfo-4.4.0-288-genericTuxCareSUNRPC: svcauth_gss: enforce krb5 token minimum length9.8 Criticallinux-buildinfo-4.4.0-288-genericTuxCaresunrpc: route to a populated pool in svc_pool_for_cpu()7.5 Highlinux-buildinfo-4.4.0-288-genericTuxCareSUNRPC: always drain cache_cleaner before destroying a cache_detail7.8 Highlinux-buildinfo-4.4.0-288-genericTuxCaresunrpc: defer rq_argp and rq_resp free until after RCU grace period7.8 Highlinux-buildinfo-4.4.0-288-genericTuxCareSUNRPC: harden gss_krb5_unwrap_v2 against short tokens9.8 Criticallinux-buildinfo-4.4.0-288-genericTuxCareSUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v29.1 Criticallinux-buildinfo-4.4.0-288-genericTuxCareregulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer8.4 Highlinux-buildinfo-4.4.0-288-genericTuxCareocfs2: bound namelen in dlm_migrate_request_handler9.8 Criticallinux-buildinfo-4.4.0-288-genericTuxCareocfs2: validate lengths in dlm_mig_lockres_handler9.8 Criticallinux-buildinfo-4.4.0-288-genericTuxCareopenvswitch: only skb_tx_error() a packet we are about to drop7.8 Highlinux-buildinfo-4.4.0-288-genericTuxCaresctp: drop a chunk if its transport was removed9.8 Criticallinux-buildinfo-4.4.0-288-genericTuxCarepower: supply: bq24257: fix use-after-free on removeNo scorelinux-buildinfo-4.4.0-288-genericTuxCarepower: supply: lp8727: fix use-after-free in lp8727_release_irq()8.4 Highlinux-buildinfo-4.4.0-288-genericTuxCareiommu/vt-d: Force requesting ACS when tboot is enabled9.3 Criticallinux-buildinfo-4.4.0-288-genericTuxCarenet/iucv: filter frames in afiucv_hs_rcv() by ingress device8.1 Highlinux-buildinfo-4.4.0-288-genericTuxCareslip: fix use-after-free in sl_sync()7.8 Highlinux-buildinfo-4.4.0-288-genericTuxCarenet: openvswitch: fix flow mask use-after-free on flow deletion7.8 Highlinux-buildinfo-4.4.0-288-genericTuxCaresmack: fix cred UAF in smack_file_send_sigiotask()7.8 Highlinux-buildinfo-4.4.0-288-genericTuxCarevxlan: re-fetch eth header after route_shortcircuit()9.8 Criticallinux-buildinfo-4.4.0-288-genericTuxCarechar: tlclk: fix use-after-free in tlclk_cleanup()7.8 Highlinux-buildinfo-4.4.0-288-genericTuxCarebatman-adv: gw: acquire ethernet header only after skb realloc8.8 Highlinux-buildinfo-4.4.0-288-genericTuxCaredrm/amdgpu: reject oversized IBs with per-ring packet limits8.8 Highlinux-buildinfo-4.4.0-288-genericTuxCarelibceph: Avoid using invalid osd indices from primary_temp9.8 Criticallinux-buildinfo-4.4.0-288-genericTuxCarexfs: bounds-check buffer log item's dirty bitmap8.4 Highlinux-buildinfo-4.4.0-288-genericTuxCaresctp: validate cookie AUTH state before use9.8 Criticallinux-buildinfo-4.4.0-288-genericTuxCareipvlan: inherit needed_headroom and needed_tailroom from phy_dev9.8 Criticallinux-buildinfo-4.4.0-288-genericTuxCareNFS: Pin the 'struct nfs_server' during a FREE_STATEID call9.8 Criticallinux-buildinfo-4.4.0-288-genericTuxCarenet/atm: fix slab-out-of-bounds read in vcc_setsockopt()7.1 Highlinux-buildinfo-4.4.0-288-genericTuxCaresctp: clear control chunk transport if it is being removed9.8 Criticallinux-buildinfo-4.4.0-288-genericTuxCareusb: gadget: f_ncm: Use unsigned int for ndp_index5.1 Mediumlinux-buildinfo-4.4.0-288-genericTuxCareipvs: clear IPv4 options after rebasing tunnel ICMP errors9.8 Criticallinux-buildinfo-4.4.0-288-genericTuxCareALSA: usx2y: bound the hwdep mmap fault offset7.8 Highlinux-buildinfo-4.4.0-288-genericTuxCareperf/core: Fix group leader use-after-free after sibling detach7.8 Highlinux-buildinfo-4.4.0-288-genericTuxCareipv6: prevent in6_dev_get() from resurrecting inet6_dev7.8 Highlinux-buildinfo-4.4.0-288-genericTuxCarenet/x25: fix use-after-free of the socket by its timers9.8 Criticallinux-buildinfo-4.4.0-288-genericTuxCaretipc: read le->link under the node lock in tipc_node_link_down()7.8 Highlinux-buildinfo-4.4.0-288-genericTuxCareip6_tunnel: clear skb2->cb[] in ip6ip6_err()9.8 Criticallinux-buildinfo-4.4.0-288-genericTuxCaresctp: keep chunk->transport in step with the list it is queued on9.8 Criticallinux-buildinfo-4.4.0-288-genericTuxCaresctp: fix use-after-free of cached ASCONF chunk9.8 Criticallinux-buildinfo-4.4.0-288-genericTuxCarenet/sched: cls_route: fix fastmap use-after-free on filter7.8 Highlinux-buildinfo-4.4.0-288-genericTuxCarenetfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()9.8 Criticallinux-buildinfo-4.4.0-288-genericTuxCarescsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer9.8 Criticallinux-buildinfo-4.4.0-288-genericTuxCareBluetooth: mgmt: fix UAF in pair command cancellation7.8 Highlinux-buildinfo-4.4.0-288-genericTuxCareALSA: 6fire: Fix UAF at error handling during probe7.0 Highlinux-buildinfo-4.4.0-288-genericTuxCareALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output()7.0 Highlinux-buildinfo-4.4.0-288-genericTuxCareALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set7.3 High- Show moreLoading…