linux-doc vulnerabilities (TuxCare)
2,900 vulnerabilities.
linux-docTuxCarenetfilter: bridge: make ebt_snat ARP rewrite writable8.8 Highlinux-docTuxCarenet/sched: act_api: use RCU with deferred freeing for action lifecycle7.8 Highlinux-docTuxCarel2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()7.8 Highlinux-docTuxCareBluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()8.0 Highlinux-docTuxCareBluetooth: MGMT: validate advertising TLV before type checks7.1 Highlinux-docTuxCareBluetooth: RFCOMM: validate skb length in MCC handlers8.1 Highlinux-docTuxCareBluetooth: bnep: reject short frames before parsing7.1 Highlinux-docTuxCaresctp: validate cached peer INIT chunk length in COOKIE_ECHO processing9.8 Criticallinux-docTuxCarexfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()7.8 Highlinux-docTuxCarenet/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list8.7 Highlinux-docTuxCareipv6: sit: reload inner IPv6 header after GSO offloads9.8 Criticallinux-docTuxCaresctp: validate embedded INIT chunk and address list lengths in cookie9.1 Criticallinux-docTuxCarenet: guard timestamp cmsgs to real error queue skbs7.1 Highlinux-docTuxCarenetfilter: nft_tunnel: fix use-after-free on object destroy7.8 Highlinux-docTuxCareUSB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr()7.8 Highlinux-docTuxCaremm/huge_memory: update file PMD counter before folio_put()7.8 Highlinux-docTuxCareRDMA/srp: bound SRP_RSP sense copy by the received length9.1 Criticallinux-docTuxCareIB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN9.8 Criticallinux-docTuxCareIn the Linux kernel, the following vulnerability has been resolved: futex/requeue: Prevent NULL...5.5 Mediumlinux-docTuxCarenet: phonet: free phonet_device after RCU grace period7.8 Highlinux-docTuxCarethunderbolt: Bound root directory content to block size7.1 Highlinux-docTuxCaredrm/amd/display: Clamp VBIOS HDMI retimer register count to array size7.8 Highlinux-docTuxCareRDMA/umem: Fix truncation for block sizes >= 4G7.8 Highlinux-docTuxCarenetfilter: require Ethernet MAC header before using eth_hdr()9.4 Criticallinux-docTuxCarefs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START7.8 Highlinux-docTuxCarefs/mbcache: cancel shrink work before destroying the cache7.8 Highlinux-docTuxCarePCI: use generic driver_override infrastructure7.8 Highlinux-docTuxCarewifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet7.8 Highlinux-docTuxCarenet: pull headers in qdisc_pkt_len_segs_init()8.4 Highlinux-docTuxCarebpf: Fix use-after-free in offloaded map/prog info fill7.8 Highlinux-docTuxCareppp: require CAP_NET_ADMIN in target netns for unattached ioctls8.8 Highlinux-docTuxCareBluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER8.8 Highlinux-docTuxCaredrm/komeda: fix integer overflow in AFBC framebuffer size check7.1 Highlinux-docTuxCaredm cache policy smq: fix missing locks in invalidating cache blocks7.8 Highlinux-docTuxCaredm log: fix out-of-bounds write due to region_count overflow7.8 Highlinux-docTuxCareocfs2/dlm: validate qr_numregions in dlm_match_regions()9.1 Criticallinux-docTuxCareocfs2: validate bg_bits during freefrag scan7.1 Highlinux-docTuxCaregreybus: raw: fix use-after-free on cdev close7.8 Highlinux-docTuxCaregreybus: raw: fix use-after-free if write is called after disconnect7.8 Highlinux-docTuxCarecrypto: ccp - copy IV using skcipher ivsize7.8 Highlinux-docTuxCarenet/sched: taprio: fix use-after-free in advance_sched() on schedule switch7.8 Highlinux-docTuxCareice: fix double-free of tx_buf skb7.8 Highlinux-docTuxCareipv6: fix possible UAF in icmpv6_rcv()9.8 Criticallinux-docTuxCaresctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks7.8 Highlinux-docTuxCarenetfilter: conntrack: remove sprintf usage9.8 Criticallinux-docTuxCarenetfilter: nfnetlink_osf: fix potential NULL dereference in ttl check7.5 Highlinux-docTuxCaretipc: fix double-free in tipc_buf_append()9.8 Criticallinux-docTuxCaresched/psi: fix race between file release and pressure write7.8 Highlinux-docTuxCarenetfilter: nf_conntrack_sip: don't use simple_strtoul9.8 Criticallinux-docTuxCareceph: fix a buffer leak in __ceph_setxattr()7.8 High- Show moreLoading…