linux-doc vulnerabilities (TuxCare)
2,900 vulnerabilities.
linux-docTuxCareBluetooth: 6lowpan: hold L2CAP conn across debugfs controlNo scorelinux-docTuxCareipv4: igmp: Fix potential UAF in igmp_gq_start_timer()9.8 Criticallinux-docTuxCareipv6: mcast: Fix potential UAF in MLD delayed work9.8 Criticallinux-docTuxCaretipc: restrict socket queue dumps in enqueue tracepoints9.8 Criticallinux-docTuxCarenet: ife: require ETH_HLEN to be pullable in ife_decode()9.1 Criticallinux-docTuxCareKVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling9.3 Criticallinux-docTuxCarenetfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst7.8 Highlinux-docTuxCarebatman-adv: access unicast_ttvn skb->data only after skb realloc9.8 Criticallinux-docTuxCarebatman-adv: bla: reacquire gw address after skb realloc8.8 Highlinux-docTuxCarebatman-adv: tt: prevent TVLV OOB check overflow9.8 Criticallinux-docTuxCaremtd: slram: remove failed entries from the device list7.8 Highlinux-docTuxCaremtd: rawnand: fix condition in 'nand_select_target()'7.8 Highlinux-docTuxCarenet: thunderbolt: Fix frags[] overflow by bounding frame_count8.8 Highlinux-docTuxCarenvmet-rdma: handle inline data with a nonzero offset9.8 Criticallinux-docTuxCarescsi: xen: scsiback: Free unsubmitted command instead of double-putting it9.3 Criticallinux-docTuxCarescsi: target: Bound PR-OUT TransportID parsing to the received buffer9.8 Criticallinux-docTuxCarescsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE9.8 Criticallinux-docTuxCarewifi: libertas_tf: fix use-after-free in lbtf_free_adapter()5.4 Mediumlinux-docTuxCareieee802154: ca8210: fix pointer truncation in kfifo on 64-bitNo scorelinux-docTuxCaredrbd: reject data replies with an out-of-range payload size9.8 Criticallinux-docTuxCarepowerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access()7.8 Highlinux-docTuxCarexfrm: fix stale skb->prev after async crypto steals a GSO segment9.8 Criticallinux-docTuxCarewifi: cfg80211: cancel sched scan results work on unregister7.5 Highlinux-docTuxCarewifi: cfg80211: use wiphy work for socket owner autodisconnect7.8 Highlinux-docTuxCarewifi: cfg80211: bound element ID read when checking non-inheritance7.1 Highlinux-docTuxCarebpf: Fix UAF in sock clone early bailouts7.8 Highlinux-docTuxCareppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF7.8 Highlinux-docTuxCarenet/iucv: take a reference on the socket found in afiucv_hs_rcv()8.8 Highlinux-docTuxCarenet/sched: act_tunnel_key: Defer dst_release to RCU callback7.8 Highlinux-docTuxCaresctp: fix auth_hmacs array size in struct sctp_cookie8.1 Highlinux-docTuxCarewifi: at76c50x-usb: avoid length underflow in at76_guess_freq()8.1 Highlinux-docTuxCareusb: gadget: f_tcm: synchronize delayed set_alt with teardown5.4 Mediumlinux-docTuxCareUSB: serial: io_edgeport: cap received transmit credits7.0 Highlinux-docTuxCarewifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request4.1 Mediumlinux-docTuxCarewatchdog: pretimeout: Fix UAF in watchdog_unregister_governor()9.8 Criticallinux-docTuxCarerds: drop incoming messages that cross network namespace boundaries7.8 Highlinux-docTuxCareiommu/amd: Wait for completion instead of returning early in iommu_completion_wait()8.8 Highlinux-docTuxCaresctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid7.3 Highlinux-docTuxCaretipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream()6.8 Mediumlinux-docTuxCaredrm/amd/display: set new_stream to NULL after release7.8 Highlinux-docTuxCaremedia: rtl2832: fix use-after-free in rtl2832_remove()5.4 Mediumlinux-docTuxCareALSA: seq: close a re-opened queue timer in the destructor7.8 Highlinux-docTuxCarewifi: ath6kl: fix OOB access from firmware ADDBA window size8.8 Highlinux-docTuxCarewifi: ath6kl: fix use-after-free in aggr_reset_state()8.8 Highlinux-docTuxCarestaging: rtl8723bs: fix OOB reads in rtw_get_wps_ie()7.1 Highlinux-docTuxCareBluetooth: RFCOMM: Fix session UAF in set_termios7.3 Highlinux-docTuxCareceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()9.8 Criticallinux-docTuxCarelibceph: Fix multiplication overflow in decode_new_up_state_weight()9.8 Criticallinux-docTuxCarelibceph: refresh auth->authorizer_buf{,_len} after authorizer update9.8 Criticallinux-docTuxCarelibceph: Reject monmaps advertising zero monitors7.5 High- Show moreLoading…