linux-doc vulnerabilities (TuxCare)
2,900 vulnerabilities.
linux-docTuxCareBluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp8.8 Highlinux-docTuxCareBluetooth: mgmt: fix UAF in pair command cancellation7.8 Highlinux-docTuxCareALSA: 6fire: Fix UAF at error handling during probe7.0 Highlinux-docTuxCareALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output()7.0 Highlinux-docTuxCareALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set7.3 Highlinux-docTuxCarefou: Fix use-after-free in fou_create()7.8 Highlinux-docTuxCarenet: bridge: stop fast-leave after deleting a port group9.8 Criticallinux-docTuxCarenet: pktgen: fix proc entry use-after-free7.8 Highlinux-docTuxCaresctp: prevent peer transport count overflow8.8 Highlinux-docTuxCaredrm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size7.8 Highlinux-docTuxCaredrm/amd/pm: fix pptable use-after-free7.8 Highlinux-docTuxCaredrm/vmwgfx: validate DRAW_PRIMITIVES header size before division7.8 Highlinux-docTuxCarerxrpc: serialize kernel accept preallocation with socket teardown9.8 Criticallinux-docTuxCarewifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer8.1 Highlinux-docTuxCarewifi: ath9k: fix OOB access from firmware tx status queue ID8.8 Highlinux-docTuxCarecrypto: atmel-sha204a - fix blocking and non-blocking rng logicNo scorelinux-docTuxCareRDMA/mlx5: Fix devx subscribe-event unwind NULL dereference6.8 Mediumlinux-docTuxCareRDMA/srpt: fix integer overflow in immediate data length check9.8 Criticallinux-docTuxCareALSA: seq: midi: Serialize output teardown with event_input7.8 Highlinux-docTuxCarenvmet-tcp: fix page fragment cache leak in error path8.2 Highlinux-docTuxCareRDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe7.8 Highlinux-docTuxCareRDMA/rxe: Copy WQE to local buffer in non-SRQ receive path7.8 Highlinux-docTuxCareconfigfs_lookup(): don't leave ->s_dentry dangling on failure7.8 Highlinux-docTuxCareocfs2: validate fast symlink target during inode read9.8 Criticallinux-docTuxCareRDMA/siw: Fix endpoint/socket association handling9.8 Criticallinux-docTuxCarewifi: wcn36xx: fix heap overflow from oversized firmware HAL response8.8 Highlinux-docTuxCarebtrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs()7.5 Highlinux-docTuxCareASoC: fsl: fsl_audmix: Validate written enum values7.8 Highlinux-docTuxCareipv4: fib: Don't dump dying fib_info in fib_leaf_notify().7.8 Highlinux-docTuxCaresctp: validate embedded address parameter length9.1 Criticallinux-docTuxCaretipc: require net admin for TIPCv2 netlink mutators7.8 Highlinux-docTuxCaretipc: prevent snt_unacked underflow on CONN_ACK7.5 Highlinux-docTuxCaretcp: clear sock_ops cb flags before force-closing a child socket9.8 Criticallinux-docTuxCarenet/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen9.8 Criticallinux-docTuxCarebpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check8.4 Highlinux-docTuxCaretipc: fix UAF in tipc_l2_send_msg()9.8 Criticallinux-docTuxCarenet/9p: fix race condition on rdma->state in trans_rdma.c9.8 Criticallinux-docTuxCaredmaengine: Fix possible use after free7.8 Highlinux-docTuxCarenfs: use nfsi->rwsem to protect traversal of the file lock list9.8 Criticallinux-docTuxCarexfrm: Fix dev use-after-free in xfrm async resumption9.8 Criticallinux-docTuxCaresctp: fix err_chunk memory leaks in INIT handling8.7 Highlinux-docTuxCarenet: sungem: fix probe error cleanup7.8 Highlinux-docTuxCaretipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()7.8 Highlinux-docTuxCaresctp: add INIT verification after cookie unpacking9.8 Criticallinux-docTuxCarenet/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF7.8 Highlinux-docTuxCarebridge: stp: Fix a potential use-after-free when deleting a bridge7.8 Highlinux-docTuxCaresctp: fix addr_wq_timer race in sctp_free_addr_wq()7.8 Highlinux-docTuxCareafs: Fix error code in afs_extract_vl_addrs()7.5 Highlinux-docTuxCareafs: Fix callback service message parsers to pass through -EAGAIN7.5 Highlinux-docTuxCaregue: validate REMCSUM private option length9.8 Critical- Show moreLoading…