linux-doc vulnerabilities (TuxCare)
2,900 vulnerabilities.
linux-docTuxCareALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output()5.1 Mediumlinux-docTuxCareALSA: usb-audio: Complete cleanup after system-resume errors5.1 Mediumlinux-docTuxCareUSB: serial: option: fix slab OOB read in interrupt URB callback2.4 Lowlinux-docTuxCareUSB: c67x00: fix use-after-free in c67x00_add_iso_urb()7.3 Highlinux-docTuxCareusb: usbfs: fix use-after-free of usb_device in usbdev_release()7.3 Highlinux-docTuxCarenfc: st21nfca: validate ATR_REQ length against the received frame7.1 Highlinux-docTuxCareBluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept6.0 Mediumlinux-docTuxCarerndis_host: add overflow check in rndis_rx_fixup()5.2 Mediumlinux-docTuxCareALSA: dummy: Check card index validity at probeNo scorelinux-docTuxCareocfs2: fix missing metadata reservation for large xattrs5.7 Mediumlinux-docTuxCarenilfs2: reject invalid block index in GC ioctlNo scorelinux-docTuxCarenfc: digital: clamp SENSF_RES length to the destination buffer7.7 Highlinux-docTuxCarenfc: fdp: bound the device-reported read length and fix an skb leak5.4 Mediumlinux-docTuxCarenfc: microread: validate target discovery payload lengths6.9 Mediumlinux-docTuxCarenfc: llcp: bound the connect_sn TLV walk to the skb7.1 Highlinux-docTuxCarenfc: llcp: reject PDUs shorter than the LLCP header7.1 Highlinux-docTuxCarenfc: pn533: purge fragmented skbs during cleanup1.0 Lowlinux-docTuxCarenfc: nci: add data_len bound checks to activation parameter extractors6.0 Mediumlinux-docTuxCarenfc: nci: fix out-of-bounds write in nci_target_auto_activated()7.0 Highlinux-docTuxCarenfc: nci: fix uninit-value in the RF discover/activated NTF handlersNo scorelinux-docTuxCareipv4: reject undersized MTUs in ip_do_fragment()6.8 Mediumlinux-docTuxCarenvmet-fc: fix invalid free in LS IOD error pathNo scorelinux-docTuxCarenvmet-tcp: bound SGL data length before allocating command buffers8.7 Highlinux-docTuxCarenvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations8.7 Highlinux-docTuxCarefbdev: Wrap user-invoked calls to fb_set_var() in helper9.8 Criticallinux-docTuxCarefbdev: serialize mode sysfs access with lock_fb_info()No scorelinux-docTuxCareHID: magicmouse: prevent unbounded recursion in magicmouse_raw_event()5.1 Mediumlinux-docTuxCareHID: magicmouse: do not keep a stale msc->input if no input is claimed5.4 Mediumlinux-docTuxCareHID: core: fix OOB read of field->usage in hid_set_field()2.4 Lowlinux-docTuxCareHID: sensor: custom: Fix use-after-free in enable_sensorNo scorelinux-docTuxCareHID: uclogic: fix use-after-free of inrange_timer on remove5.4 Mediumlinux-docTuxCareHID: hyperv: validate initial device info boundsNo scorelinux-docTuxCareBluetooth: hci_event: fix LE list UAF on resetNo scorelinux-docTuxCareselinux: reject a class permission count below its inherited commonNo scorelinux-docTuxCareselinux: reject a permission value exceeding the class permission countNo scorelinux-docTuxCareInput: synaptics-rmi4 - fix F55 transmitter electrode count typo7.8 Highlinux-docTuxCareInput: psxpad-spi - set driver data before use8.4 Highlinux-docTuxCaredrm/amdkfd: Add bounds check for CRAT subtype length8.0 Highlinux-docTuxCareASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlersNo scorelinux-docTuxCareaf_packet: Don't send zero-byte data in tpacket_snd().4.8 Mediumlinux-docTuxCarebpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie7.3 Highlinux-docTuxCareserial: amba-pl011: synchronize DMA teardown7.8 Highlinux-docTuxCarenet: remove WARN_ON_ONCE() from sk_mc_loop()0.0 Nonelinux-docTuxCareata: pata_sl82c105: fix bridge revision use-after-free7.8 Highlinux-docTuxCarenet: remove CAP_SYS_RAWIO zero-padding in dev_validate_header7.8 Highlinux-docTuxCareipvs: do not propagate one-packet flag to synced conns9.8 Criticallinux-docTuxCarevxlan: re-fetch eth header after route_shortcircuit()9.8 Criticallinux-docTuxCareDrivers: hv: vmbus: use generic driver_override infrastructureNo scorelinux-docTuxCareperf sched: Fix register_pid() overflow, strcpy, and BUG_ON9.3 Criticallinux-docTuxCarechar: tlclk: fix use-after-free in tlclk_cleanup()7.8 High- Show moreLoading…