linux-doc vulnerabilities (TuxCare)
2,900 vulnerabilities.
linux-docTuxCareapparmor: fix out-of-bounds write when null terminating a label vec7.8 Highlinux-docTuxCarerapidio: mport_cdev: fix use-after-free in dma_req_free()7.8 Highlinux-docTuxCareserial: imx: serialize imx_uart_ports[] lifetimeNo scorelinux-docTuxCareusb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind()7.8 Highlinux-docTuxCareHID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature8.8 Highlinux-docTuxCaremedia: vicodec: fix out-of-bounds write in FWHT encoder7.8 Highlinux-docTuxCarenilfs2: fix slab-out-of-bounds in nilfs_direct_propagate after truncation7.8 Highlinux-docTuxCareubifs: fix out-of-bounds read in signature length check7.7 Highlinux-docTuxCarezram: fix out-of-bounds access in read_block_state()No scorelinux-docTuxCarezram: fix out-of-bounds access in writeback_store()No scorelinux-docTuxCarenfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown9.8 Criticallinux-docTuxCarenfsd: validate symlink target length in NFSv4 CREATE7.5 Highlinux-docTuxCarenfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget9.8 Criticallinux-docTuxCarenfsd: gate nfs3 setacl by argp->mask9.1 Criticallinux-docTuxCarenfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops5.3 Mediumlinux-docTuxCareNFSD: Prevent client use-after-free during delegation revoke9.8 Criticallinux-docTuxCarelibceph: reject buckets with mismatched CRUSH ids9.8 Criticallinux-docTuxCareceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock9.8 Criticallinux-docTuxCareceph: fix UAF in check_new_map() on session freed during unlock9.8 Criticallinux-docTuxCaresmb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T29.8 Criticallinux-docTuxCaresmb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()9.8 Criticallinux-docTuxCarentfs: verify run length exceeding volume boundary9.8 Criticallinux-docTuxCareecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet7.8 Highlinux-docTuxCaredm raid1: reserve space for NUL-terminator in build_constructor_string()No scorelinux-docTuxCaredm array: validate array block headers on read7.8 Highlinux-docTuxCareBluetooth: RFCOMM: serialize security confirmation handling8.8 Highlinux-docTuxCarelibnvdimm/labels: Prevent integer overflow in __nd_label_validate()7.8 Highlinux-docTuxCarempls: reload header after pskb_may_pull()9.8 Criticallinux-docTuxCarenouveau/gem: reserve the bo in the info ioctl around the vma lookup7.8 Highlinux-docTuxCareparams: fix charp corruption on allocation failureNo scorelinux-docTuxCareSUNRPC: svcauth_gss: enforce krb5 token minimum length9.8 Criticallinux-docTuxCaresunrpc: route to a populated pool in svc_pool_for_cpu()7.5 Highlinux-docTuxCareSUNRPC: always drain cache_cleaner before destroying a cache_detail7.8 Highlinux-docTuxCaresunrpc: defer rq_argp and rq_resp free until after RCU grace period7.8 Highlinux-docTuxCareSUNRPC: harden gss_krb5_unwrap_v2 against short tokens9.8 Criticallinux-docTuxCareSUNRPC: reject duplicate CREDS_VALUE optionsNo scorelinux-docTuxCareSUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v29.1 Criticallinux-docTuxCaresvcrdma: Reject connection when transport allocation fails8.2 Highlinux-docTuxCaresvcrdma: Reject inline replies that overflow the pull-up buffer9.8 Criticallinux-docTuxCaresvcrdma: Reject Read lists that exceed the page budget7.5 Highlinux-docTuxCaresvcrdma: Use svc_xprt_put to free listener on create failure4.6 Mediumlinux-docTuxCareregulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer8.4 Highlinux-docTuxCareocfs2: bound namelen in dlm_migrate_request_handler9.8 Criticallinux-docTuxCareocfs2: validate lengths in dlm_mig_lockres_handler9.8 Criticallinux-docTuxCareocfs2: validate directory-index entry counts when reading metadata9.8 Criticallinux-docTuxCareopenvswitch: Fix CT limit teardown use-after-free7.8 Highlinux-docTuxCareopenvswitch: only skb_tx_error() a packet we are about to drop7.8 Highlinux-docTuxCarelockd: fix NULL dereference on lockowner allocation failure5.7 Mediumlinux-docTuxCarenvme-tcp: fix host memory disclosure on R2T for a read command7.5 Highlinux-docTuxCarenvme-tcp: reject a read that transferred too few bytes7.5 High- Show moreLoading…