linux-doc vulnerabilities (TuxCare)
2,900 vulnerabilities.
linux-docTuxCareALSA: usb-audio: caiaq: validate EP1 reply lengthsNo scorelinux-docTuxCarewifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphersNo scorelinux-docTuxCarewifi: libipw: fix key index receive bound checksNo scorelinux-docTuxCarewifi: rsi: validate beacon length before fixed buffer copyNo scorelinux-docTuxCarewifi: iwlwifi: mvm: validate sta_id in BA window status notif8.8 Highlinux-docTuxCarewifi: iwlwifi: mvm: fix an off-by-1 boundary checkNo scorelinux-docTuxCareblk-cgroup: fix leaks and online flag on radix_tree_insert failureNo scorelinux-docTuxCaresmb/client: flush dirty data before punching a hole4.8 Mediumlinux-docTuxCarewifi: iwlwifi: mvm: fix a possible underflow7.7 Highlinux-docTuxCarewifi: iwlwifi: mvm: add a check on the tid coming from the firmware6.0 Mediumlinux-docTuxCarewifi: iwlwifi: bound aligned TLV advance in FW parserNo scorelinux-docTuxCaresmb: client: bound dirent name against end of SMB response in cifs_filldir8.1 Highlinux-docTuxCarecifs: validate idmap key payload lengthNo scorelinux-docTuxCarewifi: cfg80211: validate IEs in cfg80211_wext_siwgenie()No scorelinux-docTuxCareBluetooth: RFCOMM: validate skb length in rfcomm_recv_frameNo scorelinux-docTuxCarevhost-scsi: flush backend after device ioctls7.8 Highlinux-docTuxCarescsi: core: Do not block on tag allocation in scsi_eh_lock_door()5.7 Mediumlinux-docTuxCarei2c: smbus: reject oversized block transfers in the common path7.8 Highlinux-docTuxCarenet: appletalk: fix NULL pointer dereference in aarp_send_ddp()No scorelinux-docTuxCaregreybus: audio: bound the topology section sizes against the fetched size8.8 Highlinux-docTuxCareext4: skip extra isize expansion during mount to prevent deadlockNo scorelinux-docTuxCareRDMA/efa: Fix PBL chunk length computationNo scorelinux-docTuxCaremd/raid5-ppl: fix use-after-free in ppl_do_flush()7.8 Highlinux-docTuxCarearm64: mm: Fix the lockless page-table walk in show_pte()No scorelinux-docTuxCarelockd: fix swapped arguments in nlmsvc_match_ip()No scorelinux-docTuxCareipv6: use RCU iterator to dump route exceptionsNo scorelinux-docTuxCareof: fix out-of-bounds read in of_alias_scan() stem parserNo scorelinux-docTuxCarePCI/proc: Use file_ns_capable() when checking config space read accessNo scorelinux-docTuxCarebatman-adv: dat: atomically update mac addressesNo scorelinux-docTuxCarebatman-adv: bla: avoid CRC corruption due to parallel claim add7.1 Highlinux-docTuxCarei3c: master: Fix recursive locking during device registrationNo scorelinux-docTuxCarei3c: master: Fix use-after-free of master->thisNo scorelinux-docTuxCarei3c: master: Do not treat master device as a duplicate target7.0 Highlinux-docTuxCarenvdimm: virtio_pmem: refcount requests for token lifetime8.4 Highlinux-docTuxCaredrm/v3d: Clear queue->active_job when v3d_fence_create() fails7.8 Highlinux-docTuxCaresmack: fix incorrect task context in smack_msg_queue_msgrcvNo scorelinux-docTuxCareHID: core: quiesce input in hid_hw_stop() to prevent use-after-free8.8 Highlinux-docTuxCareHID: roccat: bound device-supplied profile indexNo scorelinux-docTuxCaredrm/lima: call drm_mm_init() with a valid allocation rangeNo scorelinux-docTuxCaredrm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read5.1 Mediumlinux-docTuxCaredrm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup7.1 Highlinux-docTuxCaredrm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup7.3 Highlinux-docTuxCaredrm/amd/display: Fix dangling pointer in CRTC reset function7.8 Highlinux-docTuxCaremm/mm_init: handle alloc_percpu failure in free_area_init_core_hotplugNo scorelinux-docTuxCaredmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers7.8 Highlinux-docTuxCarehwrng: core - fix rng list on registration errorNo scorelinux-docTuxCarecrypto: atmel-ecc - reject hardware ECDH without a public keyNo scorelinux-docTuxCarecrypto: atmel-sha204a - fix heap info leak on I2C transfer failureNo scorelinux-docTuxCarenvmet-rdma: fix response resource leak on queue teardown7.5 Highlinux-docTuxCareusb: gadget: r8a66597: avoid double free of ep0_req in probe error pathNo score- Show moreLoading…