linux-headers-4.15.0-266-lowlatency vulnerabilities (TuxCare)
277 vulnerabilities.
linux-headers-4.15.0-266-lowlatencyTuxCareppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF7.8 Highlinux-headers-4.15.0-266-lowlatencyTuxCarewifi: at76c50x-usb: avoid length underflow in at76_guess_freq()8.1 Highlinux-headers-4.15.0-266-lowlatencyTuxCareusb: gadget: f_tcm: synchronize delayed set_alt with teardown5.4 Mediumlinux-headers-4.15.0-266-lowlatencyTuxCarewatchdog: pretimeout: Fix UAF in watchdog_unregister_governor()9.8 Criticallinux-headers-4.15.0-266-lowlatencyTuxCarewifi: ath6kl: fix use-after-free in aggr_reset_state()8.8 Highlinux-headers-4.15.0-266-lowlatencyTuxCarestaging: rtl8723bs: fix OOB reads in rtw_get_wps_ie()7.1 Highlinux-headers-4.15.0-266-lowlatencyTuxCareceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()9.8 Criticallinux-headers-4.15.0-266-lowlatencyTuxCarelibceph: Reject monmaps advertising zero monitors7.5 Highlinux-headers-4.15.0-266-lowlatencyTuxCaregeneve: require CAP_NET_ADMIN in the device netns for changelink8.8 Highlinux-headers-4.15.0-266-lowlatencyTuxCarepppoe: reload header pointer after dev_hard_header()7.8 Highlinux-headers-4.15.0-266-lowlatencyTuxCaredrm/amdgpu/vce: fix integer overflow in image size8.8 Highlinux-headers-4.15.0-266-lowlatencyTuxCareusb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown7.8 Highlinux-headers-4.15.0-266-lowlatencyTuxCareRDMA/rxe: Fix a use-after-free problem in rxe_mmap7.8 Highlinux-headers-4.15.0-266-lowlatencyTuxCareKVM: x86: wean fast IN from emulator_pio_inNo scorelinux-headers-4.15.0-266-lowlatencyTuxCareBluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()8.8 Highlinux-headers-4.15.0-266-lowlatencyTuxCarenet: qualcomm: rmnet: validate MAP frame length before ingress parsing7.3 Highlinux-headers-4.15.0-266-lowlatencyTuxCareusb: gadget: function: rndis: add length check for header5.5 Mediumlinux-headers-4.15.0-266-lowlatencyTuxCareALSA: firewire: isight: bound the sample count to the packet payload5.4 Mediumlinux-headers-4.15.0-266-lowlatencyTuxCareBluetooth: btusb: fix use-after-free on marvell probe failure7.8 Highlinux-headers-4.15.0-266-lowlatencyTuxCare6lowpan: fix NHC entry use-after-free on error path7.1 Highlinux-headers-4.15.0-266-lowlatencyTuxCareipv4: igmp: remove multicast group from hash table on device destruction7.8 Highlinux-headers-4.15.0-266-lowlatencyTuxCarecpufreq: pcc: fix use-after-free and double free in _OSC evaluation7.8 Highlinux-headers-4.15.0-266-lowlatencyTuxCarenet: usb: kalmia: bound RX frame length in kalmia_rx_fixup()5.5 Mediumlinux-headers-4.15.0-266-lowlatencyTuxCareUSB: ldusb: fix use-after-free on disconnect race7.8 Highlinux-headers-4.15.0-266-lowlatencyTuxCareudf: validate VAT header length against the VAT inode size7.1 Highlinux-headers-4.15.0-266-lowlatencyTuxCareudf: validate sparing table length as an entry count, not a byte count7.8 Highlinux-headers-4.15.0-266-lowlatencyTuxCarepartitions: aix: bound the pp_count scan to the ppe array7.1 Highlinux-headers-4.15.0-266-lowlatencyTuxCareInput: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size7.1 Highlinux-headers-4.15.0-266-lowlatencyTuxCarenfc: llcp: Fix use-after-free in llcp_sock_release()7.8 Highlinux-headers-4.15.0-266-lowlatencyTuxCarenfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc()8.8 Highlinux-headers-4.15.0-266-lowlatencyTuxCarexfrm: Check for underflow in xfrm_state_mtu7.8 Highlinux-headers-4.15.0-266-lowlatencyTuxCarenet/sched: fix packet loop on netem when duplicate is on5.5 Mediumlinux-headers-4.15.0-266-lowlatencyTuxCareUSB: serial: safe_serial: fix memory corruption with small endpoint7.8 Highlinux-headers-4.15.0-266-lowlatencyTuxCarehpfs: fix a crash if hpfs_map_dnode_bitmap fails7.8 Highlinux-headers-4.15.0-266-lowlatencyTuxCareiio: gyro: itg3200: fix i2c read into the wrong stack location7.1 Highlinux-headers-4.15.0-266-lowlatencyTuxCareiio: gyro: adis16260: fix division by zero in write_raw5.5 Mediumlinux-headers-4.15.0-266-lowlatencyTuxCareusb: dwc2: Fix use after free in debug code7.8 Highlinux-headers-4.15.0-266-lowlatencyTuxCareipv6: exthdrs: refresh nh after handling HAO option9.8 Criticallinux-headers-4.15.0-266-lowlatencyTuxCareip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().8.8 Highlinux-headers-4.15.0-266-lowlatencyTuxCareHID: wacom: Fix OOB write in wacom_hid_set_device_mode()8.8 Highlinux-headers-4.15.0-266-lowlatencyTuxCarenfc: hci: fix out-of-bounds read in HCP header parsing8.8 Highlinux-headers-4.15.0-266-lowlatencyTuxCareInput: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem5.5 Mediumlinux-headers-4.15.0-266-lowlatencyTuxCareusbip: vudc: Fix use after free bug in vudc_remove due to race condition7.8 Highlinux-headers-4.15.0-266-lowlatencyTuxCareusb: usbtmc: check URB actual_length for interrupt-IN notifications7.1 Highlinux-headers-4.15.0-266-lowlatencyTuxCarethunderbolt: property: Reject u32 wrap in tb_property_entry_valid()8.1 Highlinux-headers-4.15.0-266-lowlatencyTuxCarethunderbolt: property: Reject dir_len < 4 to prevent size_t underflow5.1 Mediumlinux-headers-4.15.0-266-lowlatencyTuxCarethunderbolt: property: Cap recursion depth in __tb_property_parse_dir()5.5 Mediumlinux-headers-4.15.0-266-lowlatencyTuxCarescsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()9.8 Criticallinux-headers-4.15.0-266-lowlatencyTuxCarefbdev: fix use-after-free in store_modes()7.8 Highlinux-headers-4.15.0-266-lowlatencyTuxCaref2fs: validate ACL entry sizes in f2fs_acl_from_disk()7.8 High- Show moreLoading…