linux-headers-4.4.0-287-generic vulnerabilities (TuxCare)
66 vulnerabilities.
linux-headers-4.4.0-287-genericTuxCareproc: protect ptrace_may_access() with exec_update_lock (FD links)7.8 Highlinux-headers-4.4.0-287-genericTuxCareipv6: mcast: Fix use-after-free when processing MLD queries8.8 Highlinux-headers-4.4.0-287-genericTuxCarenetfilter: conntrack_irc: fix possible out-of-bounds read8.2 Highlinux-headers-4.4.0-287-genericTuxCarenetfilter: bridge: make ebt_snat ARP rewrite writable8.8 Highlinux-headers-4.4.0-287-genericTuxCareBluetooth: RFCOMM: validate skb length in MCC handlers8.1 Highlinux-headers-4.4.0-287-genericTuxCareBluetooth: bnep: reject short frames before parsing7.1 Highlinux-headers-4.4.0-287-genericTuxCareipv6: sit: reload inner IPv6 header after GSO offloads9.8 Criticallinux-headers-4.4.0-287-genericTuxCaresctp: validate embedded INIT chunk and address list lengths in cookie9.1 Criticallinux-headers-4.4.0-287-genericTuxCareRDMA/srp: bound SRP_RSP sense copy by the received length9.1 Criticallinux-headers-4.4.0-287-genericTuxCarenetfilter: require Ethernet MAC header before using eth_hdr()9.4 Criticallinux-headers-4.4.0-287-genericTuxCarefs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START7.8 Highlinux-headers-4.4.0-287-genericTuxCarewifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet7.8 Highlinux-headers-4.4.0-287-genericTuxCarenet: pull headers in qdisc_pkt_len_segs_init()8.4 Highlinux-headers-4.4.0-287-genericTuxCareocfs2/dlm: validate qr_numregions in dlm_match_regions()9.1 Criticallinux-headers-4.4.0-287-genericTuxCarecrypto: ccp - copy IV using skcipher ivsize7.8 Highlinux-headers-4.4.0-287-genericTuxCareipv6: fix possible UAF in icmpv6_rcv()9.8 Criticallinux-headers-4.4.0-287-genericTuxCarenetfilter: conntrack: remove sprintf usage9.8 Criticallinux-headers-4.4.0-287-genericTuxCarenetfilter: nfnetlink_osf: fix potential NULL dereference in ttl check7.5 Highlinux-headers-4.4.0-287-genericTuxCarenetfilter: nf_conntrack_sip: don't use simple_strtoul9.8 Criticallinux-headers-4.4.0-287-genericTuxCarebatman-adv: tvlv: reject oversized TVLV packets8.8 Highlinux-headers-4.4.0-287-genericTuxCarenetfilter: xt_policy: fix strict mode inbound policy matching8.3 Highlinux-headers-4.4.0-287-genericTuxCarepower: supply: rt9455: Fix use-after-free in power_supply_changed()8.4 Highlinux-headers-4.4.0-287-genericTuxCareprocfs: fix missing RCU protection when reading real_parent in do_task_stat()7.8 Highlinux-headers-4.4.0-287-genericTuxCarebatman-adv: bla: prevent use-after-free when deleting claims8.8 Highlinux-headers-4.4.0-287-genericTuxCarescsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()7.1 Highlinux-headers-4.4.0-287-genericTuxCarexfrm: defensively unhash xfrm_state lists in __xfrm_state_delete7.8 Highlinux-headers-4.4.0-287-genericTuxCareALSA: aloop: Fix peer runtime UAF during format-change stop7.8 Highlinux-headers-4.4.0-287-genericTuxCaredrm/nouveau: fix u32 overflow in pushbuf reloc bounds check7.8 Highlinux-headers-4.4.0-287-genericTuxCarebonding: alb: fix UAF in rlb_arp_recv during bond up/down7.8 Highlinux-headers-4.4.0-287-genericTuxCareext4: fix e4b bitmap inconsistency reports7.8 Highlinux-headers-4.4.0-287-genericTuxCarecrypto: pcrypt - Fix handling of MAY_BACKLOG requests9.8 Criticallinux-headers-4.4.0-287-genericTuxCareserial: caif: hold tty->link reference in ldisc_open and ser_release7.8 Highlinux-headers-4.4.0-287-genericTuxCareBluetooth: SMP: force responder MITM requirements before building the pairing response8.8 Highlinux-headers-4.4.0-287-genericTuxCareALSA: usb-audio: Add sanity check for OOB writes at silencing7.8 Highlinux-headers-4.4.0-287-genericTuxCarenetfilter: xt_tcpmss: check remaining length before reading optlen8.2 Highlinux-headers-4.4.0-287-genericTuxCarenetfilter: ctnetlink: ensure safe access to master conntrack7.8 Highlinux-headers-4.4.0-287-genericTuxCarenet: af_key: zero aligned sockaddr tail in PF_KEY exports5.5 Mediumlinux-headers-4.4.0-287-genericTuxCareocfs2: validate inline data i_size during inode read7.8 Highlinux-headers-4.4.0-287-genericTuxCareocfs2: fix out-of-bounds write in ocfs2_write_end_inline7.8 Highlinux-headers-4.4.0-287-genericTuxCareatm: lec: fix use-after-free in sock_def_readable()7.0 Highlinux-headers-4.4.0-287-genericTuxCareip6_tunnel: clear skb2->cb[] in ip4ip6_err()9.8 Criticallinux-headers-4.4.0-287-genericTuxCarexen/privcmd: fix double free via VMA splitting7.8 Highlinux-headers-4.4.0-287-genericTuxCarenetfilter: ip6t_eui64: reject invalid MAC header for all packets9.4 Criticallinux-headers-4.4.0-287-genericTuxCarebatman-adv: avoid OGM aggregation when skb tailroom is insufficient7.8 Highlinux-headers-4.4.0-287-genericTuxCareusbip: validate number_of_packets in usbip_pack_ret_submit()9.8 Criticallinux-headers-4.4.0-287-genericTuxCareocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY7.8 Highlinux-headers-4.4.0-287-genericTuxCarebcache: fix cached_dev.sb_bio use-after-free and crash7.8 Highlinux-headers-4.4.0-287-genericTuxCareBluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold8.8 Highlinux-headers-4.4.0-287-genericTuxCarenet: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check7.8 Highlinux-headers-4.4.0-287-genericTuxCareapparmor: validate DFA start states are in bounds in unpack_pdb7.1 High- Show olderLoading…