linux-headers-4.4.0-288-generic vulnerabilities (TuxCare)
198 vulnerabilities.
linux-headers-4.4.0-288-genericTuxCarenet: pktgen: fix proc entry use-after-free7.8 Highlinux-headers-4.4.0-288-genericTuxCaredrm/vmwgfx: validate DRAW_PRIMITIVES header size before division7.8 Highlinux-headers-4.4.0-288-genericTuxCarewifi: ath9k: fix OOB access from firmware tx status queue ID8.8 Highlinux-headers-4.4.0-288-genericTuxCareALSA: seq: midi: Serialize output teardown with event_input7.8 Highlinux-headers-4.4.0-288-genericTuxCareconfigfs_lookup(): don't leave ->s_dentry dangling on failure7.8 Highlinux-headers-4.4.0-288-genericTuxCareocfs2: validate fast symlink target during inode read9.8 Criticallinux-headers-4.4.0-288-genericTuxCaretipc: require net admin for TIPCv2 netlink mutators7.8 Highlinux-headers-4.4.0-288-genericTuxCaretipc: fix UAF in tipc_l2_send_msg()9.8 Criticallinux-headers-4.4.0-288-genericTuxCarenfs: use nfsi->rwsem to protect traversal of the file lock list9.8 Criticallinux-headers-4.4.0-288-genericTuxCaresctp: fix err_chunk memory leaks in INIT handling8.7 Highlinux-headers-4.4.0-288-genericTuxCarenet: sungem: fix probe error cleanup7.8 Highlinux-headers-4.4.0-288-genericTuxCaresctp: add INIT verification after cookie unpacking9.8 Criticallinux-headers-4.4.0-288-genericTuxCarebridge: stp: Fix a potential use-after-free when deleting a bridge7.8 Highlinux-headers-4.4.0-288-genericTuxCaresctp: fix addr_wq_timer race in sctp_free_addr_wq()7.8 Highlinux-headers-4.4.0-288-genericTuxCaregue: validate REMCSUM private option length9.8 Criticallinux-headers-4.4.0-288-genericTuxCareipv4: igmp: Fix potential UAF in igmp_gq_start_timer()9.8 Criticallinux-headers-4.4.0-288-genericTuxCareipv6: mcast: Fix potential UAF in MLD delayed work9.8 Criticallinux-headers-4.4.0-288-genericTuxCarebatman-adv: access unicast_ttvn skb->data only after skb realloc9.8 Criticallinux-headers-4.4.0-288-genericTuxCarebatman-adv: tt: prevent TVLV OOB check overflow9.8 Criticallinux-headers-4.4.0-288-genericTuxCaremtd: slram: remove failed entries from the device list7.8 Highlinux-headers-4.4.0-288-genericTuxCarescsi: target: Bound PR-OUT TransportID parsing to the received buffer9.8 Criticallinux-headers-4.4.0-288-genericTuxCarewifi: libertas_tf: fix use-after-free in lbtf_free_adapter()5.4 Mediumlinux-headers-4.4.0-288-genericTuxCaredrbd: reject data replies with an out-of-range payload size9.8 Criticallinux-headers-4.4.0-288-genericTuxCarepowerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access()7.8 Highlinux-headers-4.4.0-288-genericTuxCarewifi: cfg80211: cancel sched scan results work on unregister7.5 Highlinux-headers-4.4.0-288-genericTuxCarenet/iucv: take a reference on the socket found in afiucv_hs_rcv()8.8 Highlinux-headers-4.4.0-288-genericTuxCaresctp: fix auth_hmacs array size in struct sctp_cookie8.1 Highlinux-headers-4.4.0-288-genericTuxCarewifi: at76c50x-usb: avoid length underflow in at76_guess_freq()8.1 Highlinux-headers-4.4.0-288-genericTuxCarewifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request4.1 Mediumlinux-headers-4.4.0-288-genericTuxCareiommu/amd: Wait for completion instead of returning early in iommu_completion_wait()8.8 Highlinux-headers-4.4.0-288-genericTuxCaresctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid7.3 Highlinux-headers-4.4.0-288-genericTuxCareALSA: seq: close a re-opened queue timer in the destructor7.8 Highlinux-headers-4.4.0-288-genericTuxCarewifi: ath6kl: fix OOB access from firmware ADDBA window size8.8 Highlinux-headers-4.4.0-288-genericTuxCarewifi: ath6kl: fix use-after-free in aggr_reset_state()8.8 Highlinux-headers-4.4.0-288-genericTuxCareBluetooth: RFCOMM: Fix session UAF in set_termios7.3 Highlinux-headers-4.4.0-288-genericTuxCareceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()9.8 Criticallinux-headers-4.4.0-288-genericTuxCarelibceph: refresh auth->authorizer_buf{,_len} after authorizer update9.8 Criticallinux-headers-4.4.0-288-genericTuxCarelibceph: Reject monmaps advertising zero monitors7.5 Highlinux-headers-4.4.0-288-genericTuxCarelibceph: remove debugfs files before client teardown7.8 Highlinux-headers-4.4.0-288-genericTuxCarephonet: pep: fix use-after-free in pep_get_sb()9.8 Criticallinux-headers-4.4.0-288-genericTuxCarenet: slip: serialize receive against buffer reallocation7.8 Highlinux-headers-4.4.0-288-genericTuxCarenet/af_iucv: fix NULL deref in afiucv_hs_callback_syn()7.5 Highlinux-headers-4.4.0-288-genericTuxCarenet/iucv: fix use-after-free of a severed iucv_path8.8 Highlinux-headers-4.4.0-288-genericTuxCarepppoe: reload header pointer after dev_hard_header()7.8 Highlinux-headers-4.4.0-288-genericTuxCaredrm/amdgpu/vce: fix integer overflow in image size8.8 Highlinux-headers-4.4.0-288-genericTuxCareKVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplugNo scorelinux-headers-4.4.0-288-genericTuxCareusb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown7.8 Highlinux-headers-4.4.0-288-genericTuxCaredrm/edid: fix OOB read in drm_parse_tiled_block()7.1 Highlinux-headers-4.4.0-288-genericTuxCareusb: gadget: function: rndis: add length check for header5.5 Mediumlinux-headers-4.4.0-288-genericTuxCareiio: accel: bmc150: clamp the device-reported FIFO frame count5.5 Medium- Show moreLoading…