linux-headers-5.4.0-237 vulnerabilities (TuxCare)
134 vulnerabilities.
-
linux-headers-5.4.0-237TuxCare xfrm: Fix dev use-after-free in xfrm async resumption 9.8 Critical -
linux-headers-5.4.0-237TuxCare NFSv4: include MAY_WRITE in open permission mask for O_TRUNC 7.1 High -
linux-headers-5.4.0-237TuxCare fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() 8.8 High -
linux-headers-5.4.0-237TuxCare Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count 7.8 High -
linux-headers-5.4.0-237TuxCare Input: goodix - clamp the device-reported contact count 7.8 High -
linux-headers-5.4.0-237TuxCare Input: iforce - bound the device-reported force-feedback effect index 7.8 High -
linux-headers-5.4.0-237TuxCare Input: touchwin - reset the packet index on every complete packet 7.8 High -
linux-headers-5.4.0-237TuxCare Input: mms114 - reject an oversized device packet size 7.8 High -
linux-headers-5.4.0-237TuxCare RDMA/siw: bound Read Response placement to the RREAD length 9.8 Critical -
linux-headers-5.4.0-237TuxCare fuse: re-lock request before returning from fuse_ref_folio() 7.8 High -
linux-headers-5.4.0-237TuxCare i2c: stub: Reject I2C block transfers with invalid length 7.8 High -
linux-headers-5.4.0-237TuxCare netfilter: ipset: fix race between dump and ip_set_list resize 7.8 High -
linux-headers-5.4.0-237TuxCare net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() 7.8 High -
linux-headers-5.4.0-237TuxCare af_unix: Fix UAF read of tail->len in unix_stream_data_wait() 8.8 High -
linux-headers-5.4.0-237TuxCare batman-adv: tp_meter: directly shut down timer on cleanup 8.8 High -
linux-headers-5.4.0-237TuxCare batman-adv: tt: fix TOCTOU race for reported vlans 9.8 Critical -
linux-headers-5.4.0-237TuxCare xfs: resample the data fork mapping after cycling ILOCK 7.8 High -
linux-headers-5.4.0-237TuxCare drm/amd/display: Use krealloc_array() in dal_vector_reserve() 7.0 High -
linux-headers-5.4.0-237TuxCare ipv6: mcast: Fix use-after-free when processing MLD queries 8.8 High -
linux-headers-5.4.0-237TuxCare ipvs: clear the svc scheduler ptr early on edit 7.8 High -
linux-headers-5.4.0-237TuxCare netfilter: conntrack_irc: fix possible out-of-bounds read 8.2 High -
linux-headers-5.4.0-237TuxCare l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl() 7.8 High -
linux-headers-5.4.0-237TuxCare Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() 8.0 High -
linux-headers-5.4.0-237TuxCare Bluetooth: RFCOMM: validate skb length in MCC handlers 8.1 High -
linux-headers-5.4.0-237TuxCare Bluetooth: bnep: reject short frames before parsing 7.1 High -
linux-headers-5.4.0-237TuxCare sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing 9.8 Critical -
linux-headers-5.4.0-237TuxCare xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() 7.8 High -
linux-headers-5.4.0-237TuxCare net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list 8.7 High -
linux-headers-5.4.0-237TuxCare ipv6: sit: reload inner IPv6 header after GSO offloads 9.8 Critical -
linux-headers-5.4.0-237TuxCare sctp: validate embedded INIT chunk and address list lengths in cookie 9.1 Critical -
linux-headers-5.4.0-237TuxCare net: guard timestamp cmsgs to real error queue skbs 7.1 High -
linux-headers-5.4.0-237TuxCare netfilter: nft_tunnel: fix use-after-free on object destroy 7.8 High -
linux-headers-5.4.0-237TuxCare RDMA/srp: bound SRP_RSP sense copy by the received length 9.1 Critical -
linux-headers-5.4.0-237TuxCare RDMA/umem: Fix truncation for block sizes >= 4G 7.8 High -
linux-headers-5.4.0-237TuxCare netfilter: require Ethernet MAC header before using eth_hdr() 9.4 Critical -
linux-headers-5.4.0-237TuxCare PCI: use generic driver_override infrastructure 7.8 High -
linux-headers-5.4.0-237TuxCare wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet 7.8 High -
linux-headers-5.4.0-237TuxCare bpf: Fix use-after-free in offloaded map/prog info fill 7.8 High -
linux-headers-5.4.0-237TuxCare Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER 8.8 High -
linux-headers-5.4.0-237TuxCare greybus: raw: fix use-after-free on cdev close 7.8 High -
linux-headers-5.4.0-237TuxCare greybus: raw: fix use-after-free if write is called after disconnect 7.8 High -
linux-headers-5.4.0-237TuxCare crypto: ccp - copy IV using skcipher ivsize 7.8 High -
linux-headers-5.4.0-237TuxCare net/sched: taprio: fix use-after-free in advance_sched() on schedule switch 7.8 High -
linux-headers-5.4.0-237TuxCare ice: fix double-free of tx_buf skb 7.8 High -
linux-headers-5.4.0-237TuxCare ipv6: fix possible UAF in icmpv6_rcv() 9.8 Critical -
linux-headers-5.4.0-237TuxCare netfilter: conntrack: remove sprintf usage 9.8 Critical -
linux-headers-5.4.0-237TuxCare tipc: fix double-free in tipc_buf_append() 9.8 Critical -
linux-headers-5.4.0-237TuxCare netfilter: nf_conntrack_sip: don't use simple_strtoul 9.8 Critical -
linux-headers-5.4.0-237TuxCare libceph: Fix potential null-ptr-deref in decode_choose_args() 7.5 High -
linux-headers-5.4.0-237TuxCare libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() 7.5 High - Show olderLoading…