linux-headers-5.4.0-237-lowlatency vulnerabilities (TuxCare)
134 vulnerabilities.
linux-headers-5.4.0-237-lowlatencyTuxCarexfrm: Fix dev use-after-free in xfrm async resumption9.8 Criticallinux-headers-5.4.0-237-lowlatencyTuxCareNFSv4: include MAY_WRITE in open permission mask for O_TRUNC7.1 Highlinux-headers-5.4.0-237-lowlatencyTuxCarefpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()8.8 Highlinux-headers-5.4.0-237-lowlatencyTuxCareInput: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count7.8 Highlinux-headers-5.4.0-237-lowlatencyTuxCareInput: goodix - clamp the device-reported contact count7.8 Highlinux-headers-5.4.0-237-lowlatencyTuxCareInput: iforce - bound the device-reported force-feedback effect index7.8 Highlinux-headers-5.4.0-237-lowlatencyTuxCareInput: touchwin - reset the packet index on every complete packet7.8 Highlinux-headers-5.4.0-237-lowlatencyTuxCareInput: mms114 - reject an oversized device packet size7.8 Highlinux-headers-5.4.0-237-lowlatencyTuxCareRDMA/siw: bound Read Response placement to the RREAD length9.8 Criticallinux-headers-5.4.0-237-lowlatencyTuxCarefuse: re-lock request before returning from fuse_ref_folio()7.8 Highlinux-headers-5.4.0-237-lowlatencyTuxCarei2c: stub: Reject I2C block transfers with invalid length7.8 Highlinux-headers-5.4.0-237-lowlatencyTuxCarenetfilter: ipset: fix race between dump and ip_set_list resize7.8 Highlinux-headers-5.4.0-237-lowlatencyTuxCarenet: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()7.8 Highlinux-headers-5.4.0-237-lowlatencyTuxCareaf_unix: Fix UAF read of tail->len in unix_stream_data_wait()8.8 Highlinux-headers-5.4.0-237-lowlatencyTuxCarebatman-adv: tp_meter: directly shut down timer on cleanup8.8 Highlinux-headers-5.4.0-237-lowlatencyTuxCarebatman-adv: tt: fix TOCTOU race for reported vlans9.8 Criticallinux-headers-5.4.0-237-lowlatencyTuxCarexfs: resample the data fork mapping after cycling ILOCK7.8 Highlinux-headers-5.4.0-237-lowlatencyTuxCaredrm/amd/display: Use krealloc_array() in dal_vector_reserve()7.0 Highlinux-headers-5.4.0-237-lowlatencyTuxCareipv6: mcast: Fix use-after-free when processing MLD queries8.8 Highlinux-headers-5.4.0-237-lowlatencyTuxCareipvs: clear the svc scheduler ptr early on edit7.8 Highlinux-headers-5.4.0-237-lowlatencyTuxCarenetfilter: conntrack_irc: fix possible out-of-bounds read8.2 Highlinux-headers-5.4.0-237-lowlatencyTuxCarel2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()7.8 Highlinux-headers-5.4.0-237-lowlatencyTuxCareBluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()8.0 Highlinux-headers-5.4.0-237-lowlatencyTuxCareBluetooth: RFCOMM: validate skb length in MCC handlers8.1 Highlinux-headers-5.4.0-237-lowlatencyTuxCareBluetooth: bnep: reject short frames before parsing7.1 Highlinux-headers-5.4.0-237-lowlatencyTuxCaresctp: validate cached peer INIT chunk length in COOKIE_ECHO processing9.8 Criticallinux-headers-5.4.0-237-lowlatencyTuxCarexfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()7.8 Highlinux-headers-5.4.0-237-lowlatencyTuxCarenet/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list8.7 Highlinux-headers-5.4.0-237-lowlatencyTuxCareipv6: sit: reload inner IPv6 header after GSO offloads9.8 Criticallinux-headers-5.4.0-237-lowlatencyTuxCaresctp: validate embedded INIT chunk and address list lengths in cookie9.1 Criticallinux-headers-5.4.0-237-lowlatencyTuxCarenet: guard timestamp cmsgs to real error queue skbs7.1 Highlinux-headers-5.4.0-237-lowlatencyTuxCarenetfilter: nft_tunnel: fix use-after-free on object destroy7.8 Highlinux-headers-5.4.0-237-lowlatencyTuxCareRDMA/srp: bound SRP_RSP sense copy by the received length9.1 Criticallinux-headers-5.4.0-237-lowlatencyTuxCareRDMA/umem: Fix truncation for block sizes >= 4G7.8 Highlinux-headers-5.4.0-237-lowlatencyTuxCarenetfilter: require Ethernet MAC header before using eth_hdr()9.4 Criticallinux-headers-5.4.0-237-lowlatencyTuxCarePCI: use generic driver_override infrastructure7.8 Highlinux-headers-5.4.0-237-lowlatencyTuxCarewifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet7.8 Highlinux-headers-5.4.0-237-lowlatencyTuxCarebpf: Fix use-after-free in offloaded map/prog info fill7.8 Highlinux-headers-5.4.0-237-lowlatencyTuxCareBluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER8.8 Highlinux-headers-5.4.0-237-lowlatencyTuxCaregreybus: raw: fix use-after-free on cdev close7.8 Highlinux-headers-5.4.0-237-lowlatencyTuxCaregreybus: raw: fix use-after-free if write is called after disconnect7.8 Highlinux-headers-5.4.0-237-lowlatencyTuxCarecrypto: ccp - copy IV using skcipher ivsize7.8 Highlinux-headers-5.4.0-237-lowlatencyTuxCarenet/sched: taprio: fix use-after-free in advance_sched() on schedule switch7.8 Highlinux-headers-5.4.0-237-lowlatencyTuxCareice: fix double-free of tx_buf skb7.8 Highlinux-headers-5.4.0-237-lowlatencyTuxCareipv6: fix possible UAF in icmpv6_rcv()9.8 Criticallinux-headers-5.4.0-237-lowlatencyTuxCarenetfilter: conntrack: remove sprintf usage9.8 Criticallinux-headers-5.4.0-237-lowlatencyTuxCaretipc: fix double-free in tipc_buf_append()9.8 Criticallinux-headers-5.4.0-237-lowlatencyTuxCarenetfilter: nf_conntrack_sip: don't use simple_strtoul9.8 Criticallinux-headers-5.4.0-237-lowlatencyTuxCarelibceph: Fix potential null-ptr-deref in decode_choose_args()7.5 Highlinux-headers-5.4.0-237-lowlatencyTuxCarelibceph: Fix potential out-of-bounds access in __ceph_x_decrypt()7.5 High- Show olderLoading…