linux-headers-5.4.0-239 vulnerabilities (TuxCare)
396 vulnerabilities.
linux-headers-5.4.0-239TuxCarescsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation8.4 Highlinux-headers-5.4.0-239TuxCarescsi: qla2xxx: Fix cs84xx use-after-free on host teardown7.8 Highlinux-headers-5.4.0-239TuxCarescsi: qla2xxx: Don't query firmware state while chip is downNo scorelinux-headers-5.4.0-239TuxCarescsi: qla2xxx: Quiesce response IRQ before freeing request queue8.1 Highlinux-headers-5.4.0-239TuxCarescsi: qla2xxx: Avoid double completion in async IOCB timeout9.8 Criticallinux-headers-5.4.0-239TuxCarescsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read9.1 Criticallinux-headers-5.4.0-239TuxCarescsi: qla2xxx: Zero-init bsg stack buffers to avoid info leakNo scorelinux-headers-5.4.0-239TuxCaref2fs: validate MOVE_RANGE destination size7.1 Highlinux-headers-5.4.0-239TuxCaref2fs: limit recovery filename logging to stored length7.1 Highlinux-headers-5.4.0-239TuxCaredrm: fix race between partial drm_dev_register() failure and ioctl7.8 Highlinux-headers-5.4.0-239TuxCaredrm/amd/display: avoid divide-by-zero in __is_lut_linear()6.8 Mediumlinux-headers-5.4.0-239TuxCaredrm/amdgpu: force complete the KIQ ring fences on reset6.8 Mediumlinux-headers-5.4.0-239TuxCareapparmor: fix cred UAF caused by begin_current_label_crit_section()7.8 Highlinux-headers-5.4.0-239TuxCareapparmor: fix out-of-bounds write when null terminating a label vec7.8 Highlinux-headers-5.4.0-239TuxCareserial: imx: serialize imx_uart_ports[] lifetimeNo scorelinux-headers-5.4.0-239TuxCarezram: fix out-of-bounds access in read_block_state()No scorelinux-headers-5.4.0-239TuxCarezram: fix out-of-bounds access in writeback_store()No scorelinux-headers-5.4.0-239TuxCarenfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown9.8 Criticallinux-headers-5.4.0-239TuxCarenfsd: validate symlink target length in NFSv4 CREATE7.5 Highlinux-headers-5.4.0-239TuxCarenfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops5.3 Mediumlinux-headers-5.4.0-239TuxCareNFSD: Prevent client use-after-free during delegation revoke9.8 Criticallinux-headers-5.4.0-239TuxCarelibceph: reject buckets with mismatched CRUSH ids9.8 Criticallinux-headers-5.4.0-239TuxCareceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock9.8 Criticallinux-headers-5.4.0-239TuxCaresmb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T29.8 Criticallinux-headers-5.4.0-239TuxCaresmb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()9.8 Criticallinux-headers-5.4.0-239TuxCaredm raid1: reserve space for NUL-terminator in build_constructor_string()No scorelinux-headers-5.4.0-239TuxCaredm array: validate array block headers on read7.8 Highlinux-headers-5.4.0-239TuxCareBluetooth: RFCOMM: serialize security confirmation handling8.8 Highlinux-headers-5.4.0-239TuxCarelibnvdimm/labels: Prevent integer overflow in __nd_label_validate()7.8 Highlinux-headers-5.4.0-239TuxCarempls: reload header after pskb_may_pull()9.8 Criticallinux-headers-5.4.0-239TuxCarenouveau/gem: reserve the bo in the info ioctl around the vma lookup7.8 Highlinux-headers-5.4.0-239TuxCareSUNRPC: svcauth_gss: enforce krb5 token minimum length9.8 Criticallinux-headers-5.4.0-239TuxCaresunrpc: route to a populated pool in svc_pool_for_cpu()7.5 Highlinux-headers-5.4.0-239TuxCareSUNRPC: always drain cache_cleaner before destroying a cache_detail7.8 Highlinux-headers-5.4.0-239TuxCareSUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v29.1 Criticallinux-headers-5.4.0-239TuxCaresvcrdma: Reject connection when transport allocation fails8.2 Highlinux-headers-5.4.0-239TuxCaresvcrdma: Reject Read lists that exceed the page budget7.5 Highlinux-headers-5.4.0-239TuxCaresvcrdma: Use svc_xprt_put to free listener on create failure4.6 Mediumlinux-headers-5.4.0-239TuxCareregulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer8.4 Highlinux-headers-5.4.0-239TuxCareocfs2: bound namelen in dlm_migrate_request_handler9.8 Criticallinux-headers-5.4.0-239TuxCareocfs2: validate lengths in dlm_mig_lockres_handler9.8 Criticallinux-headers-5.4.0-239TuxCareocfs2: validate directory-index entry counts when reading metadata9.8 Criticallinux-headers-5.4.0-239TuxCareopenvswitch: Fix CT limit teardown use-after-free7.8 Highlinux-headers-5.4.0-239TuxCareopenvswitch: only skb_tx_error() a packet we are about to drop7.8 Highlinux-headers-5.4.0-239TuxCarelockd: fix NULL dereference on lockowner allocation failure5.7 Mediumlinux-headers-5.4.0-239TuxCarenvme-tcp: fix host memory disclosure on R2T for a read command7.5 Highlinux-headers-5.4.0-239TuxCarenvme-tcp: reject a read that transferred too few bytes7.5 Highlinux-headers-5.4.0-239TuxCaresctp: drop a chunk if its transport was removed9.8 Criticallinux-headers-5.4.0-239TuxCaresctp: fix NULL deref on untransmitted RECONF completion7.5 Highlinux-headers-5.4.0-239TuxCaresctp: fix stream->outcnt underflow on duplicate RECONF responses7.5 High- Show moreLoading…