linux-image-arm64-signed-template vulnerabilities (TuxCare)
322 vulnerabilities.
linux-image-arm64-signed-templateTuxCaresctp: prevent peer transport count overflow8.8 Highlinux-image-arm64-signed-templateTuxCaredrm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size7.8 Highlinux-image-arm64-signed-templateTuxCaredrm/vmwgfx: validate DRAW_PRIMITIVES header size before division7.8 Highlinux-image-arm64-signed-templateTuxCarebridge: stp: Fix a potential use-after-free when deleting a bridge7.8 Highlinux-image-arm64-signed-templateTuxCarebtrfs: do not trim a device which is not writeableNo scorelinux-image-arm64-signed-templateTuxCarenet: ethernet: arc: emac: quiesce interrupts before requesting IRQ7.0 Highlinux-image-arm64-signed-templateTuxCarecan: esd_usb: kill anchored URBs before freeing netdevs7.8 Highlinux-image-arm64-signed-templateTuxCareusb: gadget: f_midi: cancel pending IN work before freeing the midi object7.8 Highlinux-image-arm64-signed-templateTuxCareRDMA/rxe: Fix a use-after-free problem in rxe_mmap7.8 Highlinux-image-arm64-signed-templateTuxCarexfrm: fix sk_dst_cache double-free in xfrm_user_policy()7.8 Highlinux-image-arm64-signed-templateTuxCarexfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()7.8 Highlinux-image-arm64-signed-templateTuxCarewifi: p54: validate RX frame length in p54_rx_eeprom_readback()5.1 Mediumlinux-image-arm64-signed-templateTuxCarebtrfs: reject free space cache with more entries than pages7.8 Highlinux-image-arm64-signed-templateTuxCaresctp: don't free the ASCONF's own transport in DEL-IP processing9.8 Criticallinux-image-arm64-signed-templateTuxCarerhashtable: clear stale iter->p on table restart7.8 Highlinux-image-arm64-signed-templateTuxCaredrm/edid: fix OOB read in drm_parse_tiled_block()7.1 Highlinux-image-arm64-signed-templateTuxCaretipc: fix use-after-free of the discoverer in tipc_disc_rcv()7.8 Highlinux-image-arm64-signed-templateTuxCarenet/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket9.8 Criticallinux-image-arm64-signed-templateTuxCareusb: gadget: function: rndis: add length check for header5.5 Mediumlinux-image-arm64-signed-templateTuxCareiio: accel: bmc150: clamp the device-reported FIFO frame count5.5 Mediumlinux-image-arm64-signed-templateTuxCareALSA: firewire: isight: bound the sample count to the packet payload5.4 Mediumlinux-image-arm64-signed-templateTuxCareBluetooth: btusb: fix use-after-free on registration failure7.8 Highlinux-image-arm64-signed-templateTuxCaresmb: client: Fix next buffer leak in receive_encrypted_standard()7.8 Highlinux-image-arm64-signed-templateTuxCarewriteback: fix race between cgroup_writeback_umount() and inode_switch_wbs()7.8 Highlinux-image-arm64-signed-templateTuxCarecpufreq: pcc: fix use-after-free and double free in _OSC evaluation7.8 Highlinux-image-arm64-signed-templateTuxCarenfc: llcp: Fix use-after-free in llcp_sock_release()7.8 Highlinux-image-arm64-signed-templateTuxCarexfrm: Check for underflow in xfrm_state_mtu7.8 Highlinux-image-arm64-signed-templateTuxCareALSA: pcm: oss: Fix setup list UAF on proc write error7.8 Highlinux-image-arm64-signed-templateTuxCareusb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes()5.5 Mediumlinux-image-arm64-signed-templateTuxCareipv6: exthdrs: refresh nh after handling HAO option9.8 Criticallinux-image-arm64-signed-templateTuxCaref2fs: bound i_inline_xattr_size for non-inline-xattr inodes8.4 Highlinux-image-arm64-signed-templateTuxCaref2fs: validate ACL entry sizes in f2fs_acl_from_disk()7.8 Highlinux-image-arm64-signed-templateTuxCaref2fs: protect extension_list reading with sb_lock in f2fs_sbi_show()7.1 Highlinux-image-arm64-signed-templateTuxCareipvs: clear the svc scheduler ptr early on edit7.8 Highlinux-image-arm64-signed-templateTuxCarenetfilter: bridge: make ebt_snat ARP rewrite writable8.8 Highlinux-image-arm64-signed-templateTuxCarenet/sched: act_api: use RCU with deferred freeing for action lifecycle7.8 Highlinux-image-arm64-signed-templateTuxCaresctp: validate cached peer INIT chunk length in COOKIE_ECHO processing9.8 Criticallinux-image-arm64-signed-templateTuxCareipv6: sit: reload inner IPv6 header after GSO offloads9.8 Criticallinux-image-arm64-signed-templateTuxCaresctp: validate embedded INIT chunk and address list lengths in cookie9.1 Criticallinux-image-arm64-signed-templateTuxCaremm/huge_memory: update file PMD counter before folio_put()7.8 Highlinux-image-arm64-signed-templateTuxCareRDMA/srp: bound SRP_RSP sense copy by the received length9.1 Criticallinux-image-arm64-signed-templateTuxCaredrm/amd/display: Bound VBIOS record-chain walk loops7.1 Highlinux-image-arm64-signed-templateTuxCaredrm/amd/display: Clamp VBIOS HDMI retimer register count to array size7.8 Highlinux-image-arm64-signed-templateTuxCarefs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START7.8 Highlinux-image-arm64-signed-templateTuxCarenet: pull headers in qdisc_pkt_len_segs_init()8.4 Highlinux-image-arm64-signed-templateTuxCareppp: require CAP_NET_ADMIN in target netns for unattached ioctls8.8 Highlinux-image-arm64-signed-templateTuxCareocfs2: validate bg_bits during freefrag scan7.1 Highlinux-image-arm64-signed-templateTuxCarebpf, arm64: Fix off-by-one in check_imm signed range check7.8 Highlinux-image-arm64-signed-templateTuxCareice: fix double-free of tx_buf skb7.8 Highlinux-image-arm64-signed-templateTuxCarelibceph: Fix potential out-of-bounds access in crush_decode()9.8 Critical- Show moreLoading…