linux-image-unsigned-4.15.0-266-generic vulnerabilities (TuxCare)
277 vulnerabilities.
linux-image-unsigned-4.15.0-266-genericTuxCareACPICA: Fix use-after-free in acpi_ds_terminate_control_method()8.4 Highlinux-image-unsigned-4.15.0-266-genericTuxCareACPICA: Add validation for node in acpi_ns_build_normalized_path()7.7 Highlinux-image-unsigned-4.15.0-266-genericTuxCareBluetooth: L2CAP: validate connectionless PSM lengthNo scorelinux-image-unsigned-4.15.0-266-genericTuxCareALSA: usb-audio: caiaq: validate EP1 reply lengthsNo scorelinux-image-unsigned-4.15.0-266-genericTuxCarewifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphersNo scorelinux-image-unsigned-4.15.0-266-genericTuxCarewifi: libipw: fix key index receive bound checksNo scorelinux-image-unsigned-4.15.0-266-genericTuxCarewifi: rsi: validate beacon length before fixed buffer copyNo scorelinux-image-unsigned-4.15.0-266-genericTuxCareBluetooth: RFCOMM: validate skb length in rfcomm_recv_frameNo scorelinux-image-unsigned-4.15.0-266-genericTuxCarevhost-scsi: flush backend after device ioctls7.8 Highlinux-image-unsigned-4.15.0-266-genericTuxCarenet: appletalk: fix NULL pointer dereference in aarp_send_ddp()No scorelinux-image-unsigned-4.15.0-266-genericTuxCaregreybus: audio: bound the topology section sizes against the fetched size8.8 Highlinux-image-unsigned-4.15.0-266-genericTuxCareext4: skip extra isize expansion during mount to prevent deadlockNo scorelinux-image-unsigned-4.15.0-266-genericTuxCareof: fix out-of-bounds read in of_alias_scan() stem parserNo scorelinux-image-unsigned-4.15.0-266-genericTuxCarePCI/proc: Use file_ns_capable() when checking config space read accessNo scorelinux-image-unsigned-4.15.0-266-genericTuxCarenet: skbuff: don't skb_tx_error() the source skb in skb_zerocopy()9.3 Criticallinux-image-unsigned-4.15.0-266-genericTuxCareUSB: gadget: ffs: fix mm lifetime handling7.8 Highlinux-image-unsigned-4.15.0-266-genericTuxCareusb: gadget: f_fs: Fix Use-After-Free in AIO error path7.8 Highlinux-image-unsigned-4.15.0-266-genericTuxCareNFSD: Prevent client use-after-free during close_lru reaping9.8 Criticallinux-image-unsigned-4.15.0-266-genericTuxCareNFSD: Prevent client use-after-free during blocked-lock reaping9.8 Criticallinux-image-unsigned-4.15.0-266-genericTuxCareusb: image: mdc800: change kmalloc() to kzalloc()No scorelinux-image-unsigned-4.15.0-266-genericTuxCareALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()No scorelinux-image-unsigned-4.15.0-266-genericTuxCaremedia: usbtv: keep device alive while ALSA card exists7.8 Highlinux-image-unsigned-4.15.0-266-genericTuxCareusb-storage: ene_ub6250: fix race between scan work and probeNo scorelinux-image-unsigned-4.15.0-266-genericTuxCareusb: storage: realtek_cr: fix use-after-free on disconnect5.4 Mediumlinux-image-unsigned-4.15.0-266-genericTuxCareusb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()No scorelinux-image-unsigned-4.15.0-266-genericTuxCareUSB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()No scorelinux-image-unsigned-4.15.0-266-genericTuxCareusb: gadget: fix null pointer dereference in usb_put_function_instance()No scorelinux-image-unsigned-4.15.0-266-genericTuxCarestaging: rtl8723bs: fix OOB read in rtw_action_frame_parse()7.1 Highlinux-image-unsigned-4.15.0-266-genericTuxCarestaging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie()7.1 Highlinux-image-unsigned-4.15.0-266-genericTuxCarexhci: fix lost bounce buffers on TDs spanning several ring segmentsNo scorelinux-image-unsigned-4.15.0-266-genericTuxCaretracing: Take trace_array reference when opening options file7.8 Highlinux-image-unsigned-4.15.0-266-genericTuxCarescsi: target: iscsi: Reserve a terminator byte for the login payload9.1 Criticallinux-image-unsigned-4.15.0-266-genericTuxCarescsi: pm8001: Use rollback index when freeing MSI-X vectors7.8 Highlinux-image-unsigned-4.15.0-266-genericTuxCareHID: rmi: fix OOB access with undersized RMI reports8.8 Highlinux-image-unsigned-4.15.0-266-genericTuxCareHID: wacom: validate report length in wacom_intuos_pro2_bt_irq8.1 Highlinux-image-unsigned-4.15.0-266-genericTuxCaredm: fix resume-vs-remove race7.8 Highlinux-image-unsigned-4.15.0-266-genericTuxCaremm/huge_memory: transfer the pmd dirty bit to the folio on zap5.7 Mediumlinux-image-unsigned-4.15.0-266-genericTuxCarei2c: mux: Fix channel node leak on adapter add failureNo scorelinux-image-unsigned-4.15.0-266-genericTuxCareALSA: pcm: Fix race between non-atomic ops and trigger-start7.8 Highlinux-image-unsigned-4.15.0-266-genericTuxCarenvme: add missing SRCU grace period in error path9.8 Criticallinux-image-unsigned-4.15.0-266-genericTuxCarenvdimm/btt: reject an arena whose nfree is below the lane count7.8 Highlinux-image-unsigned-4.15.0-266-genericTuxCaremtd: mtdoops: free page bitmap when the backing MTD is removedNo scorelinux-image-unsigned-4.15.0-266-genericTuxCaremtd: rawnand: validate ONFI extended parameter page sectionsNo scorelinux-image-unsigned-4.15.0-266-genericTuxCarebatman-adv: fix stale receive device on merged fragments8.8 Highlinux-image-unsigned-4.15.0-266-genericTuxCarebatman-adv: dat: avoid unaligned fault in IP extractionNo scorelinux-image-unsigned-4.15.0-266-genericTuxCarebatman-adv: bla: fix freeing of claims on meshif deletionNo scorelinux-image-unsigned-4.15.0-266-genericTuxCareASoC: cs35l33: drain threaded IRQ before runtime suspendNo scorelinux-image-unsigned-4.15.0-266-genericTuxCareASoC: cs35l34: drain threaded IRQ before runtime suspendNo scorelinux-image-unsigned-4.15.0-266-genericTuxCareiio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF7.8 Highlinux-image-unsigned-4.15.0-266-genericTuxCareiio: dac: m62332: Fix regulator reference count imbalanceNo score- Show olderLoading…