linux-image-unsigned-4.15.0-266-lowlatency vulnerabilities (TuxCare)
277 vulnerabilities.
linux-image-unsigned-4.15.0-266-lowlatencyTuxCareKVM: nVMX: Always flush vpid02 on first use8.8 Highlinux-image-unsigned-4.15.0-266-lowlatencyTuxCareKVM: nVM: Ensure INVVPID is emulated on the correct physical CPU8.8 Highlinux-image-unsigned-4.15.0-266-lowlatencyTuxCareKVM: x86: hyper-v: Clamp stimer deadline to avoid livelock7.1 Highlinux-image-unsigned-4.15.0-266-lowlatencyTuxCareKVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables8.8 Highlinux-image-unsigned-4.15.0-266-lowlatencyTuxCareKVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save7.1 Highlinux-image-unsigned-4.15.0-266-lowlatencyTuxCaremedia: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref5.1 Mediumlinux-image-unsigned-4.15.0-266-lowlatencyTuxCaremedia: cec: Serialize exclusive follower delivery7.5 Highlinux-image-unsigned-4.15.0-266-lowlatencyTuxCaremedia: cobalt: Avoid freeing ALSA private data twiceNo scorelinux-image-unsigned-4.15.0-266-lowlatencyTuxCaremedia: cx23885: cancel NetUP CI work before teardown7.8 Highlinux-image-unsigned-4.15.0-266-lowlatencyTuxCaremedia: go7007: defer the ALSA v4l2 put until card release7.8 Highlinux-image-unsigned-4.15.0-266-lowlatencyTuxCaremedia: s2255: check firmware size before reading trailing markerNo scorelinux-image-unsigned-4.15.0-266-lowlatencyTuxCaremedia: saa7164: fix cleanup on resource allocation failure8.4 Highlinux-image-unsigned-4.15.0-266-lowlatencyTuxCarescsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlersNo scorelinux-image-unsigned-4.15.0-266-lowlatencyTuxCarescsi: qla2xxx: Bound i2c->length in I2C bsg handlers8.4 Highlinux-image-unsigned-4.15.0-266-lowlatencyTuxCarescsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()8.1 Highlinux-image-unsigned-4.15.0-266-lowlatencyTuxCarescsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak9.8 Criticallinux-image-unsigned-4.15.0-266-lowlatencyTuxCarescsi: qla2xxx: Bound image count in qla2x00_update_fru_versions()No scorelinux-image-unsigned-4.15.0-266-lowlatencyTuxCarescsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation8.4 Highlinux-image-unsigned-4.15.0-266-lowlatencyTuxCarescsi: qla2xxx: Serialize flash version read in reset handlerNo scorelinux-image-unsigned-4.15.0-266-lowlatencyTuxCarescsi: qla2xxx: Fix cs84xx use-after-free on host teardown7.8 Highlinux-image-unsigned-4.15.0-266-lowlatencyTuxCarescsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state()No scorelinux-image-unsigned-4.15.0-266-lowlatencyTuxCarescsi: qla2xxx: Quiesce response IRQ before freeing request queue8.1 Highlinux-image-unsigned-4.15.0-266-lowlatencyTuxCarescsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read9.1 Criticallinux-image-unsigned-4.15.0-266-lowlatencyTuxCarescsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry()No scorelinux-image-unsigned-4.15.0-266-lowlatencyTuxCarescsi: qla2xxx: Zero-init bsg stack buffers to avoid info leakNo scorelinux-image-unsigned-4.15.0-266-lowlatencyTuxCaref2fs: validate MOVE_RANGE destination size7.1 Highlinux-image-unsigned-4.15.0-266-lowlatencyTuxCaref2fs: limit recovery filename logging to stored length7.1 Highlinux-image-unsigned-4.15.0-266-lowlatencyTuxCaref2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages()5.7 Mediumlinux-image-unsigned-4.15.0-266-lowlatencyTuxCaredrm/i915: Guard against NULL driver_data in i915_pci_probe()No scorelinux-image-unsigned-4.15.0-266-lowlatencyTuxCarebpf: Disable preemption in bpf_get_stackid7.8 Highlinux-image-unsigned-4.15.0-266-lowlatencyTuxCaregtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free7.8 Highlinux-image-unsigned-4.15.0-266-lowlatencyTuxCareext4: fix out-of-bounds read in ext4_read_inline_dir()9.1 Criticallinux-image-unsigned-4.15.0-266-lowlatencyTuxCareSUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6No scorelinux-image-unsigned-4.15.0-266-lowlatencyTuxCarexfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full9.8 Criticallinux-image-unsigned-4.15.0-266-lowlatencyTuxCareisofs: fix out-of-bounds page array access on empty zisofs block9.8 Criticallinux-image-unsigned-4.15.0-266-lowlatencyTuxCareapparmor: fix out-of-bounds write when null terminating a label vec7.8 Highlinux-image-unsigned-4.15.0-266-lowlatencyTuxCarerapidio: mport_cdev: fix use-after-free in dma_req_free()7.8 Highlinux-image-unsigned-4.15.0-266-lowlatencyTuxCareusb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind()7.8 Highlinux-image-unsigned-4.15.0-266-lowlatencyTuxCareHID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature8.8 Highlinux-image-unsigned-4.15.0-266-lowlatencyTuxCareNFSD: Prevent client use-after-free during delegation revoke9.8 Criticallinux-image-unsigned-4.15.0-266-lowlatencyTuxCarelibceph: reject buckets with mismatched CRUSH ids9.8 Criticallinux-image-unsigned-4.15.0-266-lowlatencyTuxCareecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet7.8 Highlinux-image-unsigned-4.15.0-266-lowlatencyTuxCaredm array: validate array block headers on read7.8 Highlinux-image-unsigned-4.15.0-266-lowlatencyTuxCareBluetooth: RFCOMM: serialize security confirmation handling8.8 Highlinux-image-unsigned-4.15.0-266-lowlatencyTuxCarempls: reload header after pskb_may_pull()9.8 Criticallinux-image-unsigned-4.15.0-266-lowlatencyTuxCarenouveau/gem: reserve the bo in the info ioctl around the vma lookup7.8 Highlinux-image-unsigned-4.15.0-266-lowlatencyTuxCareSUNRPC: svcauth_gss: enforce krb5 token minimum length9.8 Criticallinux-image-unsigned-4.15.0-266-lowlatencyTuxCareSUNRPC: always drain cache_cleaner before destroying a cache_detail7.8 Highlinux-image-unsigned-4.15.0-266-lowlatencyTuxCaresunrpc: defer rq_argp and rq_resp free until after RCU grace period7.8 Highlinux-image-unsigned-4.15.0-266-lowlatencyTuxCareSUNRPC: harden gss_krb5_unwrap_v2 against short tokens9.8 Critical- Show moreLoading…