linux-image-unsigned-4.4.0-288-generic vulnerabilities (TuxCare)
198 vulnerabilities.
linux-image-unsigned-4.4.0-288-genericTuxCareALSA: firewire: isight: bound the sample count to the packet payload5.4 Mediumlinux-image-unsigned-4.4.0-288-genericTuxCareBluetooth: btusb: fix use-after-free on registration failure7.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCare6lowpan: fix NHC entry use-after-free on error path7.1 Highlinux-image-unsigned-4.4.0-288-genericTuxCarestaging: vme_user: bound slave read/write to the kern_buf size7.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCarenetpoll: fix a use-after-free on shutdown path7.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCareipv4: igmp: remove multicast group from hash table on device destruction7.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCarenet: ipv4: bound TCP reordering sysctl writes and MTU probe sizes7.1 Highlinux-image-unsigned-4.4.0-288-genericTuxCarecpufreq: pcc: fix use-after-free and double free in _OSC evaluation7.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCareHID: appleir: fix UAF on pending key_up_timer in remove()7.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCarenet: usb: kalmia: bound RX frame length in kalmia_rx_fixup()5.5 Mediumlinux-image-unsigned-4.4.0-288-genericTuxCareusb: free iso schedules on failed submit7.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCareUSB: idmouse: fix use-after-free on disconnect race7.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCareUSB: ldusb: fix use-after-free on disconnect race7.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCareUSB: iowarrior: fix use-after-free on disconnect7.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCareUSB: iowarrior: fix use-after-free on disconnect race7.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCareUSB: legousbtower: fix use-after-free on disconnect race7.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCareudf: validate sparing table length as an entry count, not a byte count7.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCarepartitions: aix: bound the pp_count scan to the ppe array7.1 Highlinux-image-unsigned-4.4.0-288-genericTuxCarecrypto: qat - protect service table iterations with service_lock7.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCareNFSv4: include MAY_WRITE in open permission mask for O_TRUNC7.1 Highlinux-image-unsigned-4.4.0-288-genericTuxCareInput: goodix - clamp the device-reported contact count7.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCareInput: iforce - bound the device-reported force-feedback effect index7.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCareInput: touchwin - reset the packet index on every complete packet7.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCareInput: mms114 - reject an oversized device packet size7.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCarefuse: re-lock request before returning from fuse_ref_folio()7.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCareInput: elan_i2c - validate firmware size before use7.1 Highlinux-image-unsigned-4.4.0-288-genericTuxCarevsock/vmci: fix UAF when peer resets connection during handshake8.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCareipv4: raw: reject IP_HDRINCL packets with ihl < 57.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCareixgbevf: fix use-after-free in VEPA multicast source pruning9.8 Criticallinux-image-unsigned-4.4.0-288-genericTuxCareaf_unix: Fix UAF read of tail->len in unix_stream_data_wait()8.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCarescsi: isci: Fix use-after-free in device removal path7.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCarebatman-adv: mcast: fix use-after-free in orig_node RCU release8.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCarenfc: llcp: Fix use-after-free in llcp_sock_release()7.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCarexfrm: Check for underflow in xfrm_state_mtu7.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCareALSA: pcm: oss: Fix setup list UAF on proc write error7.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCareipv6: exthdrs: refresh nh after handling HAO option9.8 Criticallinux-image-unsigned-4.4.0-288-genericTuxCarescsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()9.8 Criticallinux-image-unsigned-4.4.0-288-genericTuxCarefbdev: fix use-after-free in store_modes()7.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCaref2fs: validate ACL entry sizes in f2fs_acl_from_disk()7.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCareipvs: clear the svc scheduler ptr early on edit7.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCarenetfilter: nf_log: validate MAC header was set before dumping it7.1 Highlinux-image-unsigned-4.4.0-288-genericTuxCareBluetooth: hci_event: fix potential UAF in SSP passkey handlers8.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCarenetfilter: nf_conntrack_h323: check for zero length in DecodeQ931()9.1 Criticallinux-image-unsigned-4.4.0-288-genericTuxCareInput: lkkbd - disable pending work before freeing device7.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCarescsi: imm: Fix use-after-free bug caused by unfinished delayed work7.1 Highlinux-image-unsigned-4.4.0-288-genericTuxCarenfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure9.8 Criticallinux-image-unsigned-4.4.0-288-genericTuxCareusb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete7.8 Highlinux-image-unsigned-4.4.0-288-genericTuxCareIn the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations...7.8 High