linux-image-unsigned-4.4.0-289-lowlatency vulnerabilities (TuxCare)
80 vulnerabilities.
linux-image-unsigned-4.4.0-289-lowlatencyTuxCareipv4: validate checksum_start before completing checksum9.3 Criticallinux-image-unsigned-4.4.0-289-lowlatencyTuxCarenetfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()No scorelinux-image-unsigned-4.4.0-289-lowlatencyTuxCarenetfilter: nf_log: unregister loggers before per-net teardown7.0 Highlinux-image-unsigned-4.4.0-289-lowlatencyTuxCaresmb: client: reject userspace cifs.idmap descriptions8.5 Highlinux-image-unsigned-4.4.0-289-lowlatencyTuxCarenet: usb: pegasus: don't rely on id table pointer arithmeticNo scorelinux-image-unsigned-4.4.0-289-lowlatencyTuxCarewifi: libipw: fix key index receive bound checksNo scorelinux-image-unsigned-4.4.0-289-lowlatencyTuxCareusb: gadget: r8a66597: avoid double free of ep0_req in probe error pathNo scorelinux-image-unsigned-4.4.0-289-lowlatencyTuxCaregpu: host1x: Avoid stack over-read in debug output helpersNo scorelinux-image-unsigned-4.4.0-289-lowlatencyTuxCareUDF symlink pathComponent header OOB read7.1 Highlinux-image-unsigned-4.4.0-289-lowlatencyTuxCaremtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition()No scorelinux-image-unsigned-4.4.0-289-lowlatencyTuxCareisofs: release zisofs block pointer buffer headNo scorelinux-image-unsigned-4.4.0-289-lowlatencyTuxCarewifi: brcmfmac: fix P2P action frame handling without device vif6.7 Mediumlinux-image-unsigned-4.4.0-289-lowlatencyTuxCareserial: core: clear freed pointers on uart_register_driver() failureNo scorelinux-image-unsigned-4.4.0-289-lowlatencyTuxCaretty: skip cdev_del() when no cdev is registeredNo scorelinux-image-unsigned-4.4.0-289-lowlatencyTuxCarefat: release buffer head after rebuilding parent8.2 Highlinux-image-unsigned-4.4.0-289-lowlatencyTuxCarecpufreq: imx6q: fix out-of-bounds write when probed more than onceNo scorelinux-image-unsigned-4.4.0-289-lowlatencyTuxCareNFSv4.1: zero referring call lists before decoding9.8 Criticallinux-image-unsigned-4.4.0-289-lowlatencyTuxCareBluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop7.1 Highlinux-image-unsigned-4.4.0-289-lowlatencyTuxCaretpm: st33zp24: Return zero on status read failureNo scorelinux-image-unsigned-4.4.0-289-lowlatencyTuxCareASoC: dapm: Fix off-by-one check on the second enum channel0.0 Nonelinux-image-unsigned-4.4.0-289-lowlatencyTuxCarenet: fec: only stop PTP if it was initializedNo scorelinux-image-unsigned-4.4.0-289-lowlatencyTuxCareusb: atm: usbatm: fix invalid ci_range initialization0.0 Nonelinux-image-unsigned-4.4.0-289-lowlatencyTuxCareusb: image: mdc800: change kmalloc() to kzalloc()2.4 Lowlinux-image-unsigned-4.4.0-289-lowlatencyTuxCareusb: gadget: fix null pointer dereference in usb_put_function_instance()No scorelinux-image-unsigned-4.4.0-289-lowlatencyTuxCarei2c: mux: Fix channel node leak on adapter add failureNo scorelinux-image-unsigned-4.4.0-289-lowlatencyTuxCareKVM: s390: Fix memory leak in guest debug handling6.7 Mediumlinux-image-unsigned-4.4.0-289-lowlatencyTuxCaremedia: cobalt: Avoid freeing ALSA private data twiceNo scorelinux-image-unsigned-4.4.0-289-lowlatencyTuxCaremedia: s2255: check firmware size before reading trailing markerNo scorelinux-image-unsigned-4.4.0-289-lowlatencyTuxCarescsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlersNo scorelinux-image-unsigned-4.4.0-289-lowlatencyTuxCarescsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state()No scorelinux-image-unsigned-4.4.0-289-lowlatencyTuxCarescsi: qla2xxx: Zero-init bsg stack buffers to avoid info leakNo scorelinux-image-unsigned-4.4.0-289-lowlatencyTuxCaredrm/i915: Guard against NULL driver_data in i915_pci_probe()No scorelinux-image-unsigned-4.4.0-289-lowlatencyTuxCareHID: core: fix number/pointer type confusion on long items2.4 Lowlinux-image-unsigned-4.4.0-289-lowlatencyTuxCaredrm/amdgpu: Reject UVD message with invalid number of h265 refs7.3 Highlinux-image-unsigned-4.4.0-289-lowlatencyTuxCareALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output()5.1 Mediumlinux-image-unsigned-4.4.0-289-lowlatencyTuxCarenfc: st21nfca: validate ATR_REQ length against the received frame7.1 Highlinux-image-unsigned-4.4.0-289-lowlatencyTuxCareALSA: dummy: Check card index validity at probeNo scorelinux-image-unsigned-4.4.0-289-lowlatencyTuxCarenfc: digital: clamp SENSF_RES length to the destination buffer7.7 Highlinux-image-unsigned-4.4.0-289-lowlatencyTuxCarenfc: llcp: reject PDUs shorter than the LLCP header7.1 Highlinux-image-unsigned-4.4.0-289-lowlatencyTuxCarenfc: pn533: purge fragmented skbs during cleanup1.0 Lowlinux-image-unsigned-4.4.0-289-lowlatencyTuxCarenfc: nci: fix out-of-bounds write in nci_target_auto_activated()7.0 Highlinux-image-unsigned-4.4.0-289-lowlatencyTuxCarenfc: nci: fix uninit-value in the RF discover/activated NTF handlersNo scorelinux-image-unsigned-4.4.0-289-lowlatencyTuxCareipv4: reject undersized MTUs in ip_do_fragment()6.8 Mediumlinux-image-unsigned-4.4.0-289-lowlatencyTuxCareHID: magicmouse: do not keep a stale msc->input if no input is claimed5.4 Mediumlinux-image-unsigned-4.4.0-289-lowlatencyTuxCareHID: core: fix OOB read of field->usage in hid_set_field()2.4 Lowlinux-image-unsigned-4.4.0-289-lowlatencyTuxCareselinux: reject a class permission count below its inherited commonNo scorelinux-image-unsigned-4.4.0-289-lowlatencyTuxCareaf_packet: Don't send zero-byte data in tpacket_snd().4.8 Mediumlinux-image-unsigned-4.4.0-289-lowlatencyTuxCarenet: remove WARN_ON_ONCE() from sk_mc_loop()0.0 Nonelinux-image-unsigned-4.4.0-289-lowlatencyTuxCareata: pata_sl82c105: fix bridge revision use-after-free7.8 Highlinux-image-unsigned-4.4.0-289-lowlatencyTuxCareenic: fix tx_hang_reset use-after-free on device removal7.8 High- Show olderLoading…