linux-image-unsigned-4.4.0-291-generic vulnerabilities (TuxCare)
277 vulnerabilities.
linux-image-unsigned-4.4.0-291-genericTuxCareALSA: usb-audio: Complete cleanup after system-resume errors5.1 Mediumlinux-image-unsigned-4.4.0-291-genericTuxCareUSB: serial: option: fix slab OOB read in interrupt URB callback2.4 Lowlinux-image-unsigned-4.4.0-291-genericTuxCareUSB: c67x00: fix use-after-free in c67x00_add_iso_urb()7.3 Highlinux-image-unsigned-4.4.0-291-genericTuxCareBluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept6.0 Mediumlinux-image-unsigned-4.4.0-291-genericTuxCarerndis_host: add overflow check in rndis_rx_fixup()5.2 Mediumlinux-image-unsigned-4.4.0-291-genericTuxCarenilfs2: reject invalid block index in GC ioctlNo scorelinux-image-unsigned-4.4.0-291-genericTuxCarenfc: fdp: bound the device-reported read length and fix an skb leak5.4 Mediumlinux-image-unsigned-4.4.0-291-genericTuxCarenfc: microread: validate target discovery payload lengths6.9 Mediumlinux-image-unsigned-4.4.0-291-genericTuxCarenfc: llcp: bound the connect_sn TLV walk to the skb7.1 Highlinux-image-unsigned-4.4.0-291-genericTuxCareHID: magicmouse: prevent unbounded recursion in magicmouse_raw_event()5.1 Mediumlinux-image-unsigned-4.4.0-291-genericTuxCareHID: sensor: custom: Fix use-after-free in enable_sensorNo scorelinux-image-unsigned-4.4.0-291-genericTuxCareHID: hyperv: validate initial device info boundsNo scorelinux-image-unsigned-4.4.0-291-genericTuxCareBluetooth: hci_event: fix LE list UAF on resetNo scorelinux-image-unsigned-4.4.0-291-genericTuxCareselinux: reject a permission value exceeding the class permission countNo scorelinux-image-unsigned-4.4.0-291-genericTuxCarebatman-adv: dat: ensure accessible eth_hdr proto field8.1 Highlinux-image-unsigned-4.4.0-291-genericTuxCareALSA: usb-audio: fix OOB write on Type II inbound URBs7.0 Highlinux-image-unsigned-4.4.0-291-genericTuxCarenet: do not send ICMP/NDISC Redirects when peer allocation fails7.5 Highlinux-image-unsigned-4.4.0-291-genericTuxCarewifi: wcn36xx: fix heap overflow from oversized firmware HAL response8.8 Highlinux-image-unsigned-4.4.0-291-genericTuxCarescsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE9.8 Criticallinux-image-unsigned-4.4.0-291-genericTuxCareUSB: serial: io_edgeport: cap received transmit credits7.0 Highlinux-image-unsigned-4.4.0-291-genericTuxCaresmb: client: restrict implied bcc[0] exemption to responses without data area8.2 Highlinux-image-unsigned-4.4.0-291-genericTuxCarebatman-adv: bla: avoid double decrement of bla.num_requests7.1 Highlinux-image-unsigned-4.4.0-291-genericTuxCaresecurity/keys: fix missed RCU read section on lookup7.8 Highlinux-image-unsigned-4.4.0-291-genericTuxCareUSB: serial: safe_serial: fix memory corruption with small endpoint7.8 Highlinux-image-unsigned-4.4.0-291-genericTuxCarehpfs: fix a crash if hpfs_map_dnode_bitmap fails7.8 Highlinux-image-unsigned-4.4.0-291-genericTuxCareHID: wacom: Fix OOB write in wacom_hid_set_device_mode()8.8 Highlinux-image-unsigned-4.4.0-291-genericTuxCarenfc: hci: fix out-of-bounds read in HCP header parsing8.8 Highlinux-image-unsigned-4.4.0-291-genericTuxCareKVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()7.1 Highlinux-image-unsigned-4.4.0-291-genericTuxCareocfs2: reject oversized group bitmap descriptors8.8 Highlinux-image-unsigned-4.4.0-291-genericTuxCareUSB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr()7.8 Highlinux-image-unsigned-4.4.0-291-genericTuxCarenet: phonet: free phonet_device after RCU grace period7.8 Highlinux-image-unsigned-4.4.0-291-genericTuxCaresctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks7.8 Highlinux-image-unsigned-4.4.0-291-genericTuxCareipc: limit next_id allocation to the valid ID range7.8 Highlinux-image-unsigned-4.4.0-291-genericTuxCaredm: fix a buffer overflow in ioctl processing7.8 Highlinux-image-unsigned-4.4.0-291-genericTuxCarenfc: hci: shdlc: Stop timers and work before freeing context7.8 Highlinux-image-unsigned-4.4.0-291-genericTuxCarefbcon: Avoid OOB font access if console rotation fails7.1 Highlinux-image-unsigned-4.4.0-291-genericTuxCarewifi: b43legacy: enforce bounds check on firmware key index in RX path7.8 Highlinux-image-unsigned-4.4.0-291-genericTuxCarewifi: b43: enforce bounds check on firmware key index in b43_rx()7.8 Highlinux-image-unsigned-4.4.0-291-genericTuxCarewifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup()7.8 Highlinux-image-unsigned-4.4.0-291-genericTuxCareibmasm: fix heap over-read in ibmasm_send_i2o_message()7.1 Highlinux-image-unsigned-4.4.0-291-genericTuxCaremisc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt()7.1 Highlinux-image-unsigned-4.4.0-291-genericTuxCareibmasm: fix OOB reads in command_file_write due to missing size checks7.1 Highlinux-image-unsigned-4.4.0-291-genericTuxCareext4: fix dirtyclusters double decrement on fs shutdown7.8 Highlinux-image-unsigned-4.4.0-291-genericTuxCarelibceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()9.1 Criticallinux-image-unsigned-4.4.0-291-genericTuxCaremailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()7.1 Highlinux-image-unsigned-4.4.0-291-genericTuxCareusb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke()7.8 Highlinux-image-unsigned-4.4.0-291-genericTuxCaref2fs: fix out-of-bounds access in sysfs attribute read/write7.1 Highlinux-image-unsigned-4.4.0-291-genericTuxCareALSA: ctxfi: Fix potential OOB access in audio mixer handling7.1 Highlinux-image-unsigned-4.4.0-291-genericTuxCarecrypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec5.5 Mediumlinux-image-unsigned-4.4.0-291-genericTuxCarecaif: fix integer underflow in cffrml_receive()8.1 High- Show moreLoading…