linux-image-unsigned-5.4.0-237-generic vulnerabilities (TuxCare)
134 vulnerabilities.
linux-image-unsigned-5.4.0-237-genericTuxCarexfrm: Fix dev use-after-free in xfrm async resumption9.8 Criticallinux-image-unsigned-5.4.0-237-genericTuxCareNFSv4: include MAY_WRITE in open permission mask for O_TRUNC7.1 Highlinux-image-unsigned-5.4.0-237-genericTuxCarefpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()8.8 Highlinux-image-unsigned-5.4.0-237-genericTuxCareInput: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count7.8 Highlinux-image-unsigned-5.4.0-237-genericTuxCareInput: goodix - clamp the device-reported contact count7.8 Highlinux-image-unsigned-5.4.0-237-genericTuxCareInput: iforce - bound the device-reported force-feedback effect index7.8 Highlinux-image-unsigned-5.4.0-237-genericTuxCareInput: touchwin - reset the packet index on every complete packet7.8 Highlinux-image-unsigned-5.4.0-237-genericTuxCareInput: mms114 - reject an oversized device packet size7.8 Highlinux-image-unsigned-5.4.0-237-genericTuxCareRDMA/siw: bound Read Response placement to the RREAD length9.8 Criticallinux-image-unsigned-5.4.0-237-genericTuxCarefuse: re-lock request before returning from fuse_ref_folio()7.8 Highlinux-image-unsigned-5.4.0-237-genericTuxCarei2c: stub: Reject I2C block transfers with invalid length7.8 Highlinux-image-unsigned-5.4.0-237-genericTuxCarenetfilter: ipset: fix race between dump and ip_set_list resize7.8 Highlinux-image-unsigned-5.4.0-237-genericTuxCarenet: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()7.8 Highlinux-image-unsigned-5.4.0-237-genericTuxCareaf_unix: Fix UAF read of tail->len in unix_stream_data_wait()8.8 Highlinux-image-unsigned-5.4.0-237-genericTuxCarebatman-adv: tp_meter: directly shut down timer on cleanup8.8 Highlinux-image-unsigned-5.4.0-237-genericTuxCarebatman-adv: tt: fix TOCTOU race for reported vlans9.8 Criticallinux-image-unsigned-5.4.0-237-genericTuxCarexfs: resample the data fork mapping after cycling ILOCK7.8 Highlinux-image-unsigned-5.4.0-237-genericTuxCaredrm/amd/display: Use krealloc_array() in dal_vector_reserve()7.0 Highlinux-image-unsigned-5.4.0-237-genericTuxCareipv6: mcast: Fix use-after-free when processing MLD queries8.8 Highlinux-image-unsigned-5.4.0-237-genericTuxCareipvs: clear the svc scheduler ptr early on edit7.8 Highlinux-image-unsigned-5.4.0-237-genericTuxCarenetfilter: conntrack_irc: fix possible out-of-bounds read8.2 Highlinux-image-unsigned-5.4.0-237-genericTuxCarel2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()7.8 Highlinux-image-unsigned-5.4.0-237-genericTuxCareBluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()8.0 Highlinux-image-unsigned-5.4.0-237-genericTuxCareBluetooth: RFCOMM: validate skb length in MCC handlers8.1 Highlinux-image-unsigned-5.4.0-237-genericTuxCareBluetooth: bnep: reject short frames before parsing7.1 Highlinux-image-unsigned-5.4.0-237-genericTuxCaresctp: validate cached peer INIT chunk length in COOKIE_ECHO processing9.8 Criticallinux-image-unsigned-5.4.0-237-genericTuxCarexfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()7.8 Highlinux-image-unsigned-5.4.0-237-genericTuxCarenet/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list8.7 Highlinux-image-unsigned-5.4.0-237-genericTuxCareipv6: sit: reload inner IPv6 header after GSO offloads9.8 Criticallinux-image-unsigned-5.4.0-237-genericTuxCaresctp: validate embedded INIT chunk and address list lengths in cookie9.1 Criticallinux-image-unsigned-5.4.0-237-genericTuxCarenet: guard timestamp cmsgs to real error queue skbs7.1 Highlinux-image-unsigned-5.4.0-237-genericTuxCarenetfilter: nft_tunnel: fix use-after-free on object destroy7.8 Highlinux-image-unsigned-5.4.0-237-genericTuxCareRDMA/srp: bound SRP_RSP sense copy by the received length9.1 Criticallinux-image-unsigned-5.4.0-237-genericTuxCareRDMA/umem: Fix truncation for block sizes >= 4G7.8 Highlinux-image-unsigned-5.4.0-237-genericTuxCarenetfilter: require Ethernet MAC header before using eth_hdr()9.4 Criticallinux-image-unsigned-5.4.0-237-genericTuxCarePCI: use generic driver_override infrastructure7.8 Highlinux-image-unsigned-5.4.0-237-genericTuxCarewifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet7.8 Highlinux-image-unsigned-5.4.0-237-genericTuxCarebpf: Fix use-after-free in offloaded map/prog info fill7.8 Highlinux-image-unsigned-5.4.0-237-genericTuxCareBluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER8.8 Highlinux-image-unsigned-5.4.0-237-genericTuxCaregreybus: raw: fix use-after-free on cdev close7.8 Highlinux-image-unsigned-5.4.0-237-genericTuxCaregreybus: raw: fix use-after-free if write is called after disconnect7.8 Highlinux-image-unsigned-5.4.0-237-genericTuxCarecrypto: ccp - copy IV using skcipher ivsize7.8 Highlinux-image-unsigned-5.4.0-237-genericTuxCarenet/sched: taprio: fix use-after-free in advance_sched() on schedule switch7.8 Highlinux-image-unsigned-5.4.0-237-genericTuxCareice: fix double-free of tx_buf skb7.8 Highlinux-image-unsigned-5.4.0-237-genericTuxCareipv6: fix possible UAF in icmpv6_rcv()9.8 Criticallinux-image-unsigned-5.4.0-237-genericTuxCarenetfilter: conntrack: remove sprintf usage9.8 Criticallinux-image-unsigned-5.4.0-237-genericTuxCaretipc: fix double-free in tipc_buf_append()9.8 Criticallinux-image-unsigned-5.4.0-237-genericTuxCarenetfilter: nf_conntrack_sip: don't use simple_strtoul9.8 Criticallinux-image-unsigned-5.4.0-237-genericTuxCarelibceph: Fix potential null-ptr-deref in decode_choose_args()7.5 Highlinux-image-unsigned-5.4.0-237-genericTuxCarelibceph: Fix potential out-of-bounds access in __ceph_x_decrypt()7.5 High- Show olderLoading…