linux-source-4.4.0 vulnerabilities (TuxCare)
1,693 vulnerabilities.
linux-source-4.4.0TuxCaresctp: validate cookie AUTH state before use9.8 Criticallinux-source-4.4.0TuxCareipvlan: inherit needed_headroom and needed_tailroom from phy_dev9.8 Criticallinux-source-4.4.0TuxCareNFS: Pin the 'struct nfs_server' during a FREE_STATEID call9.8 Criticallinux-source-4.4.0TuxCareenic: fix tx_hang_reset use-after-free on device removal7.8 Highlinux-source-4.4.0TuxCarenet/atm: fix slab-out-of-bounds read in vcc_setsockopt()7.1 Highlinux-source-4.4.0TuxCaresctp: clear control chunk transport if it is being removed9.8 Criticallinux-source-4.4.0TuxCareALSA: usb-audio: fix OOB write on Type II inbound URBs7.0 Highlinux-source-4.4.0TuxCareusb: gadget: f_ncm: Use unsigned int for ndp_index5.1 Mediumlinux-source-4.4.0TuxCareipvs: clear IPv4 options after rebasing tunnel ICMP errors9.8 Criticallinux-source-4.4.0TuxCareALSA: usx2y: bound the hwdep mmap fault offset7.8 Highlinux-source-4.4.0TuxCareperf/core: Fix group leader use-after-free after sibling detach7.8 Highlinux-source-4.4.0TuxCareipv6: prevent in6_dev_get() from resurrecting inet6_dev7.8 Highlinux-source-4.4.0TuxCarenet/x25: fix use-after-free of the socket by its timers9.8 Criticallinux-source-4.4.0TuxCaretipc: read le->link under the node lock in tipc_node_link_down()7.8 Highlinux-source-4.4.0TuxCareip6_tunnel: clear skb2->cb[] in ip6ip6_err()9.8 Criticallinux-source-4.4.0TuxCaresctp: keep chunk->transport in step with the list it is queued on9.8 Criticallinux-source-4.4.0TuxCaresctp: fix use-after-free of cached ASCONF chunk9.8 Criticallinux-source-4.4.0TuxCarenet/sched: cls_route: fix fastmap use-after-free on filter7.8 Highlinux-source-4.4.0TuxCarenet: ipv6: clear suppressed fib6 rule result9.8 Criticallinux-source-4.4.0TuxCarenetfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()9.8 Criticallinux-source-4.4.0TuxCarescsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer9.8 Criticallinux-source-4.4.0TuxCarenet: do not send ICMP/NDISC Redirects when peer allocation fails7.5 Highlinux-source-4.4.0TuxCareBluetooth: mgmt: fix UAF in pair command cancellation7.8 Highlinux-source-4.4.0TuxCareALSA: 6fire: Fix UAF at error handling during probe7.0 Highlinux-source-4.4.0TuxCareALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output()7.0 Highlinux-source-4.4.0TuxCareALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set7.3 Highlinux-source-4.4.0TuxCarenet: pktgen: fix proc entry use-after-free7.8 Highlinux-source-4.4.0TuxCaredrm/vmwgfx: validate DRAW_PRIMITIVES header size before division7.8 Highlinux-source-4.4.0TuxCarewifi: ath9k: fix OOB access from firmware tx status queue ID8.8 Highlinux-source-4.4.0TuxCareALSA: seq: midi: Serialize output teardown with event_input7.8 Highlinux-source-4.4.0TuxCareconfigfs_lookup(): don't leave ->s_dentry dangling on failure7.8 Highlinux-source-4.4.0TuxCareocfs2: validate fast symlink target during inode read9.8 Criticallinux-source-4.4.0TuxCarewifi: wcn36xx: fix heap overflow from oversized firmware HAL response8.8 Highlinux-source-4.4.0TuxCaretipc: require net admin for TIPCv2 netlink mutators7.8 Highlinux-source-4.4.0TuxCaretipc: fix UAF in tipc_l2_send_msg()9.8 Criticallinux-source-4.4.0TuxCarenfs: use nfsi->rwsem to protect traversal of the file lock list9.8 Criticallinux-source-4.4.0TuxCaresctp: fix err_chunk memory leaks in INIT handling8.7 Highlinux-source-4.4.0TuxCarenet: sungem: fix probe error cleanup7.8 Highlinux-source-4.4.0TuxCaresctp: add INIT verification after cookie unpacking9.8 Criticallinux-source-4.4.0TuxCarebridge: stp: Fix a potential use-after-free when deleting a bridge7.8 Highlinux-source-4.4.0TuxCaresctp: fix addr_wq_timer race in sctp_free_addr_wq()7.8 Highlinux-source-4.4.0TuxCaregue: validate REMCSUM private option length9.8 Criticallinux-source-4.4.0TuxCareipv4: igmp: Fix potential UAF in igmp_gq_start_timer()9.8 Criticallinux-source-4.4.0TuxCareipv6: mcast: Fix potential UAF in MLD delayed work9.8 Criticallinux-source-4.4.0TuxCarebatman-adv: access unicast_ttvn skb->data only after skb realloc9.8 Criticallinux-source-4.4.0TuxCarebatman-adv: tt: prevent TVLV OOB check overflow9.8 Criticallinux-source-4.4.0TuxCaremtd: slram: remove failed entries from the device list7.8 Highlinux-source-4.4.0TuxCarescsi: target: Bound PR-OUT TransportID parsing to the received buffer9.8 Criticallinux-source-4.4.0TuxCarescsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE9.8 Criticallinux-source-4.4.0TuxCarewifi: libertas_tf: fix use-after-free in lbtf_free_adapter()5.4 Medium- Show moreLoading…