linux-source-4.4.0 vulnerabilities (TuxCare)
1,693 vulnerabilities.
linux-source-4.4.0TuxCareHID: core: fix number/pointer type confusion on long items2.4 Lowlinux-source-4.4.0TuxCaredrm/amdgpu: Reject UVD message with invalid number of h265 refs7.3 Highlinux-source-4.4.0TuxCaredrm/amdgpu: Reject UVD message with dimensions above 40967.3 Highlinux-source-4.4.0TuxCaredrm/amdgpu: Fix UVD dpb min size calculation for H2646.9 Mediumlinux-source-4.4.0TuxCaresctp: reject stale cookies with mismatched verification tags6.3 Mediumlinux-source-4.4.0TuxCarering-buffer: Fix event length with forced 8-byte alignmentNo scorelinux-source-4.4.0TuxCareipvs: use parsed transport offset in TCP state lookup6.9 Mediumlinux-source-4.4.0TuxCareusb: xhci: bail out of setup if the controller is inaccessible5.1 Mediumlinux-source-4.4.0TuxCareusb: gadget: f_tcm: keep port count until LUN teardown completes9.8 Criticallinux-source-4.4.0TuxCaretcp: clamp route advmss to TCP_MIN_MSS6.8 Mediumlinux-source-4.4.0TuxCarexfrm: ah6: validate routing header segments_left7.3 Highlinux-source-4.4.0TuxCarexfrm: fix xfrm_state_construct() auth-trunc leak6.8 Mediumlinux-source-4.4.0TuxCarenet/packet: defer vmalloc TX_RING free until skbs finish7.3 Highlinux-source-4.4.0TuxCareusb: core: Add lock to usb_wakeup_notification()5.4 Mediumlinux-source-4.4.0TuxCareALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output()5.1 Mediumlinux-source-4.4.0TuxCareALSA: usb-audio: Complete cleanup after system-resume errors5.1 Mediumlinux-source-4.4.0TuxCareUSB: serial: option: fix slab OOB read in interrupt URB callback2.4 Lowlinux-source-4.4.0TuxCareUSB: c67x00: fix use-after-free in c67x00_add_iso_urb()7.3 Highlinux-source-4.4.0TuxCarenfc: st21nfca: validate ATR_REQ length against the received frame7.1 Highlinux-source-4.4.0TuxCareBluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept6.0 Mediumlinux-source-4.4.0TuxCarerndis_host: add overflow check in rndis_rx_fixup()5.2 Mediumlinux-source-4.4.0TuxCareALSA: dummy: Check card index validity at probeNo scorelinux-source-4.4.0TuxCarenilfs2: reject invalid block index in GC ioctlNo scorelinux-source-4.4.0TuxCarenfc: digital: clamp SENSF_RES length to the destination buffer7.7 Highlinux-source-4.4.0TuxCarenfc: fdp: bound the device-reported read length and fix an skb leak5.4 Mediumlinux-source-4.4.0TuxCarenfc: microread: validate target discovery payload lengths6.9 Mediumlinux-source-4.4.0TuxCarenfc: llcp: bound the connect_sn TLV walk to the skb7.1 Highlinux-source-4.4.0TuxCarenfc: llcp: reject PDUs shorter than the LLCP header7.1 Highlinux-source-4.4.0TuxCarenfc: pn533: purge fragmented skbs during cleanup1.0 Lowlinux-source-4.4.0TuxCarenfc: nci: fix out-of-bounds write in nci_target_auto_activated()7.0 Highlinux-source-4.4.0TuxCarenfc: nci: fix uninit-value in the RF discover/activated NTF handlersNo scorelinux-source-4.4.0TuxCareipv4: reject undersized MTUs in ip_do_fragment()6.8 Mediumlinux-source-4.4.0TuxCareHID: magicmouse: prevent unbounded recursion in magicmouse_raw_event()5.1 Mediumlinux-source-4.4.0TuxCareHID: magicmouse: do not keep a stale msc->input if no input is claimed5.4 Mediumlinux-source-4.4.0TuxCareHID: core: fix OOB read of field->usage in hid_set_field()2.4 Lowlinux-source-4.4.0TuxCareHID: sensor: custom: Fix use-after-free in enable_sensorNo scorelinux-source-4.4.0TuxCareHID: hyperv: validate initial device info boundsNo scorelinux-source-4.4.0TuxCareBluetooth: hci_event: fix LE list UAF on resetNo scorelinux-source-4.4.0TuxCareselinux: reject a class permission count below its inherited commonNo scorelinux-source-4.4.0TuxCareselinux: reject a permission value exceeding the class permission countNo scorelinux-source-4.4.0TuxCareaf_packet: Don't send zero-byte data in tpacket_snd().4.8 Mediumlinux-source-4.4.0TuxCarenet: remove WARN_ON_ONCE() from sk_mc_loop()0.0 Nonelinux-source-4.4.0TuxCareata: pata_sl82c105: fix bridge revision use-after-free7.8 Highlinux-source-4.4.0TuxCarevxlan: re-fetch eth header after route_shortcircuit()9.8 Criticallinux-source-4.4.0TuxCarechar: tlclk: fix use-after-free in tlclk_cleanup()7.8 Highlinux-source-4.4.0TuxCarebatman-adv: gw: acquire ethernet header only after skb realloc8.8 Highlinux-source-4.4.0TuxCarebatman-adv: dat: ensure accessible eth_hdr proto field8.1 Highlinux-source-4.4.0TuxCaredrm/amdgpu: reject oversized IBs with per-ring packet limits8.8 Highlinux-source-4.4.0TuxCarelibceph: Avoid using invalid osd indices from primary_temp9.8 Criticallinux-source-4.4.0TuxCarexfs: bounds-check buffer log item's dirty bitmap8.4 High- Show moreLoading…