linux-tools-4.15.0-266 vulnerabilities (TuxCare)
277 vulnerabilities.
linux-tools-4.15.0-266TuxCareKVM: nVMX: Always flush vpid02 on first use8.8 Highlinux-tools-4.15.0-266TuxCareKVM: nVM: Ensure INVVPID is emulated on the correct physical CPU8.8 Highlinux-tools-4.15.0-266TuxCareKVM: x86: hyper-v: Clamp stimer deadline to avoid livelock7.1 Highlinux-tools-4.15.0-266TuxCareKVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables8.8 Highlinux-tools-4.15.0-266TuxCareKVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save7.1 Highlinux-tools-4.15.0-266TuxCaremedia: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref5.1 Mediumlinux-tools-4.15.0-266TuxCaremedia: cec: Serialize exclusive follower delivery7.5 Highlinux-tools-4.15.0-266TuxCaremedia: cobalt: Avoid freeing ALSA private data twiceNo scorelinux-tools-4.15.0-266TuxCaremedia: cx23885: cancel NetUP CI work before teardown7.8 Highlinux-tools-4.15.0-266TuxCaremedia: go7007: defer the ALSA v4l2 put until card release7.8 Highlinux-tools-4.15.0-266TuxCaremedia: s2255: check firmware size before reading trailing markerNo scorelinux-tools-4.15.0-266TuxCaremedia: saa7164: fix cleanup on resource allocation failure8.4 Highlinux-tools-4.15.0-266TuxCarescsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlersNo scorelinux-tools-4.15.0-266TuxCarescsi: qla2xxx: Bound i2c->length in I2C bsg handlers8.4 Highlinux-tools-4.15.0-266TuxCarescsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()8.1 Highlinux-tools-4.15.0-266TuxCarescsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak9.8 Criticallinux-tools-4.15.0-266TuxCarescsi: qla2xxx: Bound image count in qla2x00_update_fru_versions()No scorelinux-tools-4.15.0-266TuxCarescsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation8.4 Highlinux-tools-4.15.0-266TuxCarescsi: qla2xxx: Serialize flash version read in reset handlerNo scorelinux-tools-4.15.0-266TuxCarescsi: qla2xxx: Fix cs84xx use-after-free on host teardown7.8 Highlinux-tools-4.15.0-266TuxCarescsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state()No scorelinux-tools-4.15.0-266TuxCarescsi: qla2xxx: Quiesce response IRQ before freeing request queue8.1 Highlinux-tools-4.15.0-266TuxCarescsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read9.1 Criticallinux-tools-4.15.0-266TuxCarescsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry()No scorelinux-tools-4.15.0-266TuxCarescsi: qla2xxx: Zero-init bsg stack buffers to avoid info leakNo scorelinux-tools-4.15.0-266TuxCaref2fs: validate MOVE_RANGE destination size7.1 Highlinux-tools-4.15.0-266TuxCaref2fs: limit recovery filename logging to stored length7.1 Highlinux-tools-4.15.0-266TuxCaref2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages()5.7 Mediumlinux-tools-4.15.0-266TuxCaredrm/i915: Guard against NULL driver_data in i915_pci_probe()No scorelinux-tools-4.15.0-266TuxCarebpf: Disable preemption in bpf_get_stackid7.8 Highlinux-tools-4.15.0-266TuxCaregtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free7.8 Highlinux-tools-4.15.0-266TuxCareext4: fix out-of-bounds read in ext4_read_inline_dir()9.1 Criticallinux-tools-4.15.0-266TuxCareSUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6No scorelinux-tools-4.15.0-266TuxCarexfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full9.8 Criticallinux-tools-4.15.0-266TuxCareisofs: fix out-of-bounds page array access on empty zisofs block9.8 Criticallinux-tools-4.15.0-266TuxCareapparmor: fix out-of-bounds write when null terminating a label vec7.8 Highlinux-tools-4.15.0-266TuxCarerapidio: mport_cdev: fix use-after-free in dma_req_free()7.8 Highlinux-tools-4.15.0-266TuxCareusb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind()7.8 Highlinux-tools-4.15.0-266TuxCareHID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature8.8 Highlinux-tools-4.15.0-266TuxCareNFSD: Prevent client use-after-free during delegation revoke9.8 Criticallinux-tools-4.15.0-266TuxCarelibceph: reject buckets with mismatched CRUSH ids9.8 Criticallinux-tools-4.15.0-266TuxCareecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet7.8 Highlinux-tools-4.15.0-266TuxCaredm array: validate array block headers on read7.8 Highlinux-tools-4.15.0-266TuxCareBluetooth: RFCOMM: serialize security confirmation handling8.8 Highlinux-tools-4.15.0-266TuxCarempls: reload header after pskb_may_pull()9.8 Criticallinux-tools-4.15.0-266TuxCarenouveau/gem: reserve the bo in the info ioctl around the vma lookup7.8 Highlinux-tools-4.15.0-266TuxCareSUNRPC: svcauth_gss: enforce krb5 token minimum length9.8 Criticallinux-tools-4.15.0-266TuxCareSUNRPC: always drain cache_cleaner before destroying a cache_detail7.8 Highlinux-tools-4.15.0-266TuxCaresunrpc: defer rq_argp and rq_resp free until after RCU grace period7.8 Highlinux-tools-4.15.0-266TuxCareSUNRPC: harden gss_krb5_unwrap_v2 against short tokens9.8 Critical- Show moreLoading…