rtla vulnerabilities (TuxCare)
4,133 vulnerabilities.
rtlaTuxCarenetfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent5.5 MediumrtlaTuxCarenetfilter: ctnetlink: ignore explicit helper on new expectations7.3 HighrtlaTuxCarenetfilter: nf_tables: reject immediate NF_QUEUE verdict5.5 MediumrtlaTuxCareBluetooth: SCO: fix race conditions in sco_sock_connect()7.8 HighrtlaTuxCareBluetooth: MGMT: validate LTK enc_size on load7.8 HighrtlaTuxCarebpf: Reject sleepable kprobe_multi programs at attach time5.5 MediumrtlaTuxCaredrm/ioc32: stop speculation on the drm_compat_ioctl path5.5 MediumrtlaTuxCareALSA: caiaq: fix stack out-of-bounds read in init_card7.1 HighrtlaTuxCareALSA: ctxfi: Check the error for index mapping5.5 MediumrtlaTuxCareBluetooth: SMP: derive legacy responder STK authentication from MITM state8.8 HighrtlaTuxCareusb: ulpi: fix double free in ulpi_register_interface() error path7.8 HighrtlaTuxCareusb: usbtmc: Flush anchored URBs in usbtmc_release7.8 HighrtlaTuxCarebridge: br_nd_send: validate ND option lengths5.5 MediumrtlaTuxCarevxlan: validate ND option lengths in vxlan_na_create5.5 MediumrtlaTuxCaresmb: client: validate the whole DACL before rewriting it in cifsacl8.8 HighrtlaTuxCaresmb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path8.1 HighrtlaTuxCarenet/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()7.8 HighrtlaTuxCarecrypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed7.1 HighrtlaTuxCarecrypto: ccp: Don't attempt to copy ID to userspace if PSP command failed7.1 HighrtlaTuxCarerxrpc: Fix missing validation of ticket length in non-XDR key preparsing7.8 HighrtlaTuxCarefuse: reject oversized dirents in page cache7.8 HighrtlaTuxCarecifs: some missing initializations on replay7.8 HighrtlaTuxCarertnetlink: add missing netlink_ns_capable() check for peer netns5.5 MediumrtlaTuxCarexen/privcmd: fix double free via VMA splitting7.8 HighrtlaTuxCareBuffer overflow in drivers/xen/sys-hypervisor.c7.8 HighrtlaTuxCareIn the Linux kernel, the following vulnerability has been resolved: driver core: enforce...7.8 HighrtlaTuxCaremm/kasan: fix double free for kasan pXds7.8 HighrtlaTuxCareA transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to...2.0 LowrtlaTuxCarenetfilter: ip6t_eui64: reject invalid MAC header for all packets9.4 CriticalrtlaTuxCarenet: sched: act_csum: validate nested VLAN headers5.5 MediumrtlaTuxCarenetfilter: xt_multiport: validate range encoding in checkentry5.5 MediumrtlaTuxCarenet: ipv6: flowlabel: defer exclusive option free until RCU teardown7.8 HighrtlaTuxCareopenvswitch: validate MPLS set/set_masked payload length7.1 HighrtlaTuxCareopenvswitch: defer tunnel netdev_put to RCU release7.8 HighrtlaTuxCarecrypto: af_alg - limit RX SG extraction by receive buffer budget5.5 MediumrtlaTuxCarenet/sched: sch_netem: fix out-of-bounds access in packet corruption7.8 HighrtlaTuxCareaf_unix: read UNIX_DIAG_VFS data under unix_state_lock7.8 HighrtlaTuxCarewifi: rt2x00usb: fix devres lifetime5.5 MediumrtlaTuxCarexfrm_user: fix info leak in build_report()5.5 MediumrtlaTuxCarenet: rfkill: prevent unlimited numbers of rfkill events from being created5.5 MediumrtlaTuxCaremptcp: fix slab-use-after-free in __inet_lookup_established9.8 CriticalrtlaTuxCareInput: uinput - fix circular locking dependency with ff-core7.8 HighrtlaTuxCarenetfilter: nft_ct: fix use-after-free in timeout object destroy7.8 HighrtlaTuxCarexfrm: clear trailing padding in build_polexpire()5.5 MediumrtlaTuxCarexfrm: hold dev ref until after transport_finish NF_HOOK7.8 HighrtlaTuxCarewifi: brcmsmac: Fix dma_free_coherent() size5.5 MediumrtlaTuxCarebatman-adv: reject oversized global TT response buffers9.8 CriticalrtlaTuxCaredrm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat7.8 HighrtlaTuxCarepmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled5.5 MediumrtlaTuxCaremmc: vub300: fix NULL-deref on disconnect5.5 Medium- Show moreLoading…