rv vulnerabilities (TuxCare)
2,097 vulnerabilities.
rvTuxCareASoC: wm_adsp: Fix NULL dereference when removing firmware controls5.5 MediumrvTuxCaredrm/virtio: Fix driver removal with disabled KMS5.5 MediumrvTuxCarenet: bonding: fix NULL pointer dereference in bond_do_ioctl()5.5 MediumrvTuxCaredrm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval()7.1 HighrvTuxCaredrm/amd/display: Use krealloc_array() in dal_vector_reserve()7.0 HighrvTuxCarenet: mana: Use pci_name() for debugfs directory naming5.5 MediumrvTuxCareio_uring/napi: cap busy_poll_to 10 msec5.5 MediumrvTuxCarewifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr()5.5 MediumrvTuxCarewifi: mt76: mt7921: Place upper limit on station AID5.5 MediumrvTuxCaretty: hvc_iucv: fix off-by-one in number of supported devices5.5 MediumrvTuxCarescsi: sg: Resolve soft lockup issue when opening /dev/sgX5.5 MediumrvTuxCaremailbox: add sanity check for channel array5.5 MediumrvTuxCaremailbox: mailbox-test: don't free the reused channel7.8 HighrvTuxCareALSA: hda/conexant: Fix missing error check for jack detection5.5 MediumrvTuxCareaudit: fix incorrect inheritable capability in CAPSET records5.5 MediumrvTuxCareiommu/vt-d: Avoid NULL pointer dereference or refcount corruption8.8 HighrvTuxCareipv6: mcast: Fix use-after-free when processing MLD queries8.8 HighrvTuxCareipvs: clear the svc scheduler ptr early on edit7.8 HighrvTuxCarenetfilter: synproxy: add mutex to guard hook reference counting5.5 MediumrvTuxCarenetfilter: conntrack_irc: fix possible out-of-bounds read8.2 HighrvTuxCarenetfilter: bridge: make ebt_snat ARP rewrite writable8.8 HighrvTuxCare6lowpan: fix off-by-one in multicast context address compression5.5 MediumrvTuxCareBluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()8.0 HighrvTuxCareBluetooth: MGMT: validate advertising TLV before type checks7.1 HighrvTuxCareBluetooth: RFCOMM: validate skb length in MCC handlers8.1 HighrvTuxCareBluetooth: bnep: reject short frames before parsing7.1 HighrvTuxCareBluetooth: fix memory leak in error path of hci_alloc_dev()5.5 MediumrvTuxCareBluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync5.5 MediumrvTuxCarexsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata()7.8 HighrvTuxCareipv4: restrict IPOPT_SSRR and IPOPT_LSRR options5.5 MediumrvTuxCaresctp: validate cached peer INIT chunk length in COOKIE_ECHO processing9.8 CriticalrvTuxCarenet/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr5.5 MediumrvTuxCareALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams7.8 HighrvTuxCareALSA: seq: dummy: fix UMP event stack overread5.5 MediumrvTuxCarexfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()7.8 HighrvTuxCarenetlabel: validate unlabeled address and mask attribute lengths5.5 MediumrvTuxCaretcp: restrict SO_ATTACH_FILTER to priv users5.5 MediumrvTuxCarenet/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list8.7 HighrvTuxCarenet/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure7.5 HighrvTuxCareipv6: sit: reload inner IPv6 header after GSO offloads9.8 CriticalrvTuxCarenet: openvswitch: fix possible kfree_skb of ERR_PTR5.5 MediumrvTuxCaresctp: validate embedded INIT chunk and address list lengths in cookie9.1 CriticalrvTuxCarenet: guard timestamp cmsgs to real error queue skbs7.1 HighrvTuxCareip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()9.8 CriticalrvTuxCarenetfilter: x_tables: avoid leaking percpu counter pointers5.5 MediumrvTuxCarenetfilter: nft_exthdr: fix register tracking for F_PRESENT flag5.5 MediumrvTuxCarenetfilter: nft_tunnel: fix use-after-free on object destroy7.8 HighrvTuxCareBluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig5.5 MediumrvTuxCareaccel/ivpu: Add bounds check for firmware runtime memory5.5 MediumrvTuxCareaccel/ivpu: Add bounds checks for firmware log indices7.1 High- Show moreLoading…