rv vulnerabilities (TuxCare)
2,097 vulnerabilities.
rvTuxCarebpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()8.4 HighrvTuxCaredrm/edid: fix OOB read in drm_parse_tiled_block()7.1 HighrvTuxCareBluetooth: btusb: fix use-after-free on registration failure7.8 HighrvTuxCareBluetooth: btusb: fix use-after-free on marvell probe failure7.8 HighrvTuxCaresmb: client: restrict implied bcc[0] exemption to responses without data area8.2 HighrvTuxCarecrypto: qat - fix VF2PF work teardown race in adf_disable_sriov()8.8 HighrvTuxCarenetpoll: fix a use-after-free on shutdown path7.8 HighrvTuxCareipv4: igmp: remove multicast group from hash table on device destruction7.8 HighrvTuxCarenet: ipv4: bound TCP reordering sysctl writes and MTU probe sizes7.1 HighrvTuxCaresmb: client: fix query directory replay double-free9.8 CriticalrvTuxCaresmb: client: fix query_info() replay double-free9.8 CriticalrvTuxCaresmb: client: fix double-free in SMB2_ioctl() replay9.8 CriticalrvTuxCaresmb: client: fix change notify replay double-free9.8 CriticalrvTuxCaresmb: client: fix double-free in SMB2_flush() replay9.8 CriticalrvTuxCaresmb: client: fix double-free in SMB2_open() replay8.8 HighrvTuxCaresmb: client: Fix next buffer leak in receive_encrypted_standard()7.8 HighrvTuxCaresmb: client: harden POSIX SID length parsing8.2 HighrvTuxCaresmb: client: mask server-provided mode to 07777 in modefromsid7.1 HighrvTuxCarewriteback: fix race between cgroup_writeback_umount() and inode_switch_wbs()7.8 HighrvTuxCareproc: protect ptrace_may_access() with exec_update_lock (FD links)7.8 HighrvTuxCareproc: protect ptrace_may_access() with exec_update_lock (part 1)5.5 MediumrvTuxCareHID: lg-g15: cancel pending work on remove to fix a use-after-free7.8 HighrvTuxCarebpf: Validate BTF repeated field counts before expansion7.8 HighrvTuxCarebpf: Allow LPM map access from sleepable BPF programs7.8 HighrvTuxCareusb: free iso schedules on failed submit7.8 HighrvTuxCareUSB: idmouse: fix use-after-free on disconnect race7.8 HighrvTuxCareUSB: ldusb: fix use-after-free on disconnect race7.8 HighrvTuxCareUSB: iowarrior: fix use-after-free on disconnect7.8 HighrvTuxCareUSB: iowarrior: fix use-after-free on disconnect race7.8 HighrvTuxCareUSB: legousbtower: fix use-after-free on disconnect race7.8 HighrvTuxCareusb: typec: tcpm: Validate SVID index in svdm_consume_modes()7.8 HighrvTuxCareusb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove7.8 HighrvTuxCareudf: validate VAT header length against the VAT inode size7.1 HighrvTuxCareudf: validate sparing table length as an entry count, not a byte count7.8 HighrvTuxCarenvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page9.1 CriticalrvTuxCarenvmet-auth: validate reply message payload bounds against transfer length9.1 CriticalrvTuxCarecrypto: qat - protect service table iterations with service_lock7.8 HighrvTuxCarecrypto: qat - validate RSA CRT component lengths7.8 HighrvTuxCarespi: fsl-lpspi: terminate the RX channel on TX prepare failure path9.8 CriticalrvTuxCareNFSv4: include MAY_WRITE in open permission mask for O_TRUNC7.1 HighrvTuxCaremm: do file ownership checks with the proper mount idmap5.5 MediumrvTuxCareKVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU8.2 HighrvTuxCarei2c: core: fix adapter deregistration race7.8 HighrvTuxCareInput: elan_i2c - prevent division by zero and arithmetic underflow5.5 MediumrvTuxCareRDMA/siw: bound Read Response placement to the RREAD length9.8 CriticalrvTuxCarefuse: re-lock request before returning from fuse_ref_folio()7.8 HighrvTuxCaresmb: client: reject overlapping data areas in SMB2 responses9.1 CriticalrvTuxCareInput: elan_i2c - validate firmware size before use7.1 HighrvTuxCareocteontx2-af: CGX: add bounds check to cgx_speed_mbps index7.8 HighrvTuxCaredrm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async7.0 High- Show moreLoading…