rv vulnerabilities (TuxCare)
2,097 vulnerabilities.
rvTuxCaredrm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved5.7 MediumrvTuxCaremedia: pwc: Return queued buffers on start_streaming() failure7.8 HighrvTuxCaremedia: v4l2-ctrls: validate HEVC active reference counts7.8 HighrvTuxCareALSA: seq: close a re-opened queue timer in the destructor7.8 HighrvTuxCareALSA: timer: drain a slave's callback before its master detaches it7.8 HighrvTuxCarewifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper5.9 MediumrvTuxCareBluetooth: hci_sync: Protect UUID list traversal7.8 HighrvTuxCareBluetooth: RFCOMM: Fix session UAF in set_termios7.3 HighrvTuxCarebinfmt_misc: set have_execfd only once the interpreter is opened6.8 MediumrvTuxCaretracing: Fix mmiotrace possible NULL dereferencing of hiter->devNo scorervTuxCaretracing: Fix resource leak on mmiotrace trace_pipe closeNo scorervTuxCaremptcp: pm: userspace: fix use-after-free in get_local_id5.8 MediumrvTuxCaremm/damon/core: validate ranges in damon_set_regions()No scorervTuxCaresctp: avoid auth_enable sysctl UAF during netns teardown7.8 HighrvTuxCareceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()9.8 CriticalrvTuxCarelibceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE9.8 CriticalrvTuxCarelibceph: Fix multiplication overflow in decode_new_up_state_weight()9.8 CriticalrvTuxCarelibceph: refresh auth->authorizer_buf{,_len} after authorizer update9.8 CriticalrvTuxCarelibceph: Reject monmaps advertising zero monitors7.5 HighrvTuxCarelibceph: remove debugfs files before client teardown7.8 HighrvTuxCareiomap: fix out-of-bounds bitmap_set() with zero-length range7.8 HighrvTuxCarenet: slip: serialize receive against buffer reallocation7.8 HighrvTuxCaregeneve: require CAP_NET_ADMIN in the device netns for changelink8.8 HighrvTuxCarenet/sched: serialize qdisc_rtab_list against concurrent get/put7.8 HighrvTuxCarenet: gro: fix double aggregation of flush-marked skbs9.8 CriticalrvTuxCareice: fix PTP Call Trace during PTP releaseNo scorervTuxCarerbd: Reset positive result codes to zero in object map update path7.5 HighrvTuxCaregve: fix Rx queue stall on alloc failure7.5 HighrvTuxCaremac802154: llsec: reject frames shorter than the authentication tag8.8 HighrvTuxCareopenvswitch: fix GSO userspace truncation underflow9.8 CriticalrvTuxCarepppoe: reload header pointer after dev_hard_header()7.8 HighrvTuxCaredrm/amdgpu/gfx10: replace BUG_ON() with WARN_ON()6.8 MediumrvTuxCaredrm/amdgpu/gfx12: replace BUG_ON() with WARN_ON()6.8 MediumrvTuxCaredrm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON()6.8 MediumrvTuxCaredrm/amdgpu/vce: fix integer overflow in image size8.8 HighrvTuxCareKVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplugNo scorervTuxCareHID: wacom: stop hardware after post-start probe failures8.8 HighrvTuxCaredebugobjects: Plug race against a concurrent OOM disableNo scorervTuxCareBluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled8.0 HighrvTuxCaresmb: client: fix double-free in SMB2_close() replay9.8 CriticalrvTuxCareRDMA/rxe: Fix a use-after-free problem in rxe_mmap7.8 HighrvTuxCarexfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert5.7 MediumrvTuxCarenexthop: initialize extack in nh_res_bucket_migrate()7.1 HighrvTuxCarewifi: mac80211: tear down new links on vif update error path7.8 HighrvTuxCareipv4: fib: free fib_alias with kfree_rcu() on insert error path7.1 HighrvTuxCarewifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure7.8 HighrvTuxCaresctp: don't free the ASCONF's own transport in DEL-IP processing9.8 CriticalrvTuxCarerhashtable: clear stale iter->p on table restart7.8 HighrvTuxCareposix-cpu-timers: Prevent UAF caused by non-leader exec() race7.8 HighrvTuxCareKVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops()8.8 High- Show moreLoading…