rv vulnerabilities (TuxCare)
2,097 vulnerabilities.
rvTuxCarescsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write7.8 HighrvTuxCaresctp: prevent peer transport count overflow8.8 HighrvTuxCaredrm/amd/pm: fix pptable use-after-free7.8 HighrvTuxCaredrm/vmwgfx: validate DRAW_PRIMITIVES header size before division7.8 HighrvTuxCareusb: typec: ucsi: Fix race condition and ordering in port unregistrationNo scorervTuxCarewifi: ath9k: fix OOB access from firmware tx status queue ID8.8 HighrvTuxCareRDMA/srpt: fix integer overflow in immediate data length check9.8 CriticalrvTuxCareRDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs7.8 HighrvTuxCareALSA: seq: midi: Serialize output teardown with event_input7.8 HighrvTuxCareconfigfs_lookup(): don't leave ->s_dentry dangling on failure7.8 HighrvTuxCareRDMA/siw: Fix endpoint/socket association handling9.8 CriticalrvTuxCareipv4: fib: Don't dump dying fib_info in fib_leaf_notify().7.8 HighrvTuxCaresctp: validate embedded address parameter length9.1 CriticalrvTuxCaretcp: clear sock_ops cb flags before force-closing a child socket9.8 CriticalrvTuxCarenfs: use nfsi->rwsem to protect traversal of the file lock list9.8 CriticalrvTuxCarexprtrdma: Fix ep kref imbalance on ADDR_CHANGE8.8 HighrvTuxCaremd/raid10: fix writes_pending and barrier reference leaks on discard failures7.5 HighrvTuxCaresctp: fix err_chunk memory leaks in INIT handling8.7 HighrvTuxCaretipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()7.8 HighrvTuxCarebpf: Mask pseudo pointer values in verifier logs4.8 MediumrvTuxCaresctp: add INIT verification after cookie unpacking9.8 CriticalrvTuxCarebridge: stp: Fix a potential use-after-free when deleting a bridge7.8 HighrvTuxCaresctp: fix addr_wq_timer race in sctp_free_addr_wq()7.8 HighrvTuxCaretipc: restrict socket queue dumps in enqueue tracepoints9.8 CriticalrvTuxCareASoC: SOF: ipc3-control: Validate size in snd_sof_update_control7.8 HighrvTuxCarenet: thunderbolt: Fix frags[] overflow by bounding frame_count8.8 HighrvTuxCarecan: isotp: use unconditional synchronize_rcu() in isotp_release()7.8 HighrvTuxCarecan: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER7.8 HighrvTuxCaredm-verity: fix buffer overflow in FEC calculation9.8 CriticalrvTuxCarenet/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete7.8 HighrvTuxCarelocking/rt: Fix the incorrect RCU protection in rt_spin_unlock()9.8 CriticalrvTuxCarenet: wwan: iosm: bound device offsets in the MUX downlink decoder8.8 HighrvTuxCareovl: check access to copy_file_range source with src mounter creds2.0 LowrvTuxCaredrm/vmwgfx: Validate vmw_surface_metadata::array_size7.8 HighrvTuxCarefirmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()No scorervTuxCarewifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925_mcu_bss_he_tlv()No scorervTuxCaredrm/amd/display: use kvzalloc to allocate struct dcNo scorervTuxCarelibceph: bound get_version reply decode to front len8.6 HighrvTuxCarevxlan: require CAP_NET_ADMIN in the device netns for changelink8.8 HighrvTuxCaredrm/amdgpu/gfx8: drop unecessary BUG_ON()No scorervTuxCaredrm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe()No scorervTuxCareKVM: x86/mmu: Fix use-after-free on vendor module reloadNo scorervTuxCarexfrm: fix stale skb->prev after async crypto steals a GSO segment9.8 CriticalrvTuxCareRDMA/irdma: Prevent rereg_mr for non-mem regions7.8 HighrvTuxCarewifi: cfg80211: cancel sched scan results work on unregister7.5 HighrvTuxCarewifi: mac80211_hwsim: clamp virtio RX length before skb_putNo scorervTuxCarewifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lockNo scorervTuxCarewifi: cfg80211: bound element ID read when checking non-inheritance7.1 HighrvTuxCareppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF7.8 HighrvTuxCarenet/iucv: take a reference on the socket found in afiucv_hs_rcv()8.8 High- Show moreLoading…