rv vulnerabilities (TuxCare)
2,097 vulnerabilities.
rvTuxCaretty: skip cdev_del() when no cdev is registeredNo scorervTuxCaretty: clear cdev pointer after cdev_add() failure7.3 HighrvTuxCareRDMA/siw: Fix use-after-free in siw_accept()7.8 HighrvTuxCarenvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns()7.5 HighrvTuxCareSquashfs: check block offset is not negative7.1 HighrvTuxCareALSA: mtpav: shut down output timer before card teardown9.8 CriticalrvTuxCareip6mr: do not clone dst in ip6mr_cache_report()7.8 HighrvTuxCareNFSv4.2: fix LAYOUTSTATS send buffer exhaustion7.5 HighrvTuxCarelibceph: validate banner payload length7.5 HighrvTuxCareHID: sony: clean up device list on probe failure8.8 HighrvTuxCareALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()7.0 HighrvTuxCareHID: rmi: fix OOB access with undersized RMI reports8.8 HighrvTuxCarenvme: add missing SRCU grace period in error path9.8 CriticalrvTuxCarenvdimm/btt: reject an arena whose nfree is below the lane count7.8 HighrvTuxCareKVM: nVMX: Always flush vpid02 on first use8.8 HighrvTuxCarescsi: qla2xxx: Avoid double completion in async IOCB timeout9.8 CriticalrvTuxCaredrm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check7.1 HighrvTuxCareext4: fix out-of-bounds read in ext4_read_inline_dir()9.1 CriticalrvTuxCareisofs: fix out-of-bounds page array access on empty zisofs block9.8 CriticalrvTuxCareKEYS: trusted: Fix TPM teardown ordering7.8 HighrvTuxCareHID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature8.8 HighrvTuxCareNFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock9.8 CriticalrvTuxCarenfsd: validate symlink target length in NFSv4 CREATE7.5 HighrvTuxCarenfsd: defer vfree of compound ops to fix rpc_status UAF7.8 HighrvTuxCarenfsd: fix clock domain mismatch in clients_still_reclaiming()7.5 HighrvTuxCarenfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net8.1 HighrvTuxCarenfsd: gate nfs3 setacl by argp->mask9.1 CriticalrvTuxCareNFSD: Prevent client use-after-free during delegation revoke9.8 CriticalrvTuxCaresmb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T29.8 CriticalrvTuxCaresmb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()9.8 CriticalrvTuxCareHID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind5.4 MediumrvTuxCaredm raid1: reserve space for NUL-terminator in build_constructor_string()No scorervTuxCareip: orphan prefetched skbs before multicast forwarding7.8 HighrvTuxCarelibnvdimm/labels: Prevent integer overflow in __nd_label_validate()7.8 HighrvTuxCarempls: reload header after pskb_may_pull()9.8 CriticalrvTuxCarenouveau/gem: reserve the bo in the info ioctl around the vma lookup7.8 HighrvTuxCareSUNRPC: svcauth_gss: enforce krb5 token minimum length9.8 CriticalrvTuxCaresunrpc: defer rq_argp and rq_resp free until after RCU grace period7.8 HighrvTuxCareSUNRPC: harden gss_krb5_unwrap_v2 against short tokens9.8 CriticalrvTuxCaresvcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails8.8 HighrvTuxCaresvcrdma: Fix offset arithmetic in read_chunk_range9.8 CriticalrvTuxCareudf: reject VAT indexes equal to the entry count7.1 HighrvTuxCaresched/core: Make core-sched flips wait for in-flight selections7.8 HighrvTuxCareRDMA/ucma: Lock the handler in ucma_set_ib_path()7.8 HighrvTuxCareopenvswitch: Fix CT limit teardown use-after-free7.8 HighrvTuxCaresctp: drop a chunk if its transport was removed9.8 CriticalrvTuxCaresctp: fix stream->outcnt underflow on duplicate RECONF responses7.5 HighrvTuxCareiommu/vt-d: Force requesting ACS when tboot is enabled9.3 CriticalrvTuxCarenet: tun: bound receive headroom7.8 HighrvTuxCareseg6: reset IP6CB after IPv6 decapsulation9.8 Critical- Show moreLoading…