linux-aws-hwe vulnerabilities (Ubuntu)
7,396 vulnerabilities.
linux-aws-hweUbuntuipvs: clear the svc scheduler ptr early on edit7.8 Highlinux-aws-hweUbuntunetfilter: conntrack_irc: fix possible out-of-bounds read8.2 Highlinux-aws-hweUbuntunetfilter: nft_ct: bail out on template ct in get eval7.8 Highlinux-aws-hweUbuntunet/sched: act_api: use RCU with deferred freeing for action lifecycle7.8 Highlinux-aws-hweUbuntu6lowpan: fix off-by-one in multicast context address compression5.5 Mediumlinux-aws-hweUbuntul2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()7.8 Highlinux-aws-hweUbuntuBluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()8.0 Highlinux-aws-hweUbuntuBluetooth: MGMT: validate advertising TLV before type checks7.1 Highlinux-aws-hweUbuntuBluetooth: RFCOMM: validate skb length in MCC handlers8.1 Highlinux-aws-hweUbuntuBluetooth: bnep: reject short frames before parsing7.1 Highlinux-aws-hweUbuntuipv4: restrict IPOPT_SSRR and IPOPT_LSRR options5.5 Mediumlinux-aws-hweUbuntusctp: validate cached peer INIT chunk length in COOKIE_ECHO processing9.8 Criticallinux-aws-hweUbuntunet/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr5.5 Mediumlinux-aws-hweUbuntunetlabel: validate unlabeled address and mask attribute lengths5.5 Mediumlinux-aws-hweUbuntugpio: mvebu: fix NULL pointer dereference in suspend/resume5.5 Mediumlinux-aws-hweUbuntutcp: restrict SO_ATTACH_FILTER to priv users5.5 Mediumlinux-aws-hweUbuntunet/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list8.7 Highlinux-aws-hweUbuntuipv6: sit: reload inner IPv6 header after GSO offloads9.8 Criticallinux-aws-hweUbuntunet: openvswitch: fix possible kfree_skb of ERR_PTR5.5 Mediumlinux-aws-hweUbuntusctp: fix uninit-value in __sctp_rcv_asconf_lookup()9.1 Criticallinux-aws-hweUbuntusctp: validate embedded INIT chunk and address list lengths in cookie9.1 Criticallinux-aws-hweUbuntunet: guard timestamp cmsgs to real error queue skbs7.1 Highlinux-aws-hweUbuntuip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()9.8 Criticallinux-aws-hweUbuntunetfilter: revalidate bridge ports5.5 Mediumlinux-aws-hweUbuntunetfilter: x_tables: avoid leaking percpu counter pointers5.5 Mediumlinux-aws-hweUbuntunetfilter: nft_exthdr: fix register tracking for F_PRESENT flag5.5 Mediumlinux-aws-hweUbuntunet: mvpp2: refill RX buffers before XDP or skb use9.8 Criticallinux-aws-hweUbuntudrm/vc4: fix krealloc() memory leak5.5 Mediumlinux-aws-hweUbuntunetfilter: nft_tunnel: fix use-after-free on object destroy7.8 Highlinux-aws-hweUbuntuBluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig5.5 Mediumlinux-aws-hweUbuntuhv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf7.5 Highlinux-aws-hweUbuntuUSB: serial: io_ti: fix heap overflow in get_manuf_info()6.8 Mediumlinux-aws-hweUbuntuUSB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr()7.8 Highlinux-aws-hweUbuntuUSB: serial: kl5kusb105: fix bulk-out buffer overflow7.8 Highlinux-aws-hweUbuntuRDMA/srp: bound SRP_RSP sense copy by the received length9.1 Criticallinux-aws-hweUbuntuzram: fix use-after-free in zram_bvec_write_partial()7.8 Highlinux-aws-hweUbuntuvsock/vmci: fix sk_ack_backlog leak on failed handshake5.5 Mediumlinux-aws-hweUbuntuIB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN9.8 Criticallinux-aws-hweUbuntufuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios5.5 Mediumlinux-aws-hweUbuntunet: phonet: free phonet_device after RCU grace period7.8 Highlinux-aws-hweUbunturxrpc: Fix the ACK parser to extract the SACK table for parsing9.8 Criticallinux-aws-hweUbuntuthunderbolt: Reject zero-length property entries in validator5.5 Mediumlinux-aws-hweUbuntuthunderbolt: Bound root directory content to block size7.1 Highlinux-aws-hweUbuntuthunderbolt: Clamp XDomain response data copy to allocation size7.8 Highlinux-aws-hweUbuntuthunderbolt: Validate XDomain request packet size before type cast8.1 Highlinux-aws-hweUbuntuthunderbolt: Limit XDomain response copy to actual frame size7.1 Highlinux-aws-hweUbuntudrm/amd/display: Bound VBIOS record-chain walk loops7.1 Highlinux-aws-hweUbuntudrm/amd/display: Clamp VBIOS HDMI retimer register count to array size7.8 Highlinux-aws-hweUbuntunetfilter: nft_fib: fix stale stack leak via the OIFNAME register5.5 Mediumlinux-aws-hweUbuntunetfilter: require Ethernet MAC header before using eth_hdr()9.4 Critical- Show moreLoading…