linux-aws-hwe vulnerabilities (Ubuntu)
7,396 vulnerabilities.
linux-aws-hweUbuntumac802154: llsec: add skb_cow_data() before in-place crypto8.8 Highlinux-aws-hweUbuntunet: ip_gre: require CAP_NET_ADMIN in the device netns for changelink8.8 Highlinux-aws-hweUbuntuapparmor: mediate the implicit connect of TCP fast open sendmsg8.4 Highlinux-aws-hweUbuntuapparmor: fix use-after-free in rawdata dedup loop7.8 Highlinux-aws-hweUbuntufbdev: fix use-after-free in store_modes()7.8 Highlinux-aws-hweUbuntugcov: use atomic counter updates to fix concurrent access crashes9.8 Criticallinux-aws-hweUbuntukeys: Pin request_key_auth payload in instantiate paths7.8 Highlinux-aws-hweUbuntuf2fs: fix to do sanity check on f2fs_get_node_folio_ra()7.8 Highlinux-aws-hweUbuntuf2fs: validate orphan inode entry count8.4 Highlinux-aws-hweUbuntuf2fs: bound i_inline_xattr_size for non-inline-xattr inodes8.4 Highlinux-aws-hweUbuntuf2fs: validate ACL entry sizes in f2fs_acl_from_disk()7.8 Highlinux-aws-hweUbuntublock: Avoid mounting the bdev pseudo-filesystem in userspace6.8 Mediumlinux-aws-hweUbuntuKVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()7.1 Highlinux-aws-hweUbuntuhdlc_ppp: sync per-proto timers before freeing hdlc state7.8 Highlinux-aws-hweUbuntuirqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove5.5 Mediumlinux-aws-hweUbuntuocfs2: reject oversized group bitmap descriptors8.8 Highlinux-aws-hweUbuntufbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var5.5 Mediumlinux-aws-hweUbuntufbdev: omap2: fix use-after-free in omapfb_mmap7.8 Highlinux-aws-hweUbuntui2c: core: fix adapter registration race7.8 Highlinux-aws-hweUbuntunfsd: release layout stid on setlease failure9.8 Criticallinux-aws-hweUbuntunfsd: fix posix_acl leak on SETACL decode failure7.5 Highlinux-aws-hweUbuntuNFSv4/flexfiles: reject zero filehandle version count7.5 Highlinux-aws-hweUbuntuNFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr7.5 Highlinux-aws-hweUbuntufuse: re-lock request before replacing page cache folio7.8 Highlinux-aws-hweUbuntudrm/amdgpu/vce: Prevent partial address patches8.8 Highlinux-aws-hweUbuntudrm/amdgpu: zero-initialize GART table on allocation8.8 Highlinux-aws-hweUbuntuudf: reject descriptors with oversized CRC length8.4 Highlinux-aws-hweUbuntuf2fs: fix fsck inconsistency caused by incorrect nat_entry flag usage7.1 Highlinux-aws-hweUbuntuxfs: resample the data fork mapping after cycling ILOCK7.8 Highlinux-aws-hweUbuntuKVM: x86: Fix shadow paging use-after-free due to unexpected role8.8 Highlinux-aws-hweUbuntuBluetooth: L2CAP: use chan timer to close channels in cleanup_listen()8.8 Highlinux-aws-hweUbuntunet: rds: clear i_sends on setup unwind9.8 Criticallinux-aws-hweUbuntuarm64: errata: Mitigate TLBI errata on various Arm CPUs8.8 Highlinux-aws-hweUbuntuhsr: Remove WARN_ONCE() in hsr_addr_is_self().5.5 Mediumlinux-aws-hweUbuntusignal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()4.7 Mediumlinux-aws-hweUbuntunetfilter: nf_conntrack: destroy stale expectfn expectations on unregister5.5 Mediumlinux-aws-hweUbuntudrm/amd/display: Use krealloc_array() in dal_vector_reserve()7.0 Highlinux-aws-hweUbuntuagp/amd64: Fix broken error propagation in agp_amd64_probe()5.5 Mediumlinux-aws-hweUbuntunilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty()5.5 Mediumlinux-aws-hweUbuntupadata: Put CPU offline callback in ONLINE section to allow failure5.5 Mediumlinux-aws-hweUbuntuocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison9.8 Criticallinux-aws-hweUbuntutty: hvc_iucv: fix off-by-one in number of supported devices5.5 Mediumlinux-aws-hweUbuntuscsi: sg: Resolve soft lockup issue when opening /dev/sgX5.5 Mediumlinux-aws-hweUbuntumailbox: mailbox-test: free channels on probe error7.8 Highlinux-aws-hweUbuntumailbox: add sanity check for channel array5.5 Mediumlinux-aws-hweUbuntumailbox: mailbox-test: don't free the reused channel7.8 Highlinux-aws-hweUbuntunet: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind5.5 Mediumlinux-aws-hweUbuntuaudit: fix incorrect inheritable capability in CAPSET records5.5 Mediumlinux-aws-hweUbuntubtrfs: only release the dirty pages io tree after successful writes7.5 Highlinux-aws-hweUbuntuipv6: mcast: Fix use-after-free when processing MLD queries8.8 High- Show moreLoading…