linux-azure-5.15 vulnerabilities (Ubuntu)
10,997 vulnerabilities.
linux-azure-5.15Ubuntucan: peak_usb: add bounds check for USB channel index5.1 Mediumlinux-azure-5.15Ubuntucan: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error7.8 Highlinux-azure-5.15Ubuntucan: peak_usb: validate uCAN receive record lengths5.2 Mediumlinux-azure-5.15Ubuntudrm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size7.8 Highlinux-azure-5.15Ubuntudrm/vc4: Zero the tile state data array before each BIN job7.8 Highlinux-azure-5.15Ubuntudrm/amd/pm: fix pptable use-after-free7.8 Highlinux-azure-5.15Ubuntudrm/vmwgfx: reject DX_BIND_QUERY without a DX context6.8 Mediumlinux-azure-5.15Ubuntudrm/vmwgfx: validate DRAW_PRIMITIVES header size before division7.8 Highlinux-azure-5.15Ubuntudrm/vmwgfx: bound DMA command body size against suffix pointer8.8 Highlinux-azure-5.15Ubuntuusb: typec: ucsi: Fix race condition and ordering in port unregistrationNo scorelinux-azure-5.15Ubuntucrypto: sun4i-ss - Remove insecure and unused rng_alg7.8 Highlinux-azure-5.15Ubunturxrpc: serialize kernel accept preallocation with socket teardown9.8 Criticallinux-azure-5.15Ubuntuafs: Fix netns teardown to cancel the preallocation charger9.8 Criticallinux-azure-5.15Ubuntuafs: fix NULL pointer dereference in afs_get_tree()No scorelinux-azure-5.15Ubuntufbcon: fix NULL pointer dereference for a console without vc_dataNo scorelinux-azure-5.15Ubuntudrm/radeon: fix integer overflow in radeon_align_pitch()7.8 Highlinux-azure-5.15Ubuntudrm/radeon: fix memory leak in radeon_ring_restore() on lock failure5.7 Mediumlinux-azure-5.15Ubuntuwifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer8.1 Highlinux-azure-5.15Ubuntuwifi: ath9k: fix OOB access from firmware tx status queue ID8.8 Highlinux-azure-5.15Ubuntuvxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().9.8 Criticallinux-azure-5.15UbuntuOPP: Fix race between OPP addition and lookup7.8 Highlinux-azure-5.15Ubuntucrypto: atmel-sha204a - fix blocking and non-blocking rng logicNo scorelinux-azure-5.15Ubuntudlm: fix add msg handle in send_queue ordered9.8 Criticallinux-azure-5.15Ubuntuevm: terminate and bound the evm_xattrs read bufferNo scorelinux-azure-5.15Ubuntuipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD9.8 Criticallinux-azure-5.15UbuntuIB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier7.8 Highlinux-azure-5.15UbuntuRDMA/mlx5: Fix devx subscribe-event unwind NULL dereference6.8 Mediumlinux-azure-5.15UbuntuRDMA/srpt: fix integer overflow in immediate data length check9.8 Criticallinux-azure-5.15Ubuntutracing: Bound synthetic-field strings with seq_bufNo scorelinux-azure-5.15UbuntuRDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs7.8 Highlinux-azure-5.15UbuntuRDMA/hns: Fix log flood after cmd_mbox failureNo scorelinux-azure-5.15UbuntuALSA: seq: oss: Fix UAF at handling events with embedded SysEx data7.8 Highlinux-azure-5.15UbuntuALSA: seq: midi: Serialize output teardown with event_input7.8 Highlinux-azure-5.15Ubuntunvmet-tcp: fix page fragment cache leak in error path8.2 Highlinux-azure-5.15Ubuntunvme-multipath: fix flex array size in struct nvme_ns_head9.8 Criticallinux-azure-5.15Ubuntunet/sched: cls_bpf: prevent unbounded recursion in offload rollbackNo scorelinux-azure-5.15Ubuntugpu: host1x: Fix iommu_map_sgtable() return value check8.8 Highlinux-azure-5.15Ubuntudax/kmem: account for partial discontiguous resource upon removalNo scorelinux-azure-5.15UbuntuRDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe7.8 Highlinux-azure-5.15UbuntuRDMA/rxe: Copy WQE to local buffer in non-SRQ receive path7.8 Highlinux-azure-5.15Ubuntumd/raid10: reset read_slot when reusing r10bio for discard9.8 Criticallinux-azure-5.15Ubuntumd/raid1,raid10: fix error-path detection with md_cloned_bio()7.5 Highlinux-azure-5.15Ubuntunvdimm/btt: Handle preemption in BTT lane acquisition7.3 Highlinux-azure-5.15Ubuntubpf: fix UAF by restoring RCU-delayed inode freeing in bpffs7.8 Highlinux-azure-5.15Ubuntuconfigfs_lookup(): don't leave ->s_dentry dangling on failure7.8 Highlinux-azure-5.15Ubuntuocfs2: rebase copied fsdlm LVB pointers in locking_stateNo scorelinux-azure-5.15Ubuntuocfs2: validate fast symlink target during inode read9.8 Criticallinux-azure-5.15Ubuntuocfs2: reject FITRIM ranges shorter than a cluster7.1 Highlinux-azure-5.15Ubuntuocfs2/dlm: require a ref for locking_state debugfs openNo scorelinux-azure-5.15Ubuntunetfilter: cttimeout: detach dataplane timeout policy and repurpose refcount7.8 High- Show moreLoading…