linux-hwe-6.8 vulnerabilities (Ubuntu)
9,876 vulnerabilities.
linux-hwe-6.8Ubuntusmb: client: use kzalloc to zero-initialize security descriptor buffer5.5 Mediumlinux-hwe-6.8UbuntuBluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt8.1 Highlinux-hwe-6.8Ubuntumptcp: pm: ADD_ADDR rtx: fix potential data-race9.8 Criticallinux-hwe-6.8Ubuntuwifi: mt76: mt7921: fix a potential clc buffer length underflow7.8 Highlinux-hwe-6.8Ubuntunvmet-tcp: fix race between ICReq handling and queue teardown9.8 Criticallinux-hwe-6.8UbuntuRDMA/rxe: Reject unknown opcodes before ICRC processing7.5 Highlinux-hwe-6.8Ubuntunet: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo5.5 Mediumlinux-hwe-6.8UbuntuKVM: x86: check for nEPT/nNPT in slow flush hypercalls5.5 Mediumlinux-hwe-6.8Ubuntudm-verity-fec: fix reading parity bytes split across blocks (take 3)7.1 Highlinux-hwe-6.8Ubuntubtrfs: fix double free in create_space_info() error path7.8 Highlinux-hwe-6.8Ubuntuipmi: Check event message buffer response for bad data5.5 Mediumlinux-hwe-6.8UbuntuRDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()5.5 Mediumlinux-hwe-6.8UbuntuRDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss()5.5 Mediumlinux-hwe-6.8Ubuntuwifi: mac80211: remove station if connection prep fails8.8 Highlinux-hwe-6.8Ubuntuisofs: validate block number from NFS file handle in isofs_export_iget7.5 Highlinux-hwe-6.8UbuntuBluetooth: virtio_bt: clamp rx length before skb_put7.7 Highlinux-hwe-6.8Ubuntuwifi: b43: enforce bounds check on firmware key index in b43_rx()7.8 Highlinux-hwe-6.8Ubuntumm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock7.8 Highlinux-hwe-6.8Ubuntuip6_gre: Use cached t->net in ip6erspan_changelink().7.8 Highlinux-hwe-6.8Ubuntulibceph: Fix slab-out-of-bounds access in auth message processing9.1 Criticallinux-hwe-6.8UbuntuRDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()7.8 Highlinux-hwe-6.8Ubuntuxfrm: defensively unhash xfrm_state lists in __xfrm_state_delete7.8 Highlinux-hwe-6.8Ubuntublock: add pgmap check to biovec_phys_mergeable9.8 Criticallinux-hwe-6.8UbuntuRDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads7.5 Highlinux-hwe-6.8UbuntuKVM: x86: Fix shadow paging use-after-free due to unexpected GFN8.8 Highlinux-hwe-6.8UbuntuRDMA/hns: Fix unlocked call to hns_roce_qp_remove()7.8 Highlinux-hwe-6.8UbuntuBluetooth: hci_conn: fix potential UAF in create_big_sync7.8 Highlinux-hwe-6.8Ubuntunet: stmmac: Prevent NULL deref when RX memory exhausted7.5 Highlinux-hwe-6.8Ubuntuipmi:si: Return state to normal if message allocation fails5.5 Mediumlinux-hwe-6.8Ubuntudm-thin: fix metadata refcount underflow7.8 Highlinux-hwe-6.8Ubuntueventfs: Hold eventfs_mutex and SRCU when remount walks events5.5 Mediumlinux-hwe-6.8UbuntuNULL pointer dereference in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation3.3 Lowlinux-hwe-6.8UbuntuUse of uninitialized value in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation rules3.3 Lowlinux-hwe-6.8UbuntuNULL pointer dereference in Ubuntu Linux AppArmor notification handling5.5 Mediumlinux-hwe-6.8UbuntuDeadlock or kernel panic in Ubuntu Linux AppArmor notification handling5.5 Mediumlinux-hwe-6.8UbuntuOut-of-bounds read in Ubuntu Linux AppArmor notification handling7.8 Highlinux-hwe-6.8UbuntuOut-of-bounds read in Ubuntu Linux AppArmor notification handling5.5 Mediumlinux-hwe-6.8UbuntuUse-after-free in Ubuntu Linux AppArmor notification handling7.8 Highlinux-hwe-6.8UbuntuUse of uninitialized value in Ubuntu Linux AppArmor notification handling3.3 Lowlinux-hwe-6.8UbuntuIncorrect validation of field size in Ubuntu Linux AppArmor notification responses3.3 Lowlinux-hwe-6.8UbuntuInvalid pointer deallocation in Ubuntu Linux AppArmor notification handling6.1 Mediumlinux-hwe-6.8UbuntuNULL pointer dereference in Ubuntu Linux AppArmor notification handling3.3 Lowlinux-hwe-6.8UbuntuMemory leak in Ubuntu Linux AppArmor large notification response allocation5.5 Mediumlinux-hwe-6.8Ubuntusmb: client: validate dacloffset before building DACL pointers9.8 Criticallinux-hwe-6.8Ubuntucan: ucan: fix devres lifetime5.5 Mediumlinux-hwe-6.8Ubuntunet: strparser: fix skb_head leak in strp_abort_strp()7.5 Highlinux-hwe-6.8Ubuntunetfilter: reject zero shift in nft_bitwise5.5 Mediumlinux-hwe-6.8Ubuntunet: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels8.1 Highlinux-hwe-6.8Ubuntunet: caif: clear client service pointer on teardown5.5 Mediumlinux-hwe-6.8Ubuntuext4: fix bounds check in check_xattrs() to prevent out-of-bounds access7.1 High- Show moreLoading…