linux-hwe-6.8 vulnerabilities (Ubuntu)
9,876 vulnerabilities.
linux-hwe-6.8Ubuntunet/sched: act_ct: fix sk_buff leak when the header checks reject a packet7.5 Highlinux-hwe-6.8Ubuntunet/sched: act_gact, act_police: range check the fallback control action6.8 Mediumlinux-hwe-6.8Ubuntuovl: don't warn when the mount is completed from another user namespace6.8 Mediumlinux-hwe-6.8Ubuntubinfmt_misc: don't warn when the mount is completed from another user namespace6.8 Mediumlinux-hwe-6.8Ubuntuxdp: reject clones that overrun skb_shared_info tailroom9.8 Criticallinux-hwe-6.8Ubuntuvxlan: do not arm the ageing timer on a device that is down8.8 Highlinux-hwe-6.8Ubuntuvsock/virtio: read virtqueues under worker locks8.4 Highlinux-hwe-6.8Ubuntuvsock/virtio: avoid refilling the RX queue after teardown7.8 Highlinux-hwe-6.8Ubuntuveth: fix skb length accounting after XDP frag adjustment10.0 Criticallinux-hwe-6.8Ubuntutls: rx: restore msg_iter before TLS 1.3 optimistic retry9.8 Criticallinux-hwe-6.8Ubuntutls: don't leave a full plaintext sk_msg ring unpushed7.8 Highlinux-hwe-6.8Ubuntutipc: read le->link under the node lock in tipc_node_link_down()7.8 Highlinux-hwe-6.8Ubuntusmb: client: Fix use-after-free in cifs_try_adding_channels()9.8 Criticallinux-hwe-6.8UbuntuKVM: SVM: Serialize accesses to the owner and mirror list with separate lock8.8 Highlinux-hwe-6.8Ubuntueventfs: Fix use-after-free in eventfs_remove_rec()7.8 Highlinux-hwe-6.8Ubuntueventfs: Use children field for rcu head and add memory barriers7.8 Highlinux-hwe-6.8UbuntuRevert "thermal/drivers/hwmon: Cleanup coding style a bit"8.4 Highlinux-hwe-6.8Ubuntuptp: ocp: Fix board ID over-read7.1 Highlinux-hwe-6.8Ubunturing-buffer: Initialise reader page order in rb_allocate_cpu_buffer()No scorelinux-hwe-6.8Ubunturing-buffer: Use current_context for safe per-CPU buffer swap7.8 Highlinux-hwe-6.8Ubuntumm/page_table_check: skip special zero mappings5.7 Mediumlinux-hwe-6.8Ubuntumm/ptdump: always stabilise against page table freeing using init_mmNo scorelinux-hwe-6.8Ubuntuipv6: fix Route Information option length validation7.5 Highlinux-hwe-6.8Ubuntuip6_tunnel: clear skb2->cb[] in ip6ip6_err()9.8 Criticallinux-hwe-6.8Ubuntufscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()7.8 Highlinux-hwe-6.8Ubuntusched/psi: Shut down rtpoll_timer in psi_cgroup_free()7.8 Highlinux-hwe-6.8Ubuntuima: Instantiate file_truncate and path_truncate hooks8.1 Highlinux-hwe-6.8Ubuntufsverity: Fix bpf_get_fsverity_digest() dynptr assumptions7.8 Highlinux-hwe-6.8Ubuntubpf, sockmap: Fix sk_redir use-after-free in send verdict8.4 Highlinux-hwe-6.8Ubuntusctp: keep chunk->transport in step with the list it is queued on9.8 Criticallinux-hwe-6.8Ubuntusctp: fix use-after-free of cached ASCONF chunk9.8 Criticallinux-hwe-6.8Ubuntusctp: clear new_transport when removing a peer9.8 Criticallinux-hwe-6.8Ubuntuthunderbolt: Bound the DROM dual link port number before indexing sw->ports7.0 Highlinux-hwe-6.8UbuntuRDMA/bnxt_re: zero shared page before exposing to userspace7.1 Highlinux-hwe-6.8Ubuntunet/sched: cls_route: fix fastmap use-after-free on filter7.8 Highlinux-hwe-6.8Ubuntupacket: use consistent hard_header_len in non-ring send paths7.8 Highlinux-hwe-6.8Ubuntunet: ipv6: clear suppressed fib6 rule result9.8 Criticallinux-hwe-6.8Ubuntunetfilter: nft_payload: fix mask build for partial field offload7.1 Highlinux-hwe-6.8Ubuntuvhost: reset the vring metadata cache on vring reconfiguration8.8 Highlinux-hwe-6.8Ubuntucrypto: algif_skcipher - force synchronous processing on trees without ctx->state7.1 Highlinux-hwe-6.8Ubuntunet: mpls: initialize rtm_tos in mpls_getroute()4.8 Mediumlinux-hwe-6.8Ubuntuthunderbolt: Prevent XDomain delayed work use-after-free on disconnect8.8 Highlinux-hwe-6.8Ubuntudmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open()7.8 Highlinux-hwe-6.8Ubuntubtrfs: zoned: fix deadlock between metadata writeback and transaction commit7.5 Highlinux-hwe-6.8Ubuntubtrfs: skip global block reserve accounting for rescue mountsNo scorelinux-hwe-6.8Ubuntunetfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()9.8 Criticallinux-hwe-6.8Ubuntukeys: fix out-of-bounds read in keyring_get_key_chunk()7.1 Highlinux-hwe-6.8Ubuntukeys: make keyring key-chunk byte order agree with keyring_diff_objects()6.9 Mediumlinux-hwe-6.8Ubuntunetfilter: nf_tables: make nft_object rhltable per table7.8 Highlinux-hwe-6.8Ubuntunetfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH7.1 High- Show moreLoading…