linux-hwe vulnerabilities (Ubuntu)
20,135 vulnerabilities.
linux-hweUbuntuxdp: reject clones that overrun skb_shared_info tailroom9.8 Criticallinux-hweUbuntuvxlan: do not arm the ageing timer on a device that is down8.8 Highlinux-hweUbuntuvsock/virtio: read virtqueues under worker locks8.4 Highlinux-hweUbuntuvsock/virtio: avoid refilling the RX queue after teardown7.8 Highlinux-hweUbuntuveth: fix skb length accounting after XDP frag adjustment10.0 Criticallinux-hweUbuntutls: rx: restore msg_iter before TLS 1.3 optimistic retry9.8 Criticallinux-hweUbuntutls: don't leave a full plaintext sk_msg ring unpushed7.8 Highlinux-hweUbuntutipc: read le->link under the node lock in tipc_node_link_down()7.8 Highlinux-hweUbuntusmb: client: Fix use-after-free in cifs_try_adding_channels()9.8 Criticallinux-hweUbuntuKVM: SVM: Serialize accesses to the owner and mirror list with separate lock8.8 Highlinux-hweUbuntueventfs: Fix use-after-free in eventfs_remove_rec()7.8 Highlinux-hweUbuntueventfs: Use children field for rcu head and add memory barriers7.8 Highlinux-hweUbuntuRevert "thermal/drivers/hwmon: Cleanup coding style a bit"8.4 Highlinux-hweUbuntuptp: ocp: Fix board ID over-read7.1 Highlinux-hweUbunturing-buffer: Initialise reader page order in rb_allocate_cpu_buffer()No scorelinux-hweUbunturing-buffer: Use current_context for safe per-CPU buffer swap7.8 Highlinux-hweUbuntumm/page_table_check: skip special zero mappings5.7 Mediumlinux-hweUbuntumm/ptdump: always stabilise against page table freeing using init_mmNo scorelinux-hweUbuntuipv6: fix Route Information option length validation7.5 Highlinux-hweUbuntuip6_tunnel: clear skb2->cb[] in ip6ip6_err()9.8 Criticallinux-hweUbuntufs,fsverity: remove check for fsverity being enabled in setattr_prepare()2.0 Lowlinux-hweUbuntufscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()7.8 Highlinux-hweUbuntusched/psi: Shut down rtpoll_timer in psi_cgroup_free()7.8 Highlinux-hweUbuntusched_ext: Take cgroup_lock() first in scx_cgroup_lock()5.6 Mediumlinux-hweUbuntuima: Instantiate file_truncate and path_truncate hooks8.1 Highlinux-hweUbuntumm/filemap: __filemap_add_folio() restore index before retrying9.8 Criticallinux-hweUbuntufsverity: Fix bpf_get_fsverity_digest() dynptr assumptions7.8 Highlinux-hweUbuntubpf, sockmap: Fix sk_redir use-after-free in send verdict8.4 Highlinux-hweUbuntusctp: keep chunk->transport in step with the list it is queued on9.8 Criticallinux-hweUbuntusctp: fix use-after-free of cached ASCONF chunk9.8 Criticallinux-hweUbuntusctp: clear new_transport when removing a peer9.8 Criticallinux-hweUbuntuthunderbolt: Bound the DROM dual link port number before indexing sw->ports7.0 Highlinux-hweUbuntuRDMA/bnxt_re: zero shared page before exposing to userspace7.1 Highlinux-hweUbuntunet/sched: cls_route: fix fastmap use-after-free on filter7.8 Highlinux-hweUbuntupacket: use consistent hard_header_len in non-ring send paths7.8 Highlinux-hweUbuntunet: ipv6: clear suppressed fib6 rule result9.8 Criticallinux-hweUbuntunetfilter: nft_payload: fix mask build for partial field offload7.1 Highlinux-hweUbuntuvhost: reset the vring metadata cache on vring reconfiguration8.8 Highlinux-hweUbuntucrypto: algif_skcipher - force synchronous processing on trees without ctx->state7.1 Highlinux-hweUbuntunet: mpls: initialize rtm_tos in mpls_getroute()4.8 Mediumlinux-hweUbuntumm/slab: prevent unbounded recursion in free path with new kmalloc type7.5 Highlinux-hweUbuntuthunderbolt: Prevent XDomain delayed work use-after-free on disconnect8.8 Highlinux-hweUbuntudmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open()7.8 Highlinux-hweUbuntuiommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for a vDEVICE9.3 Criticallinux-hweUbuntubtrfs: zoned: fix deadlock between metadata writeback and transaction commit7.5 Highlinux-hweUbuntubtrfs: skip global block reserve accounting for rescue mountsNo scorelinux-hweUbuntuntfs: harden runlist realloc size calculations9.8 Criticallinux-hweUbuntunetfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()9.8 Criticallinux-hweUbuntuKVM: arm64: vgic: Fix race between LPI release and re-registration9.3 Criticallinux-hweUbuntukeys: fix out-of-bounds read in keyring_get_key_chunk()7.1 High- Show moreLoading…