linux-hwe vulnerabilities (Ubuntu)
20,135 vulnerabilities.
linux-hweUbuntufs/resctrl: Prevent use-after-free in rdtgroup_kn_put()No scorelinux-hweUbuntufs/resctrl: Fix UAF from worker threads when domains are removedNo scorelinux-hweUbunturpmsg: glink: fix deadlock in endpoint destroy during driver detachNo scorelinux-hweUbuntucxl/mbox: Break poison list loop on an empty payloadNo scorelinux-hweUbuntucxl/features: Serialize multi-part Get/Set Feature transfersNo scorelinux-hweUbuntuhfsplus: validate thread record before delete key rebuild7.8 Highlinux-hweUbuntuwifi: ath12k: fix dp_link_peer dangling references on AP vdev rollbackNo scorelinux-hweUbuntufirmware: arm_scmi: Publish channel state before callbacksNo scorelinux-hweUbuntufirmware: arm_scmi: Unregister device notifier before IDR teardownNo scorelinux-hweUbuntufirmware: arm_scmi: Quiesce notifications before teardownNo scorelinux-hweUbuntufirmware: arm_scmi: Clean up channels on setup failureNo scorelinux-hweUbuntufirmware: arm_scmi: Free transport channel on IDR failureNo scorelinux-hweUbuntufirmware: arm_scmi: Avoid IDR updates while cleaning channelsNo scorelinux-hweUbuntufirmware: arm_scmi: Reject out of range DT protocol IDsNo scorelinux-hweUbuntufirmware: arm_scmi: Drop handle on protocol bind failuresNo scorelinux-hweUbuntufirmware: arm_scmi: Unwind TX receiver mailbox setup failureNo scorelinux-hweUbuntufirmware: arm_scmi: Unwind P2A receiver mailbox setup failureNo scorelinux-hweUbuntufirmware: arm_scmi: Fix SCMI device destroy lifetimesNo scorelinux-hweUbuntufirmware: arm_scmi: Fix transport device teardown lookupNo scorelinux-hweUbuntucxl/features: Reject Get Feature count larger than the output buffer7.8 Highlinux-hweUbuntucxl/features: Reject Set Features output buffer smaller than the headerNo scorelinux-hweUbuntucxl/features: Clamp Get Feature output size to the remaining bufferNo scorelinux-hweUbuntudax/fsdev: clear vmemmap_shift when binding static pgmapNo scorelinux-hweUbuntudax/fsdev: clear pgmap ops and owner on unbindNo scorelinux-hweUbuntudax/fsdev: use __va(phys) for kaddr in direct_access7.8 Highlinux-hweUbuntudax: read holder_ops once in dax_holder_notify_failure()No scorelinux-hweUbuntuirqchip/renesas-irqc: Fix generic interrupt chip leak on removeNo scorelinux-hweUbuntumedia: bcm2835-unicam: Fix asc leaked in error/remove pathNo scorelinux-hweUbuntumedia: ipu6: Do not free aux device pdata after init7.8 Highlinux-hweUbuntuOPP: Fix cleanup orderingNo scorelinux-hweUbuntudrm/amd/display: Fix DM I2C teardown raceNo scorelinux-hweUbuntudrm/bridge: tc358767: clamp the reported AUX read size to the request7.0 Highlinux-hweUbuntux86/mm/pat: Take cpa_lock around large-page collapseNo scorelinux-hweUbuntuwifi: iwlwifi: fix counter type in iwl_fwrt_dump_error_logsNo scorelinux-hweUbuntuwifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiserNo scorelinux-hweUbuntuwifi: iwlwifi: mei: check SAP message length before reading it8.4 Highlinux-hweUbuntuwifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragmentsNo scorelinux-hweUbuntugpu: host1x: Avoid stack over-read in debug output helpersNo scorelinux-hweUbuntudrm/msm/adreno: fix use after free on error path in a6xx_gpu_init()No scorelinux-hweUbuntudrm/msm: Fix task_struct reference leak in recover_worker4.8 Mediumlinux-hweUbuntudrm/msm: Only fini scheduler after successful initNo scorelinux-hweUbuntuscsi: ufs: core: Avoid possible memory reclaim deadlock in TX EQTR contextNo scorelinux-hweUbuntuusb: gadget: f_uac1_legacy: remove broken string configfs attributesNo scorelinux-hweUbuntuUDF symlink pathComponent header OOB read7.1 Highlinux-hweUbuntuuio: Fix stale info pointer in failed registration path7.0 Highlinux-hweUbuntuspeakup: keyhelp: guard letter_offsets possible out-of-range indexingNo scorelinux-hweUbuntumisc: bcm-vk: Use acquire/release for msgq_initedNo scorelinux-hweUbuntumisc: ad525x_dpot: use driver core groups for sysfs filesNo scorelinux-hweUbuntuipack: ipoctal: fix UAF, null-ptr-deref, and use-after-free in cleanup on removeNo scorelinux-hweUbuntumtd: mtdswap: Avoid freeing registered blktrans device twiceNo score- Show moreLoading…