linux-iot vulnerabilities (Ubuntu)
8,181 vulnerabilities.
linux-iotUbuntunetfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read9.1 Criticallinux-iotUbuntubatman-adv: gw: acquire ethernet header only after skb realloc8.8 Highlinux-iotUbuntubatman-adv: dat: acquire ARP hw source only after skb realloc9.8 Criticallinux-iotUbuntubatman-adv: dat: ensure accessible eth_hdr proto field8.1 Highlinux-iotUbuntumtd: maps: vmu-flash: fix NULL pointer dereference in initialization5.1 Mediumlinux-iotUbuntuInput: ims-pcu - add response length checks5.2 Mediumlinux-iotUbuntuInput: ims-pcu - fix potential infinite loop in CDC union descriptor parsing5.1 Mediumlinux-iotUbuntuhwmon: (asus_atk0110) Check package count before accessing element8.4 Highlinux-iotUbuntuf2fs: fix listxattr handling of corrupted xattr entries7.8 Highlinux-iotUbuntuinet: frags: strip GSO state from fragments before reassembly8.6 Highlinux-iotUbuntus390/qeth: validate user buffer length in SNMP and ARP query ioctls8.4 Highlinux-iotUbuntufbdev: bound mode sysfs output to the sysfs buffer7.8 Highlinux-iotUbuntufbdev: clear fb_info->mode before deleting a videomode7.8 Highlinux-iotUbuntudrm/amdgpu: reject oversized IBs with per-ring packet limits8.8 Highlinux-iotUbuntuInput: focaltech - fix array out-of-bounds in focaltech_process_rel_packet8.4 Highlinux-iotUbuntuInput: iforce - validate input packet lengths5.2 Mediumlinux-iotUbuntuInput: byd - synchronize timer deletion before freeing private data7.8 Highlinux-iotUbuntuInput: synaptics-rmi4 - zero report size on F54 work error7.8 Highlinux-iotUbuntuInput: synaptics-rmi4 - bound the F54 report size to the allocated buffer7.8 Highlinux-iotUbuntuInput: synaptics-rmi4 - block s_input when F54 queue is busy7.8 Highlinux-iotUbuntuInput: synaptics-rmi4 - propagate F54 worker errors to V4L2 queueNo scorelinux-iotUbuntucrypto: qce - fix error path in devm_qce_register_algs7.8 Highlinux-iotUbuntugpio: ml-ioh: use raw_spinlock_t for the register lock5.7 Mediumlinux-iotUbuntulibceph: fix multiple unsafe decodes in decode_locker()9.8 Criticallinux-iotUbuntuopenrisc: signal: do not restore privileged SR bits on sigreturn7.8 Highlinux-iotUbuntuInput: sur40 - fix input device registration ordering7.8 Highlinux-iotUbuntulibceph: Avoid using invalid osd indices from primary_temp9.8 Criticallinux-iotUbuntulibceph: fix OOB read in decode_watchers() via missing bounds check9.8 Criticallinux-iotUbuntummc: atmel-mci: Fix use-after-free in atmci_remove due to race condition7.8 Highlinux-iotUbuntus390/vfio_ccw: Free all memory if cp_init() fails7.1 Highlinux-iotUbuntus390/vfio_ccw: Limit the number of channel program segments9.3 Criticallinux-iotUbuntus390/vfio_ccw: Cancel existing workqueues8.8 Highlinux-iotUbuntus390/vfio_ccw: Ensure index for read/write regions are within range8.8 Highlinux-iotUbuntus390/vfio_ccw: Ensure first IDAW remains constant9.3 Criticallinux-iotUbuntus390/vfio_ccw: Fix out of bounds check on CCW array7.9 Highlinux-iotUbuntus390/vfio_ccw: Selectively expand io_mutex8.8 Highlinux-iotUbuntudrm/amdgpu: validate GEM_CREATE domain combinations7.8 Highlinux-iotUbuntudrm/amdgpu: Fix UVD decode image min size calculation7.8 Highlinux-iotUbuntudrm/amdgpu: disallow multiple FENCE chunks in one submit6.8 Mediumlinux-iotUbuntuxfs: bounds-check buffer log item's dirty bitmap8.4 Highlinux-iotUbuntuxfs: fix ilock leak on error in xfs_dq_get_next_id7.0 Highlinux-iotUbuntuceph: avoid fs reclaim while using current->journal_info9.8 Criticallinux-iotUbuntuscsi: core: pair EH runtime PM get and putNo scorelinux-iotUbuntusctp: validate cookie AUTH state before use9.8 Criticallinux-iotUbuntunetfilter: ipset: fix refcount race between list:set GC and swap7.8 Highlinux-iotUbuntuipvs: revalidate ihl to prevent out-of-bounds access7.8 Highlinux-iotUbuntunetfilter: flowtable: publish GC-visible tuple last9.8 Criticallinux-iotUbuntuipvlan: inherit needed_headroom and needed_tailroom from phy_dev9.8 Criticallinux-iotUbuntumacvlan: inherit needed_headroom and needed_tailroom from lowerdev9.8 Criticallinux-iotUbuntunet/sched: act_api: fix TOCTOU NULL deref on a->goto_chain5.7 Medium- Show moreLoading…