linux-iot vulnerabilities (Ubuntu)
8,181 vulnerabilities.
linux-iotUbuntuRDMA/rxe: Fix OOB in free_rd_atomic_resources()8.5 Highlinux-iotUbuntuusb: xhci: bail out of setup if the controller is inaccessible5.1 Mediumlinux-iotUbuntuusb: gadget: f_tcm: keep port count until LUN teardown completes9.8 Criticallinux-iotUbuntutls: device: fix out-of-bounds write in tls_append_frag()7.3 Highlinux-iotUbuntugtp: serialize PDP context updatesNo scorelinux-iotUbuntutcp: clamp route advmss to TCP_MIN_MSS6.8 Mediumlinux-iotUbuntuxfrm: ah6: validate routing header segments_left7.3 Highlinux-iotUbuntuxfrm: fix xfrm_state_construct() auth-trunc leak6.8 Mediumlinux-iotUbuntunet/packet: defer vmalloc TX_RING free until skbs finish7.3 Highlinux-iotUbuntuipv6: seg6: clear IPv4 control block on IPIP decapsulation9.2 Criticallinux-iotUbuntucrypto: mxs-dcp - fix source scatterlist length access6.9 Mediumlinux-iotUbuntuusb: core: Add lock to usb_wakeup_notification()5.4 Mediumlinux-iotUbuntuALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output()5.1 Mediumlinux-iotUbuntuALSA: usb-audio: Complete cleanup after system-resume errors5.1 Mediumlinux-iotUbuntuUSB: serial: option: fix slab OOB read in interrupt URB callback2.4 Lowlinux-iotUbuntuUSB: c67x00: fix use-after-free in c67x00_add_iso_urb()7.3 Highlinux-iotUbuntuusb: usbfs: fix use-after-free of usb_device in usbdev_release()7.3 Highlinux-iotUbuntunfc: st21nfca: validate ATR_REQ length against the received frame7.1 Highlinux-iotUbuntuxfs: don't livelock in scrub on a circular unlinked listNo scorelinux-iotUbuntuBluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept6.0 Mediumlinux-iotUbunturndis_host: add overflow check in rndis_rx_fixup()5.2 Mediumlinux-iotUbuntuALSA: dummy: Check card index validity at probeNo scorelinux-iotUbuntuocfs2: fix missing metadata reservation for large xattrs5.7 Mediumlinux-iotUbuntuext4: stop retrying saturated xattr cache entries7.1 Highlinux-iotUbuntunilfs2: reject invalid block index in GC ioctlNo scorelinux-iotUbuntunfc: digital: clamp SENSF_RES length to the destination buffer7.7 Highlinux-iotUbuntunfc: fdp: bound the device-reported read length and fix an skb leak5.4 Mediumlinux-iotUbuntunfc: microread: validate target discovery payload lengths6.9 Mediumlinux-iotUbuntunfc: llcp: bound the connect_sn TLV walk to the skb7.1 Highlinux-iotUbuntunfc: llcp: fix OOB read and u8 offset wrap in TLV parsers7.1 Highlinux-iotUbuntunfc: llcp: reject PDUs shorter than the LLCP header7.1 Highlinux-iotUbuntunfc: pn533: purge fragmented skbs during cleanup1.0 Lowlinux-iotUbuntunfc: nci: add data_len bound checks to activation parameter extractors6.0 Mediumlinux-iotUbuntunfc: nci: fix out-of-bounds write in nci_target_auto_activated()7.0 Highlinux-iotUbuntunfc: nci: fix uninit-value in the RF discover/activated NTF handlersNo scorelinux-iotUbuntuipv4: reject undersized MTUs in ip_do_fragment()6.8 Mediumlinux-iotUbuntuipv6: fix use-after-free in ip6_finish_output2()8.4 Highlinux-iotUbuntunvmet-fc: fix invalid free in LS IOD error pathNo scorelinux-iotUbuntunvmet-tcp: bound SGL data length before allocating command buffers8.7 Highlinux-iotUbuntunvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations8.7 Highlinux-iotUbuntufbdev: Wrap user-invoked calls to fb_set_var() in helper9.8 Criticallinux-iotUbuntufbdev: serialize mode sysfs access with lock_fb_info()No scorelinux-iotUbuntuHID: magicmouse: prevent unbounded recursion in magicmouse_raw_event()5.1 Mediumlinux-iotUbuntuHID: magicmouse: do not keep a stale msc->input if no input is claimed5.4 Mediumlinux-iotUbuntuHID: core: fix OOB read of field->usage in hid_set_field()2.4 Lowlinux-iotUbuntuHID: sensor: custom: Fix use-after-free in enable_sensorNo scorelinux-iotUbuntuHID: uclogic: fix use-after-free of inrange_timer on remove5.4 Mediumlinux-iotUbuntuHID: hyperv: validate initial device info boundsNo scorelinux-iotUbuntuBluetooth: hci_event: fix LE list UAF on resetNo scorelinux-iotUbuntuselinux: reject a class permission count below its inherited commonNo score- Show moreLoading…