linux-nvidia-bos vulnerabilities (Ubuntu)
6,112 vulnerabilities.
linux-nvidia-bosUbuntuxfs: restore nofs context unconditionally in xfs_trans_rollNo scorelinux-nvidia-bosUbuntunfc: digital: clamp SENSF_RES length to the destination buffer7.7 Highlinux-nvidia-bosUbuntunfc: fdp: bound the device-reported read length and fix an skb leak5.4 Mediumlinux-nvidia-bosUbuntunfc: microread: validate target discovery payload lengths6.9 Mediumlinux-nvidia-bosUbuntunfc: llcp: bound the connect_sn TLV walk to the skb7.1 Highlinux-nvidia-bosUbuntunfc: llcp: fix OOB read and u8 offset wrap in TLV parsers7.1 Highlinux-nvidia-bosUbuntunfc: llcp: reject PDUs shorter than the LLCP header7.1 Highlinux-nvidia-bosUbuntunfc: pn533: purge fragmented skbs during cleanup1.0 Lowlinux-nvidia-bosUbuntunfc: nci: add data_len bound checks to activation parameter extractors6.0 Mediumlinux-nvidia-bosUbuntunfc: nci: fix out-of-bounds write in nci_target_auto_activated()7.0 Highlinux-nvidia-bosUbuntunfc: nci: fix uninit-value in the RF discover/activated NTF handlersNo scorelinux-nvidia-bosUbuntuipv4: reject undersized MTUs in ip_do_fragment()6.8 Mediumlinux-nvidia-bosUbuntuipv6: fix use-after-free in ip6_finish_output2()8.4 Highlinux-nvidia-bosUbuntunvmet-auth: zero the AUTH_RECEIVE response buffer6.9 Mediumlinux-nvidia-bosUbuntunvmet-fc: fix invalid free in LS IOD error pathNo scorelinux-nvidia-bosUbuntunvmet-tcp: bound SGL data length before allocating command buffers8.7 Highlinux-nvidia-bosUbuntunvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations8.7 Highlinux-nvidia-bosUbuntunvmet: pci-epf: fix use-after-free in nvmet_pci_epf_exec_iod_work()4.1 Mediumlinux-nvidia-bosUbuntufbdev: Wrap user-invoked calls to fb_set_var() in helper9.8 Criticallinux-nvidia-bosUbuntufbdev: serialize mode sysfs access with lock_fb_info()No scorelinux-nvidia-bosUbuntumptcp: pm: fix memory leak from alloc-during-teardown race5.7 Mediumlinux-nvidia-bosUbuntuHID: magicmouse: prevent unbounded recursion in magicmouse_raw_event()5.1 Mediumlinux-nvidia-bosUbuntuHID: magicmouse: do not keep a stale msc->input if no input is claimed5.4 Mediumlinux-nvidia-bosUbuntuHID: core: fix OOB read of field->usage in hid_set_field()2.4 Lowlinux-nvidia-bosUbuntuHID: pidff: fix OOB write when hid->inputs is empty7.0 Highlinux-nvidia-bosUbuntunet/ionic: avoid OOB TX partner lookup for hwstamp RXQ8.4 Highlinux-nvidia-bosUbuntufutex/pi: Reject cross-mm private futex owners7.3 Highlinux-nvidia-bosUbuntufutex/pi: Plug private futex exec() race7.3 Highlinux-nvidia-bosUbuntufutex: Fix race in futex_pivot_pending() during private hash resize5.7 Mediumlinux-nvidia-bosUbuntufutex: Fix race on the initial mm->futex.phash.ref allocation7.3 Highlinux-nvidia-bosUbuntuHID: asus: fix missing hid_is_usb() checkNo scorelinux-nvidia-bosUbuntuHID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()5.3 Mediumlinux-nvidia-bosUbuntuHID: nintendo: register input device after capabilities are set5.7 Mediumlinux-nvidia-bosUbuntuHID: nintendo: stop device IO before hid_hw_stop on probe failure5.4 Mediumlinux-nvidia-bosUbuntuHID: rapoo: fix missing hid_is_usb() checkNo scorelinux-nvidia-bosUbuntuHID: ft260: fix stack-use-after-return write in I2C read race5.4 Mediumlinux-nvidia-bosUbuntuHID: sensor: custom: Fix use-after-free in enable_sensorNo scorelinux-nvidia-bosUbuntuHID: uclogic: fix use-after-free of inrange_timer on remove5.4 Mediumlinux-nvidia-bosUbuntuHID: hyperv: validate initial device info boundsNo scorelinux-nvidia-bosUbuntuBluetooth: hci_event: fix LE list UAF on resetNo scorelinux-nvidia-bosUbuntuBluetooth: hci_event: validate LE Set CIG Parameters responseNo scorelinux-nvidia-bosUbuntuBluetooth: hci_sync: Fix accept list UAF during suspend5.6 Mediumlinux-nvidia-bosUbuntuBluetooth: ISO: zero the sockaddr before returning it in getname4.8 Mediumlinux-nvidia-bosUbuntuBluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255No scorelinux-nvidia-bosUbuntuBluetooth: hci_aml: validate firmware segment lengthsNo scorelinux-nvidia-bosUbuntufutex: Avoid private hash use-after-free on final put2.0 Lowlinux-nvidia-bosUbuntuselinux: reject a class permission count below its inherited commonNo scorelinux-nvidia-bosUbuntuselinux: do not cancel a policy conversion that never startedNo scorelinux-nvidia-bosUbuntuselinux: reject a permission value exceeding the class permission countNo scorelinux-nvidia-bosUbuntuInput: synaptics-rmi4 - fix F55 transmitter electrode count typo7.8 High- Show moreLoading…