linux-oem vulnerabilities (Ubuntu)
19,768 vulnerabilities.
linux-oemUbuntuBluetooth: hci_sync: hold hdev->lock for hci_conn_params lookups8.8 Highlinux-oemUbuntuBluetooth: hci_qca: Clear memdump state on invalid dump size8.8 Highlinux-oemUbuntusmb/client: handle overlapping allocated ranges in fallocate9.8 Criticallinux-oemUbuntucan: raw: add locking for raw flags bitfield7.8 Highlinux-oemUbuntubpf, sockmap: Reject unhashed UDP sockets on sockmap update5.6 Mediumlinux-oemUbuntus390/checksum: Fix csum_partial() without vector facility9.8 Criticallinux-oemUbuntudrm/xe/vf: Fix VF CCS attach/detach race with in-flight BO moves7.8 Highlinux-oemUbuntudrm/xe/guc: Keep scheduler timeline name alive7.8 Highlinux-oemUbuntudrm/xe/guc: Hold device ref until queue teardown completes7.8 Highlinux-oemUbuntuksmbd: pin conn during async oplock break notification9.8 Criticallinux-oemUbuntuaccel/amdxdna: Fix use-after-free of mm_struct in job scheduler7.8 Highlinux-oemUbuntutcp: fix TIME_WAIT socket reference leak on PSP policy failure7.5 Highlinux-oemUbuntudpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync()No scorelinux-oemUbuntunet/sched: act_tunnel_key: Defer dst_release to RCU callback7.8 Highlinux-oemUbuntusctp: fix auth_hmacs array size in struct sctp_cookie8.1 Highlinux-oemUbuntubnxt_en: Handle partially initialized auxiliary devicesNo scorelinux-oemUbuntuusb: core: sysfs: add lock to bos_descriptors_read()7.8 Highlinux-oemUbuntuwifi: at76c50x-usb: avoid length underflow in at76_guess_freq()8.1 Highlinux-oemUbuntuusb: core: port: Deattach Type-C connector on component unbind4.3 Mediumlinux-oemUbuntuusb: musb: omap2430: Do not put borrowed of_node in probe8.4 Highlinux-oemUbuntuusb: gadget: dummy_hcd: prevent fifo_req reuse during giveback7.8 Highlinux-oemUbuntuusb: gadget: printer: fix infinite loop in printer_read()No scorelinux-oemUbuntuusb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()2.4 Lowlinux-oemUbuntuusb: gadget: f_tcm: synchronize delayed set_alt with teardown5.4 Mediumlinux-oemUbuntuusb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer1.0 Lowlinux-oemUbuntuUSB: serial: io_edgeport: cap received transmit credits7.0 Highlinux-oemUbuntudrm/amd/display: Fix ISM dc_lock deadlock during suspendNo scorelinux-oemUbuntuwifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request4.1 Mediumlinux-oemUbuntuwifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_beginNo scorelinux-oemUbuntuhwmon: (corsair-psu) Stop device IO before calling hid_hw_stop5.4 Mediumlinux-oemUbuntuhwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop5.4 Mediumlinux-oemUbuntuhwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop5.4 Mediumlinux-oemUbuntuhwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop7.0 Highlinux-oemUbuntuwatchdog: pretimeout: Fix UAF in watchdog_unregister_governor()9.8 Criticallinux-oemUbuntuwatchdog: airoha: Prevent division by zero when clock frequency is zeroNo scorelinux-oemUbuntuwifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()6.0 Mediumlinux-oemUbuntufirewire: net: Fix fragmented datagram reassembly8.8 Highlinux-oemUbuntuwifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler8.1 Highlinux-oemUbuntuwifi: ath6kl: fix OOB read from firmware IE lengths in connect event8.3 Highlinux-oemUbuntuwifi: carl9170: bound memcpy length in cmd callback to prevent OOB read5.4 Mediumlinux-oemUbuntuwifi: carl9170: fix OOB read from off-by-two in TX status handler2.4 Lowlinux-oemUbuntuwifi: carl9170: fix buffer overflow in rx_stream failover path7.0 Highlinux-oemUbuntuASoC: tas2781: bound firmware description string parsing7.1 Highlinux-oemUbuntuiommu/amd: Fix IRQ unsafe locking in gdom allocationNo scorelinux-oemUbuntuALSA: hda: cs35l41: validate and free ACPI mute objectNo scorelinux-oemUbuntuarm_mpam: guard MBWU state before adding it to garbageNo scorelinux-oemUbuntuusb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect5.2 Mediumlinux-oemUbuntusmb: client: validate DFS referral PathConsumed9.1 Criticallinux-oemUbuntuovpn: avoid putting unrelated P2P peer on socket releaseNo scorelinux-oemUbuntuovpn: fix use after free in unlock_ovpn()8.8 High- Show moreLoading…