linux-riscv-5.15 vulnerabilities (Ubuntu)
10,647 vulnerabilities.
linux-riscv-5.15Ubuntuusb: gadget: f_rndis: Fix net_device lifecycle with device_move5.5 Mediumlinux-riscv-5.15Ubuntuusb: gadget: f_hid: move list and spinlock inits from bind to alloc5.5 Mediumlinux-riscv-5.15Ubuntuusb: gadget: f_uac1_legacy: validate control request size7.8 Highlinux-riscv-5.15Ubuntufs/ntfs3: validate rec->used in journal-replay file record check7.8 Highlinux-riscv-5.15Ubuntuf2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io()7.8 Highlinux-riscv-5.15Ubuntuksmbd: require minimum ACE size in smb_check_perm_dacl()8.3 Highlinux-riscv-5.15Ubuntusmb: server: fix active_num_conn leak on transport allocation failure7.5 Highlinux-riscv-5.15Ubuntusmb: client: validate the whole DACL before rewriting it in cifsacl8.8 Highlinux-riscv-5.15Ubuntusmb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path8.1 Highlinux-riscv-5.15Ubuntuksmbd: validate response sizes in ipc_validate_msg()7.1 Highlinux-riscv-5.15Ubuntuksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl()8.8 Highlinux-riscv-5.15Ubuntuksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment9.8 Criticallinux-riscv-5.15Ubuntuksmbd: use check_add_overflow() to prevent u16 DACL size overflow5.5 Mediumlinux-riscv-5.15Ubuntuf2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()7.8 Highlinux-riscv-5.15UbuntuALSA: caiaq: take a reference on the USB device in create_card()5.5 Mediumlinux-riscv-5.15Ubuntunet/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()7.8 Highlinux-riscv-5.15Ubuntucrypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed7.1 Highlinux-riscv-5.15Ubuntucrypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed7.1 Highlinux-riscv-5.15Ubuntucrypto: ccp: Don't attempt to copy ID to userspace if PSP command failed7.1 Highlinux-riscv-5.15Ubunturxrpc: Fix missing validation of ticket length in non-XDR key preparsing7.8 Highlinux-riscv-5.15Ubuntuwifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free7.8 Highlinux-riscv-5.15Ubuntufuse: reject oversized dirents in page cache7.8 Highlinux-riscv-5.15Ubunturtnetlink: add missing netlink_ns_capable() check for peer netns5.5 Mediumlinux-riscv-5.15Ubuntuxen/privcmd: fix double free via VMA splitting7.8 Highlinux-riscv-5.15UbuntuBuffer overflow in drivers/xen/sys-hypervisor.c7.8 Highlinux-riscv-5.15Ubuntugpio: omap: do not register driver in probe()5.5 Mediumlinux-riscv-5.15Ubuntumm/kasan: fix double free for kasan pXds7.8 Highlinux-riscv-5.15UbuntuA transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to...2.0 Lowlinux-riscv-5.15Ubuntunetfilter: ip6t_eui64: reject invalid MAC header for all packets9.4 Criticallinux-riscv-5.15Ubuntunet: sched: act_csum: validate nested VLAN headers5.5 Mediumlinux-riscv-5.15Ubuntubatman-adv: avoid OGM aggregation when skb tailroom is insufficient7.8 Highlinux-riscv-5.15Ubuntubridge: br_nd_send: linearize skb before parsing ND options9.1 Criticallinux-riscv-5.15Ubuntunetfilter: xt_multiport: validate range encoding in checkentry5.5 Mediumlinux-riscv-5.15Ubuntunet: ipv6: flowlabel: defer exclusive option free until RCU teardown7.8 Highlinux-riscv-5.15Ubuntuopenvswitch: validate MPLS set/set_masked payload length7.1 Highlinux-riscv-5.15Ubuntuopenvswitch: defer tunnel netdev_put to RCU release7.8 Highlinux-riscv-5.15Ubuntucrypto: af_alg - limit RX SG extraction by receive buffer budget5.5 Mediumlinux-riscv-5.15Ubunturxrpc: only handle RESPONSE during service challenge7.5 Highlinux-riscv-5.15Ubuntunet/sched: sch_netem: fix out-of-bounds access in packet corruption7.8 Highlinux-riscv-5.15Ubuntunetfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()7.1 Highlinux-riscv-5.15Ubuntuaf_unix: read UNIX_DIAG_VFS data under unix_state_lock7.8 Highlinux-riscv-5.15Ubuntuwifi: rt2x00usb: fix devres lifetime5.5 Mediumlinux-riscv-5.15Ubuntuxfrm_user: fix info leak in build_report()5.5 Mediumlinux-riscv-5.15Ubuntunet: rfkill: prevent unlimited numbers of rfkill events from being created5.5 Mediumlinux-riscv-5.15Ubuntumptcp: fix slab-use-after-free in __inet_lookup_established9.8 Criticallinux-riscv-5.15Ubuntuseg6: separate dst_cache for input and output paths in seg6 lwtunnel9.8 Criticallinux-riscv-5.15UbuntuInput: uinput - fix circular locking dependency with ff-core7.8 Highlinux-riscv-5.15Ubuntunetfilter: nft_ct: fix use-after-free in timeout object destroy7.8 Highlinux-riscv-5.15Ubuntuxfrm: clear trailing padding in build_polexpire()5.5 Mediumlinux-riscv-5.15Ubuntuxfrm: hold dev ref until after transport_finish NF_HOOK7.8 High- Show moreLoading…