linux-riscv-5.15 vulnerabilities (Ubuntu)
10,647 vulnerabilities.
linux-riscv-5.15Ubuntubonding: refuse to enslave CAN devices5.5 Mediumlinux-riscv-5.15Ubuntuethtool: eeprom: add more safeties to EEPROM Netlink fallback7.8 Highlinux-riscv-5.15Ubuntuipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()9.8 Criticallinux-riscv-5.15Ubuntunet/sched: fix packet loop on netem when duplicate is on5.5 Mediumlinux-riscv-5.15UbuntuBluetooth: l2cap: clear chan->ident on ECRED reconfiguration success8.8 Highlinux-riscv-5.15UbuntuBluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp8.8 Highlinux-riscv-5.15Ubuntunet: mana: Add NULL guards in teardown path to prevent panic on attach failure5.5 Mediumlinux-riscv-5.15Ubuntusctp: fix race between sctp_wait_for_connect and peeloff7.8 Highlinux-riscv-5.15Ubuntuiio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer7.8 Highlinux-riscv-5.15Ubuntuusb: typec: ucsi: ccg: reject firmware images without a ':' record header5.5 Mediumlinux-riscv-5.15Ubuntuusb: typec: tcpm: validate VDO count in Discover Identity ACK handlers5.5 Mediumlinux-riscv-5.15Ubuntuusb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes()5.5 Mediumlinux-riscv-5.15Ubuntuusb: typec: altmodes/displayport: validate count before reading Status Update VDO5.5 Mediumlinux-riscv-5.15Ubuntuusb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer()5.5 Mediumlinux-riscv-5.15Ubuntuusb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT5.5 Mediumlinux-riscv-5.15Ubuntuusb: typec: ucsi: validate connector number in ucsi_connector_change()5.5 Mediumlinux-riscv-5.15UbuntuUSB: serial: safe_serial: fix memory corruption with small endpoint7.8 Highlinux-riscv-5.15UbuntuUSB: serial: cypress_m8: fix memory corruption with small endpoint7.8 Highlinux-riscv-5.15Ubuntuhpfs: fix a crash if hpfs_map_dnode_bitmap fails7.8 Highlinux-riscv-5.15UbuntuBluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn5.5 Mediumlinux-riscv-5.15UbuntuBluetooth: HIDP: fix missing length checks in hidp_input_report()8.8 Highlinux-riscv-5.15Ubuntuparport: Fix race between port and client registration7.8 Highlinux-riscv-5.15UbuntuKVM: SEV: Ignore Port I/O requests of length '0'9.3 Criticallinux-riscv-5.15Ubuntuiio: gyro: itg3200: fix i2c read into the wrong stack location7.1 Highlinux-riscv-5.15Ubuntuiio: gyro: adis16260: fix division by zero in write_raw5.5 Mediumlinux-riscv-5.15Ubuntuiio: chemical: scd30: fix division by zero in write_raw5.5 Mediumlinux-riscv-5.15Ubuntuiio: buffer: hw-consumer: fix use-after-free in error path7.8 Highlinux-riscv-5.15UbuntuUSB: serial: omninet: fix memory corruption with small endpoint7.8 Highlinux-riscv-5.15Ubuntuusb: dwc2: Fix use after free in debug code7.8 Highlinux-riscv-5.15Ubuntubpf: sockmap: fix tail fragment offset in bpf_msg_push_data8.4 Highlinux-riscv-5.15Ubuntumacsec: fix replay protection at XPN lower-PN wrap8.1 Highlinux-riscv-5.15Ubuntuipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()9.8 Criticallinux-riscv-5.15Ubuntuipv6: exthdrs: refresh nh after handling HAO option9.8 Criticallinux-riscv-5.15Ubuntuip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().8.8 Highlinux-riscv-5.15Ubuntuipv6: validate extension header length before copying to cmsg7.1 Highlinux-riscv-5.15Ubuntuxfrm: input: hold netns during deferred transport reinjection8.8 Highlinux-riscv-5.15Ubuntuip6: vti: Use ip6_tnl.net in vti6_changelink().8.8 Highlinux-riscv-5.15UbuntuHID: wacom: Fix OOB write in wacom_hid_set_device_mode()8.8 Highlinux-riscv-5.15Ubuntunfc: hci: fix out-of-bounds read in HCP header parsing8.8 Highlinux-riscv-5.15Ubuntuxfrm: route MIGRATE notifications to caller's netns7.3 Highlinux-riscv-5.15Ubuntunetfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check8.2 Highlinux-riscv-5.15Ubuntuxfrm: esp: restore combined single-frag length gate9.8 Criticallinux-riscv-5.15UbuntuInput: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem5.5 Mediumlinux-riscv-5.15Ubuntuusbip: vudc: Fix use after free bug in vudc_remove due to race condition7.8 Highlinux-riscv-5.15Ubuntuusb: usbtmc: check URB actual_length for interrupt-IN notifications7.1 Highlinux-riscv-5.15UbuntuUSB: serial: belkin_sa: validate interrupt status length7.1 Highlinux-riscv-5.15UbuntuUSB: serial: cypress_m8: validate interrupt packet headers7.1 Highlinux-riscv-5.15UbuntuUSB: serial: digi_acceleport: fix memory corruption with small endpoints7.8 Highlinux-riscv-5.15UbuntuUSB: serial: keyspan: fix missing indat transfer sanity check5.5 Mediumlinux-riscv-5.15UbuntuUSB: serial: mxuport: fix memory corruption with small endpoint7.8 High- Show moreLoading…