linux-riscv-5.15 vulnerabilities (Ubuntu)
10,647 vulnerabilities.
linux-riscv-5.15UbuntuKVM: s390: pci: Reject adapter interrupt forwarding if already enabled8.8 Highlinux-riscv-5.15UbuntuKVM: s390: pci: Fix memory accounting for pinned/unpinned pages10.0 Criticallinux-riscv-5.15Ubuntuaudit: fix potential use-after-free in audit_del_rule()7.8 Highlinux-riscv-5.15UbuntuBluetooth: mgmt: fix UAF in pair command cancellation7.8 Highlinux-riscv-5.15UbuntuBluetooth: hci_sync: Fix advertising data UAFs8.8 Highlinux-riscv-5.15UbuntuBluetooth: HIDP: reject frames without a transaction header8.8 Highlinux-riscv-5.15UbuntuBluetooth: HIDP: validate numbered report payloads7.1 Highlinux-riscv-5.15Ubuntuafs: Fix UAF when sending a message7.8 Highlinux-riscv-5.15UbuntuALSA: 6fire: Fix UAF at error handling during probe7.0 Highlinux-riscv-5.15UbuntuALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output()7.0 Highlinux-riscv-5.15UbuntuALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set7.3 Highlinux-riscv-5.15UbuntuALSA: usb-audio: Clamp frame size in implicit-feedback mode8.4 Highlinux-riscv-5.15Ubuntufou: Fix use-after-free in fou_create()7.8 Highlinux-riscv-5.15Ubuntuigbvf: Fix leak in TX DMA error cleanup9.8 Criticallinux-riscv-5.15Ubuntuksmbd: reject repeated SMB2 NEGOTIATE requests8.7 Highlinux-riscv-5.15Ubuntunet/smc: fix socket use-after-free during link group termination9.8 Criticallinux-riscv-5.15Ubuntunetfilter: ipset: do not update comments from kernel-side hash adds8.4 Highlinux-riscv-5.15Ubuntutipc: avoid use-after-free in poll trace queue dumps8.8 Highlinux-riscv-5.15Ubuntuwifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames8.8 Highlinux-riscv-5.15Ubuntubinfmt_misc: restore write access when removing an entry4.8 Mediumlinux-riscv-5.15Ubuntubinfmt_misc: reject a flag character as the field delimiter7.1 Highlinux-riscv-5.15Ubuntubinfmt_misc: don't let an 'F' entry pin its own instance6.8 Mediumlinux-riscv-5.15Ubuntumm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios7.8 Highlinux-riscv-5.15Ubuntumm/page_reporting: use system_freezable_wq to fix UAF during suspend7.8 Highlinux-riscv-5.15Ubuntunet: bridge: stop fast-leave after deleting a port group9.8 Criticallinux-riscv-5.15Ubuntunet: pktgen: fix proc entry use-after-free7.8 Highlinux-riscv-5.15Ubuntuum: vector: fix use-after-free in vector_mmsg_rx()9.8 Criticallinux-riscv-5.15Ubuntuvxlan: use neigh_ha_snapshot() in route_shortcircuit()10.0 Criticallinux-riscv-5.15Ubuntuvxlan: use pskb_network_may_pull() for transmit path header pulls9.8 Criticallinux-riscv-5.15Ubuntuvxlan: use pskb_network_may_pull() in route_shortcircuit()9.8 Criticallinux-riscv-5.15Ubuntutracing: Check return value of __register_event() in trace_module_add_events()7.8 Highlinux-riscv-5.15Ubuntuscsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write7.8 Highlinux-riscv-5.15Ubuntusctp: prevent peer transport count overflow8.8 Highlinux-riscv-5.15Ubuntugpio: pch: use raw_spinlock_t for the register lockNo scorelinux-riscv-5.15Ubuntus390/qeth: Check CAP_NET_ADMIN for private ioctls7.8 Highlinux-riscv-5.15Ubuntunet: openvswitch: fix potential UAF on meter attach failure7.8 Highlinux-riscv-5.15Ubuntunet: openvswitch: fix skb leak on flow key update failure during ct6.8 Mediumlinux-riscv-5.15Ubuntui2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock5.7 Mediumlinux-riscv-5.15Ubuntui2c: imx: Cancel hrtimer before clearing slave pointer8.4 Highlinux-riscv-5.15Ubuntucan: ems_usb: validate CPC message lengths5.2 Mediumlinux-riscv-5.15Ubuntucan: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure1.0 Lowlinux-riscv-5.15Ubuntucan: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents7.0 Highlinux-riscv-5.15Ubuntucan: peak_usb: add bounds check for USB channel index5.1 Mediumlinux-riscv-5.15Ubuntucan: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error7.8 Highlinux-riscv-5.15Ubuntucan: peak_usb: validate uCAN receive record lengths5.2 Mediumlinux-riscv-5.15Ubuntudrm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size7.8 Highlinux-riscv-5.15Ubuntudrm/vc4: Zero the tile state data array before each BIN job7.8 Highlinux-riscv-5.15Ubuntudrm/amd/pm: fix pptable use-after-free7.8 Highlinux-riscv-5.15Ubuntudrm/vmwgfx: reject DX_BIND_QUERY without a DX context6.8 Mediumlinux-riscv-5.15Ubuntudrm/vmwgfx: validate DRAW_PRIMITIVES header size before division7.8 High- Show moreLoading…