linux-riscv-6.14 vulnerabilities (Ubuntu)
10,613 vulnerabilities.
linux-riscv-6.14Ubuntuwifi: mac80211: fix tid_tx use-after-free on BA session stop8.8 Highlinux-riscv-6.14Ubuntuwifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames8.8 Highlinux-riscv-6.14Ubuntubinfmt_misc: restore write access when removing an entry4.8 Mediumlinux-riscv-6.14Ubuntubinfmt_misc: use exe_file_deny_write_access() for the interpreter cloneNo scorelinux-riscv-6.14Ubuntubinfmt_misc: reject a flag character as the field delimiter7.1 Highlinux-riscv-6.14Ubuntubinfmt_misc: don't let an 'F' entry pin its own instance6.8 Mediumlinux-riscv-6.14Ubuntubinfmt_misc: don't leak the user namespace when the mount fails5.7 Mediumlinux-riscv-6.14Ubuntumm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios7.8 Highlinux-riscv-6.14Ubuntumm/page_reporting: use system_freezable_wq to fix UAF during suspend7.8 Highlinux-riscv-6.14Ubuntunet: bridge: stop fast-leave after deleting a port group9.8 Criticallinux-riscv-6.14Ubuntunet: pktgen: fix proc entry use-after-free7.8 Highlinux-riscv-6.14Ubuntuum: vector: fix use-after-free in vector_mmsg_rx()9.8 Criticallinux-riscv-6.14Ubuntuuprobes: Fix NULL pointer dereference in hprobe_expire()No scorelinux-riscv-6.14Ubuntuveth: convert frag_list skbs before running XDP9.1 Criticallinux-riscv-6.14Ubuntuvxlan: use neigh_ha_snapshot() in route_shortcircuit()10.0 Criticallinux-riscv-6.14Ubuntuvxlan: use pskb_network_may_pull() for transmit path header pulls9.8 Criticallinux-riscv-6.14Ubuntuvxlan: use pskb_network_may_pull() in route_shortcircuit()9.8 Criticallinux-riscv-6.14Ubuntuublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev()6.8 Mediumlinux-riscv-6.14Ubuntutracing: Check return value of __register_event() in trace_module_add_events()7.8 Highlinux-riscv-6.14Ubuntuscsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write7.8 Highlinux-riscv-6.14Ubuntusctp: prevent peer transport count overflow8.8 Highlinux-riscv-6.14Ubuntugpio: pch: use raw_spinlock_t for the register lockNo scorelinux-riscv-6.14Ubuntus390/qeth: Check CAP_NET_ADMIN for private ioctls7.8 Highlinux-riscv-6.14Ubuntus390/zcrypt: Close speculative mem read possibilityNo scorelinux-riscv-6.14Ubuntunet: openvswitch: fix potential UAF on meter attach failure7.8 Highlinux-riscv-6.14Ubuntunet: openvswitch: fix skb leak on flow key update failure during ct6.8 Mediumlinux-riscv-6.14Ubuntui2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock5.7 Mediumlinux-riscv-6.14Ubuntui2c: imx: mark I2C adapter when hardware is powered downNo scorelinux-riscv-6.14Ubuntui2c: imx: Cancel hrtimer before clearing slave pointer8.4 Highlinux-riscv-6.14Ubuntucan: ems_usb: validate CPC message lengths5.2 Mediumlinux-riscv-6.14Ubuntucan: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure1.0 Lowlinux-riscv-6.14Ubuntucan: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents7.0 Highlinux-riscv-6.14Ubuntucan: peak_usb: add bounds check for USB channel index5.1 Mediumlinux-riscv-6.14Ubuntucan: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error7.8 Highlinux-riscv-6.14Ubuntucan: peak_usb: validate uCAN receive record lengths5.2 Mediumlinux-riscv-6.14Ubuntudrm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size7.8 Highlinux-riscv-6.14Ubuntudrm/vc4: Zero the tile state data array before each BIN job7.8 Highlinux-riscv-6.14Ubuntudrm/panthor: reject firmware sections with oversized data7.8 Highlinux-riscv-6.14Ubuntudrm/panthor: validate firmware interface structure sizes7.8 Highlinux-riscv-6.14Ubuntudrm/amd/pm: fix pptable use-after-free7.8 Highlinux-riscv-6.14Ubuntudrm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport7.8 Highlinux-riscv-6.14Ubuntudrm/amdkfd: fix QID bit leak in pqm_create_queue()1.8 Lowlinux-riscv-6.14Ubuntudrm/amdkfd: fix uint32_t overflow in EOP ring buffer size alignment7.8 Highlinux-riscv-6.14Ubuntudrm/amdkfd: hold event_mutex while checkpointing CRIU events7.8 Highlinux-riscv-6.14Ubuntudrm/vmwgfx: reject DX_BIND_QUERY without a DX context6.8 Mediumlinux-riscv-6.14Ubuntudrm/vmwgfx: validate DRAW_PRIMITIVES header size before division7.8 Highlinux-riscv-6.14Ubuntudrm/vmwgfx: bound DMA command body size against suffix pointer8.8 Highlinux-riscv-6.14Ubuntudrm/vmwgfx: avoid destroy_workqueue(NULL) on vkms init failureNo scorelinux-riscv-6.14Ubuntuusb: typec: ucsi: Fix race condition and ordering in port unregistrationNo scorelinux-riscv-6.14Ubuntudrm/xe: Wait on external BO kernel fences in exec IOCTL7.8 High- Show moreLoading…