Bugs fixes in "linux-nvidia-tegra"
| Origin | Bug number | Title | Date fixed |
|---|---|---|---|
| CVE | CVE-2026-89555 | In the Linux kernel, the following vulnerability has been resolved: mpls: reload header after pskb_may_pull() mpls_select_multipath() calls mpls_mu | 2026-10-28 |
| CVE | CVE-2026-89554 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction mptcp_tok | 2026-10-28 |
| CVE | CVE-2026-89551 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow xdr_buf_trim() trims `l | 2026-10-28 |
| CVE | CVE-2026-89549 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: route to a populated pool in svc_pool_for_cpu() svc_set_num_threads() s | 2026-10-28 |
| CVE | CVE-2026-89548 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: always drain cache_cleaner before destroying a cache_detail sunrpc_dest | 2026-10-28 |
| CVE | CVE-2026-89542 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens gss_krb5_unwrap_v2() rea | 2026-10-28 |
| CVE | CVE-2026-89541 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gss_unwrap_resp_priv length checks gss_unwrap_resp_priv() valida | 2026-10-28 |
| CVE | CVE-2026-89540 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: init gssp_lock before publishing proc entry create_use_gss_proxy_proc_e | 2026-10-28 |
| CVE | CVE-2026-89538 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field gss_krb5_unwrap_v2() | 2026-10-28 |
| CVE | CVE-2026-89533 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix offset arithmetic in read_chunk_range svc_rdma_read_chunk_range() | 2026-10-28 |
| CVE | CVE-2026-89532 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix pcl_for_each_segment for empty chunks When a parsed chunk list con | 2026-10-28 |
| CVE | CVE-2026-89525 | In the Linux kernel, the following vulnerability has been resolved: udf: reject VAT indexes equal to the entry count UDF 1.50 virtual partition map | 2026-10-28 |
| CVE | CVE-2026-89524 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets | 2026-10-28 |
| CVE | CVE-2026-89512 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: scp: Fix device reference leak on failed lookup Make sure to drop t | 2026-10-28 |
| CVE | CVE-2026-89511 | In the Linux kernel, the following vulnerability has been resolved: qede: Fix NULL pointer dereference in TPA fragment processing Under memory pres | 2026-10-28 |
| CVE | CVE-2026-89510 | In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Cancel reg_work before freeing device on remove c4iw_uld_state_chan | 2026-10-28 |
| CVE | CVE-2026-89508 | In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucma_set_ib_path() ucma_set_ib_path() calls ucma | 2026-10-28 |
| CVE | CVE-2026-89504 | In the Linux kernel, the following vulnerability has been resolved: regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangl | 2026-10-28 |
| CVE | CVE-2026-89498 | In the Linux kernel, the following vulnerability has been resolved: orangefs: fix double-free of trailer_buf on readdir copy failure On a readdir d | 2026-10-28 |
| CVE | CVE-2026-89497 | In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefs_prepar | 2026-10-28 |
About
-
Send Feedback to @ubuntu_updates
