kernel-coco vulnerabilities (SUSE)
2,078 vulnerabilities.
kernel-cocoSUSEefi: Don't map the entire mokvar table to determine its size5.5 Mediumkernel-cocoSUSEtee: optee: Fix supplicant wait loop5.5 Mediumkernel-cocoSUSEASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers7.8 Highkernel-cocoSUSEpowerpc/code-patching: Disable KASAN report during patching via temporary mm7.8 Highkernel-cocoSUSEnet: allow small head cache usage with large MAX_SKB_FRAGS values7.5 Highkernel-cocoSUSEcifs.upcall makes an upcall to the wrong namespace in containerized environments5.9 Mediumkernel-cocoSUSEnetfilter: allow exp not to be removed in nf_ct_find_expectation7.8 Highkernel-cocoSUSEpowerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC5.5 Mediumkernel-cocoSUSEgtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl().5.5 Mediumkernel-cocoSUSEtcp: drop secpath at the same time as we currently drop dst7.8 Highkernel-cocoSUSEio_uring: prevent opcode speculation7.8 Highkernel-cocoSUSEdrop_monitor: fix incorrect initialization order5.5 Mediumkernel-cocoSUSEmm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()5.5 Mediumkernel-cocoSUSEUSB: gadget: f_midi: f_midi_complete to call queue_work5.5 Mediumkernel-cocoSUSEgeneve: Fix use-after-free in geneve_find_dev().7.8 Highkernel-cocoSUSEnet/sched: cls_api: fix error handling causing NULL dereference5.5 Mediumkernel-cocoSUSEs390/ism: add release function for struct device7.8 Highkernel-cocoSUSEibmvnic: Don't reference skb after sending to VIOS8.6 Highkernel-cocoSUSEsockmap, vsock: For connectible sockets allow only connected5.5 Mediumkernel-cocoSUSEbpf: avoid holding freeze_mutex during mmap operation5.5 Mediumkernel-cocoSUSEnet: Add rx_skb of kfree_skb to raw_tp_null_args[].5.5 Mediumkernel-cocoSUSEnvmet: Fix crash when a namespace is disabled9.8 Criticalkernel-cocoSUSEnfp: bpf: Add check for nfp_app_ctrl_msg_alloc()5.5 Mediumkernel-cocoSUSEASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data()5.5 Mediumkernel-cocoSUSEacct: perform last write from workqueue5.5 Mediumkernel-cocoSUSEsmb: client: Add check for next_buffer in receive_encrypted_standard()7.5 Highkernel-cocoSUSEbpf: Fix deadlock when freeing cgroup storage5.5 Mediumkernel-cocoSUSEKVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop7.3 Highkernel-cocoSUSEusb: gadget: core: flush gadget workqueue after device removal5.5 Mediumkernel-cocoSUSEio_uring/kbuf: reallocate buf lists on upgrade7.8 Highkernel-cocoSUSEusb: gadget: f_midi: fix MIDI Streaming descriptor lengths5.5 Mediumkernel-cocoSUSEdrm/v3d: Stop active perfmon if it is being destroyed7.8 Highkernel-cocoSUSEiommu/vt-d: Avoid use of NULL after WARN_ON_ONCE5.5 Mediumkernel-cocoSUSEblock: don't revert iter for -EIOCBQUEUED7.8 Highkernel-cocoSUSEPCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen15.5 Mediumkernel-cocoSUSEtomoyo: don't emit warning in tomoyo_write_control()5.5 Mediumkernel-cocoSUSEKVM: Explicitly verify target vCPU is online in kvm_get_vcpu()7.8 Highkernel-cocoSUSEclk: qcom: dispcc-sm6350: Add missing parent_map for a clock5.5 Mediumkernel-cocoSUSEmedia: uvcvideo: Fix crash during unbind if gpio unit is in use7.8 Highkernel-cocoSUSEmisc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors5.5 Mediumkernel-cocoSUSEclk: qcom: gcc-sm6350: Add missing parent_map for two clocks5.5 Mediumkernel-cocoSUSElandlock: Handle weird files7.3 Highkernel-cocoSUSERDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]"9.8 Criticalkernel-cocoSUSEwifi: mac80211: don't flush non-uploaded STAs8.8 Highkernel-cocoSUSEbpf: Cancel the running bpf_timer through kworker for PREEMPT_RT7.8 Highkernel-cocoSUSEwifi: rtlwifi: remove unused check_buddy_priv7.8 Highkernel-cocoSUSEteam: prevent adding a device which is already a team device lower5.5 Mediumkernel-cocoSUSEbpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT7.8 Highkernel-cocoSUSErtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read7.8 Highkernel-cocoSUSEOPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized5.5 Medium- Show moreLoading…