kernel-ec2 vulnerabilities (SUSE)
901 vulnerabilities.
-
kernel-ec2SUSE ipv4: validate checksum_start before completing checksum 9.3 Critical -
kernel-ec2SUSE NFSv4.1: zero referring call lists before decoding 9.8 Critical -
kernel-ec2SUSE Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop No score -
kernel-ec2SUSE scsi: target: iscsi: Reserve a terminator byte for the login payload 9.1 Critical -
kernel-ec2SUSE SUNRPC: harden gss_krb5_unwrap_v2 against short tokens 9.8 Critical -
kernel-ec2SUSE sctp: stop processing a packet once its association is deleted 9.8 Critical -
kernel-ec2SUSE fbdev: serialize mode sysfs access with lock_fb_info() No score -
kernel-ec2SUSE fbdev: bound mode sysfs output to the sysfs buffer 7.8 High -
kernel-ec2SUSE sctp: validate cookie AUTH state before use 9.8 Critical -
kernel-ec2SUSE macvlan: inherit needed_headroom and needed_tailroom from lowerdev 9.8 Critical -
kernel-ec2SUSE ALSA: usx2y: bound the hwdep mmap fault offset 7.8 High -
kernel-ec2SUSE ipv6: prevent in6_dev_get() from resurrecting inet6_dev 7.8 High -
kernel-ec2SUSE ip6_tunnel: clear skb2->cb[] in ip6ip6_err() 9.8 Critical -
kernel-ec2SUSE sctp: keep chunk->transport in step with the list it is queued on 9.8 Critical -
kernel-ec2SUSE sctp: fix use-after-free of cached ASCONF chunk 9.8 Critical -
kernel-ec2SUSE scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer 9.8 Critical -
kernel-ec2SUSE ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data 7.8 High -
kernel-ec2SUSE sctp: add INIT verification after cookie unpacking 9.8 Critical -
kernel-ec2SUSE bridge: stp: Fix a potential use-after-free when deleting a bridge 7.8 High -
kernel-ec2SUSE netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop 9.1 Critical -
kernel-ec2SUSE ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() 9.8 Critical -
kernel-ec2SUSE ipv6: mcast: Fix potential UAF in MLD delayed work 9.8 Critical -
kernel-ec2SUSE scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE 9.8 Critical -
kernel-ec2SUSE sctp: fix auth_hmacs array size in struct sctp_cookie 8.1 High -
kernel-ec2SUSE ALSA: seq: close a re-opened queue timer in the destructor 7.8 High -
kernel-ec2SUSE pppoe: reload header pointer after dev_hard_header() 7.8 High -
kernel-ec2SUSE xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() 7.8 High -
kernel-ec2SUSE sctp: don't free the ASCONF's own transport in DEL-IP processing 9.8 Critical -
kernel-ec2SUSE net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes 7.1 High -
kernel-ec2SUSE ipv4: raw: reject IP_HDRINCL packets with ihl < 5 7.8 High -
kernel-ec2SUSE ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() 9.8 Critical -
kernel-ec2SUSE ipv6: exthdrs: refresh nh after handling HAO option 9.8 Critical -
kernel-ec2SUSE scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf 9.8 Critical -
kernel-ec2SUSE KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() 7.1 High -
kernel-ec2SUSE KVM: x86: Fix shadow paging use-after-free due to unexpected role 8.8 High -
kernel-ec2SUSE Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() 8.0 High -
kernel-ec2SUSE Bluetooth: bnep: reject short frames before parsing 7.1 High -
kernel-ec2SUSE sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing 9.8 Critical -
kernel-ec2SUSE sctp: validate embedded INIT chunk and address list lengths in cookie 9.1 Critical -
kernel-ec2SUSE USB: serial: io_ti: fix heap overflow in get_manuf_info() 6.8 Medium -
kernel-ec2SUSE locking/rtmutex: Skip remove_waiter() when waiter is not enqueued 5.5 Medium -
kernel-ec2SUSE netfilter: require Ethernet MAC header before using eth_hdr() 9.4 Critical -
kernel-ec2SUSE dm log: fix out-of-bounds write due to region_count overflow 7.8 High -
kernel-ec2SUSE netfilter: nf_conntrack_sip: don't use simple_strtoul 9.8 Critical -
kernel-ec2SUSE libceph: Fix potential out-of-bounds access in crush_decode() 9.8 Critical -
kernel-ec2SUSE Bluetooth: serialize accept_q access 8.8 High -
kernel-ec2SUSE net/sched: fix pedit partial COW leading to page cache corruption 7.8 High -
kernel-ec2SUSE inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP 9.1 Critical -
kernel-ec2SUSE smb: client: reject userspace cifs.spnego descriptions 7.1 High -
kernel-ec2SUSE xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete 7.8 High - Show olderLoading…