kernel-livepatch-MICRO-6-0-RT_Update_11 vulnerabilities (SUSE)
94 vulnerabilities.
kernel-livepatch-MICRO-6-0-RT_Update_11SUSEnfc: llcp: add missing return after LLCP_CLOSED checks8.8 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSEmm: blk-cgroup: fix use-after-free in cgwb_release_workfn()7.8 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSEcan: gw: fix OOB heap access in cgw_csum_crc8_rel()8.8 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSEnet/tls: fix use-after-free in -EBUSY error path of tls_do_encryption9.8 Criticalkernel-livepatch-MICRO-6-0-RT_Update_11SUSEiavf: fix out-of-bounds writes in iavf_get_ethtool_stats()7.8 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSEnet: fix fanout UAF in packet_release() via NETDEV_UP race7.8 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSEnfsd: fix heap overflow in NFSv4.0 LOCK replay cache9.8 Criticalkernel-livepatch-MICRO-6-0-RT_Update_11SUSEnet/sched: teql: Fix double-free in teql_master_xmit7.8 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSEbridge: cfm: Fix race condition in peer_mep deletion7.8 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSEnetfilter: nf_tables: always walk all pending catchall elements7.8 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSEtls: Fix race condition in tls_sw_cancel_work_tx()9.8 Criticalkernel-livepatch-MICRO-6-0-RT_Update_11SUSEmacvlan: fix error recovery in macvlan_common_newlink()7.8 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSEnetfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()7.8 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSEnet/sched: Enforce that teql can only be used as root qdisc7.8 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSEnet/sched: sch_qfq: do not free existing class in qfq_change_class()7.8 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSESUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf7.5 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSEiommu: disable SVA when CONFIG_X86 is set7.8 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSEipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()7.5 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSEipvs: fix ipv4 null-ptr-deref in route error path6.8 Mediumkernel-livepatch-MICRO-6-0-RT_Update_11SUSElibceph: fix potential use-after-free in have_mon_and_osd_map()9.8 Criticalkernel-livepatch-MICRO-6-0-RT_Update_11SUSElibceph: prevent potential out-of-bounds writes in handle_auth_session_key()9.8 Criticalkernel-livepatch-MICRO-6-0-RT_Update_11SUSEnet: bridge: fix use-after-free due to MST port state bypass7.8 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSEBluetooth: MGMT: cancel mesh send timer when hdev removed7.8 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSEmptcp: fix race condition in mptcp_schedule_work()9.8 Criticalkernel-livepatch-MICRO-6-0-RT_Update_11SUSEsctp: Fix MAC comparison to be constant-time8.1 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSEtcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().8.1 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSExsk: Harden userspace-supplied xdp_desc validation7.8 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSEsunrpc: fix null pointer dereference on zero-length checksum7.5 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSEipvs: Defer ip_vs_ftp unregister during netns cleanup7.8 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSEi40e: add validation for ring_len param8.8 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSEscsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()8.8 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSERDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()5.5 Mediumkernel-livepatch-MICRO-6-0-RT_Update_11SUSEtls: fix handling of zero-length records on the rx_list9.8 Criticalkernel-livepatch-MICRO-6-0-RT_Update_11SUSEnetfilter: nf_tables: reject duplicate device on updates7.8 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSESecurity update for kernel-livepatch-MICRO-6-0-RT_Update_11No scorekernel-livepatch-MICRO-6-0-RT_Update_11SUSESecurity update for kernel-livepatch-MICRO-6-0-RT_Update_11No scorekernel-livepatch-MICRO-6-0-RT_Update_11SUSEice: Fix a null pointer dereference in ice_copy_and_init_pkg()5.5 Mediumkernel-livepatch-MICRO-6-0-RT_Update_11SUSEvsock: Do not allow binding to VMADDR_PORT_ANY7.8 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSEtls: handle data disappearing from under the TLS ULP7.8 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSEbpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls8.6 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSEsunrpc: fix handling of server side tls alerts9.8 Criticalkernel-livepatch-MICRO-6-0-RT_Update_11SUSExfrm: interface: fix use-after-free after changing collect_md xfrm interface7.8 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSEclone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns7.8 Highkernel-livepatch-MICRO-6-0-RT_Update_11SUSEsmb: client: fix use-after-free in crypt_message when using async crypto9.8 Critical