kernel-livepatch-SLE15-SP4_Update_58 vulnerabilities (SUSE)
70 vulnerabilities.
-
kernel-livepatch-SLE15-SP4_Update_58SUSE RDMA/srpt: fix integer overflow in immediate data length check 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_58SUSE ALSA: seq: close a re-opened queue timer in the destructor 7.8 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE libceph: Fix multiplication overflow in decode_new_up_state_weight() 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_58SUSE net/sched: serialize qdisc_rtab_list against concurrent get/put 7.8 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE pppoe: reload header pointer after dev_hard_header() 7.8 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE sctp: don't free the ASCONF's own transport in DEL-IP processing 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_58SUSE KVM: x86: wean fast IN from emulator_pio_in No score -
kernel-livepatch-SLE15-SP4_Update_58SUSE posix-cpu-timers: Prevent UAF caused by non-leader exec() race 7.8 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE ipv4: igmp: remove multicast group from hash table on device destruction 7.8 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE KVM: x86: Check for invalid/obsolete root *after* making MMU pages available 8.8 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE netfilter: ipset: fix race between dump and ip_set_list resize 7.8 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE ipv4: raw: reject IP_HDRINCL packets with ihl < 5 7.8 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits 9.0 Critical -
kernel-livepatch-SLE15-SP4_Update_58SUSE nfc: llcp: Fix use-after-free in llcp_sock_release() 7.8 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_58SUSE ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_58SUSE Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp 8.8 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE sctp: fix race between sctp_wait_for_connect and peeloff 7.8 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_58SUSE ipv6: exthdrs: refresh nh after handling HAO option 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_58SUSE ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). 8.8 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE ipv6: validate extension header length before copying to cmsg 7.1 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE xfrm: input: hold netns during deferred transport reinjection 8.8 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE ip6: vti: Use ip6_tnl.net in vti6_changelink(). 8.8 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() 8.1 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_58SUSE scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_58SUSE net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink 8.8 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE KEYS: fix overflow in keyctl_pkey_params_get_2() 7.8 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level 8.8 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() 7.1 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path 7.8 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() 7.1 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr 7.5 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE fuse: re-lock request before replacing page cache folio 7.8 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE drm/amdgpu/vce: Prevent partial address patches 8.8 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE xfs: resample the data fork mapping after cycling ILOCK 7.8 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() 8.0 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE arm64: errata: Mitigate TLBI errata on various Arm CPUs 8.8 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE netfilter: nft_ct: bail out on template ct in get eval 7.8 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req(). 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_58SUSE Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() 8.0 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_58SUSE sctp: validate embedded INIT chunk and address list lengths in cookie 9.1 Critical -
kernel-livepatch-SLE15-SP4_Update_58SUSE USB: serial: io_ti: fix heap overflow in get_manuf_info() 6.8 Medium -
kernel-livepatch-SLE15-SP4_Update_58SUSE netfilter: require Ethernet MAC header before using eth_hdr() 9.4 Critical -
kernel-livepatch-SLE15-SP4_Update_58SUSE quota: Fix race of dquot_scan_active() with quota deactivation 7.8 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE netfilter: nf_conntrack_sip: don't use simple_strtoul 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_58SUSE smb/client: fix possible infinite loop and oob read in symlink_data() 8.1 High -
kernel-livepatch-SLE15-SP4_Update_58SUSE libceph: Fix potential out-of-bounds access in osdmap_decode() 9.1 Critical - Show olderLoading…