kernel-livepatch-SLE15-SP4_Update_59 vulnerabilities (SUSE)
105 vulnerabilities.
-
kernel-livepatch-SLE15-SP4_Update_59SUSE ipv4: free inet_opt and ireq_opt after an RCU grace period 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_59SUSE nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_59SUSE SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_59SUSE drm/amdgpu: Reject UVD message with invalid number of h265 refs No score -
kernel-livepatch-SLE15-SP4_Update_59SUSE serial: amba-pl011: synchronize DMA teardown 7.8 High -
kernel-livepatch-SLE15-SP4_Update_59SUSE ALSA: pcm: wake linked drain waiters on unlink 7.8 High -
kernel-livepatch-SLE15-SP4_Update_59SUSE ipvs: do not propagate one-packet flag to synced conns 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_59SUSE fbdev: bound mode sysfs output to the sysfs buffer 7.8 High -
kernel-livepatch-SLE15-SP4_Update_59SUSE macvlan: inherit needed_headroom and needed_tailroom from lowerdev 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_59SUSE netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() 7.5 High -
kernel-livepatch-SLE15-SP4_Update_59SUSE ipvs: clear IPv4 options after rebasing tunnel ICMP errors 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_59SUSE xdp: reject clones that overrun skb_shared_info tailroom 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_59SUSE vxlan: do not arm the ageing timer on a device that is down 8.8 High -
kernel-livepatch-SLE15-SP4_Update_59SUSE packet: use consistent hard_header_len in non-ring send paths 7.8 High -
kernel-livepatch-SLE15-SP4_Update_59SUSE scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_59SUSE Bluetooth: ISO: hold sk properly in iso_conn_ready 8.8 High -
kernel-livepatch-SLE15-SP4_Update_59SUSE mm/hugetlb: fix list corruption in allocate_file_region_entries() 7.8 High -
kernel-livepatch-SLE15-SP4_Update_59SUSE fou: Fix use-after-free in fou_create() 7.8 High -
kernel-livepatch-SLE15-SP4_Update_59SUSE wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames 8.8 High -
kernel-livepatch-SLE15-SP4_Update_59SUSE sctp: prevent peer transport count overflow 8.8 High -
kernel-livepatch-SLE15-SP4_Update_59SUSE drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size 7.8 High -
kernel-livepatch-SLE15-SP4_Update_59SUSE vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_59SUSE RDMA/srpt: fix integer overflow in immediate data length check 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_59SUSE RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs 7.8 High -
kernel-livepatch-SLE15-SP4_Update_59SUSE ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data 7.8 High -
kernel-livepatch-SLE15-SP4_Update_59SUSE RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe 7.8 High -
kernel-livepatch-SLE15-SP4_Update_59SUSE RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path 7.8 High -
kernel-livepatch-SLE15-SP4_Update_59SUSE RDMA/siw: Fix endpoint/socket association handling 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_59SUSE bridge: stp: Fix a potential use-after-free when deleting a bridge 7.8 High -
kernel-livepatch-SLE15-SP4_Update_59SUSE qede: fix off-by-one in BD ring consumption on build_skb failure 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_59SUSE ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_59SUSE KVM: arm64: vgic: Check the interrupt is still ours before migrating it 9.3 Critical -
kernel-livepatch-SLE15-SP4_Update_59SUSE KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling 9.3 Critical -
kernel-livepatch-SLE15-SP4_Update_59SUSE netfilter: nf_nat_sip: reload possible stale data pointer 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_59SUSE ocfs2: avoid moving extents to occupied clusters 7.8 High -
kernel-livepatch-SLE15-SP4_Update_59SUSE tpm: Make the TPM character devices non-seekable 7.8 High -
kernel-livepatch-SLE15-SP4_Update_59SUSE scsi: target: Bound PR-OUT TransportID parsing to the received buffer 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_59SUSE scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_59SUSE locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_59SUSE ipvs: reset full ip_vs_seq structs in ip_vs_conn_new 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_59SUSE xfrm: fix stale skb->prev after async crypto steals a GSO segment 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_59SUSE RDMA/siw: publish QP after initialization 7.8 High -
kernel-livepatch-SLE15-SP4_Update_59SUSE ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF 7.8 High -
kernel-livepatch-SLE15-SP4_Update_59SUSE net/iucv: take a reference on the socket found in afiucv_hs_rcv() 8.8 High -
kernel-livepatch-SLE15-SP4_Update_59SUSE ALSA: seq: close a re-opened queue timer in the destructor 7.8 High -
kernel-livepatch-SLE15-SP4_Update_59SUSE ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_59SUSE libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_59SUSE libceph: Fix multiplication overflow in decode_new_up_state_weight() 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_59SUSE libceph: Reject monmaps advertising zero monitors 7.5 High -
kernel-livepatch-SLE15-SP4_Update_59SUSE net/sched: serialize qdisc_rtab_list against concurrent get/put 7.8 High - Show olderLoading…