kernel-livepatch-SLE15-SP4_Update_59 vulnerabilities (SUSE)
105 vulnerabilities.
kernel-livepatch-SLE15-SP4_Update_59SUSEnet: gro: fix double aggregation of flush-marked skbs9.8 Criticalkernel-livepatch-SLE15-SP4_Update_59SUSEpppoe: reload header pointer after dev_hard_header()7.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSEx86/bugs: Make Safe-RET robust against interrupt injection2.0 Lowkernel-livepatch-SLE15-SP4_Update_59SUSEbtrfs: do not trim a device which is not writeableNo scorekernel-livepatch-SLE15-SP4_Update_59SUSExfrm: fix sk_dst_cache double-free in xfrm_user_policy()7.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSEipv4: fib: free fib_alias with kfree_rcu() on insert error path7.1 Highkernel-livepatch-SLE15-SP4_Update_59SUSErhashtable: clear stale iter->p on table restart7.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSEKVM: nVMX: Hide shadow VMCS right after VMCLEAR8.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSEperf/core: Detach event groups during remove_on_exec7.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSEtipc: fix use-after-free of the discoverer in tipc_disc_rcv()7.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSEnet/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket9.8 Criticalkernel-livepatch-SLE15-SP4_Update_59SUSEALSA: hda/cs35l41: Fix firmware load work teardown7.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSEtipc: fix out-of-bounds read in broadcast Gap ACK blocks9.1 Criticalkernel-livepatch-SLE15-SP4_Update_59SUSEipv4: igmp: remove multicast group from hash table on device destruction7.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSEbpf: Reject fragmented frames in devmap9.8 Criticalkernel-livepatch-SLE15-SP4_Update_59SUSEcrypto: qat - validate RSA CRT component lengths7.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSERDMA/siw: bound Read Response placement to the RREAD length9.8 Criticalkernel-livepatch-SLE15-SP4_Update_59SUSEfuse: re-lock request before returning from fuse_ref_folio()7.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSEcan: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF7.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSEsmb: client: require net admin for CIFS SWN netlink7.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSEvsock/vmci: fix UAF when peer resets connection during handshake8.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSEipv4: raw: reject IP_HDRINCL packets with ihl < 57.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSEaf_unix: Fix UAF read of tail->len in unix_stream_data_wait()8.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSEdrm/virtio: use uninterruptible resv lock for plane updates7.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSEnet/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot7.5 Highkernel-livepatch-SLE15-SP4_Update_59SUSEnet: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring9.8 Criticalkernel-livepatch-SLE15-SP4_Update_59SUSEsecurity/keys: fix missed RCU read section on lookup7.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSEnfc: llcp: Fix use-after-free in llcp_sock_release()7.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSEnfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc()8.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSEnetfilter: synproxy: refresh tcphdr after skb_ensure_writable9.8 Criticalkernel-livepatch-SLE15-SP4_Update_59SUSEipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()7.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSEtunnels: do not assume transport header in iptunnel_pmtud_check_icmp()9.1 Criticalkernel-livepatch-SLE15-SP4_Update_59SUSEipv6: validate extension header length before copying to cmsg7.1 Highkernel-livepatch-SLE15-SP4_Update_59SUSEscsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()9.8 Criticalkernel-livepatch-SLE15-SP4_Update_59SUSEscsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf9.8 Criticalkernel-livepatch-SLE15-SP4_Update_59SUSEapparmor: fix use-after-free in rawdata dedup loop7.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSEkeys: Pin request_key_auth payload in instantiate paths7.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSEtipc: fix slab-use-after-free Read in tipc_aead_decrypt_done8.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSEfuse: re-lock request before replacing page cache folio7.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSEvirtiofs: fix UAF on submount umount7.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSEnet/sched: act_api: use RCU with deferred freeing for action lifecycle7.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSEtcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req().9.8 Criticalkernel-livepatch-SLE15-SP4_Update_59SUSElocking/rtmutex: Skip remove_waiter() when waiter is not enqueued5.5 Mediumkernel-livepatch-SLE15-SP4_Update_59SUSEdm log: fix out-of-bounds write due to region_count overflow7.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSEfutex: Prevent lockup in requeue-PI during signal/ timeout wakeup5.5 Mediumkernel-livepatch-SLE15-SP4_Update_59SUSEsctp: stream: fully roll back denied add-stream state7.5 Highkernel-livepatch-SLE15-SP4_Update_59SUSEnetfilter: nf_queue: hold bridge skb->dev while queued7.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSEbpf: Free reuseport cBPF prog after RCU grace period.7.8 Highkernel-livepatch-SLE15-SP4_Update_59SUSEcpuidle: Skip governor when only one idle state is available5.5 Mediumkernel-livepatch-SLE15-SP4_Update_59SUSEnet/rds: handle zerocopy send cleanup before the message is queued7.8 High- Show moreLoading…