kernel-livepatch-SLE15-SP4_Update_60 vulnerabilities (SUSE)
87 vulnerabilities.
-
kernel-livepatch-SLE15-SP4_Update_60SUSE ipv4: free inet_opt and ireq_opt after an RCU grace period 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_60SUSE RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_60SUSE smb: client: bound dirent name against end of SMB response in cifs_filldir 8.1 High -
kernel-livepatch-SLE15-SP4_Update_60SUSE vhost-scsi: flush backend after device ioctls 7.8 High -
kernel-livepatch-SLE15-SP4_Update_60SUSE RDMA/rvt: Return NULL after port allocation failure 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_60SUSE IB/isert: reject PDUs declaring more data than was received 9.1 Critical -
kernel-livepatch-SLE15-SP4_Update_60SUSE IB/isert: reject login PDUs declaring more data than was received 9.1 Critical -
kernel-livepatch-SLE15-SP4_Update_60SUSE ALSA: core: Fix use-after-free in snd_card_do_free() No score -
kernel-livepatch-SLE15-SP4_Update_60SUSE NFSv4.1: zero referring call lists before decoding 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_60SUSE futex: Prevent rcuwait use-after-free during requeue PI 7.8 High -
kernel-livepatch-SLE15-SP4_Update_60SUSE nvmet-tcp: reject unsolicited H2CData PDUs 7.5 High -
kernel-livepatch-SLE15-SP4_Update_60SUSE KVM: nVMX: Always flush vpid02 on first use 8.8 High -
kernel-livepatch-SLE15-SP4_Update_60SUSE nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_60SUSE smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions 7.8 High -
kernel-livepatch-SLE15-SP4_Update_60SUSE smb: client: clear ce->tgthint in free_tgts() 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_60SUSE smb: client: reject a tree connect response whose byte count is too small 9.1 Critical -
kernel-livepatch-SLE15-SP4_Update_60SUSE In the Linux kernel, the following vulnerability has been resolved: entry: Fix seccomp bypass... 8.4 High -
kernel-livepatch-SLE15-SP4_Update_60SUSE Bluetooth: RFCOMM: serialize security confirmation handling 8.8 High -
kernel-livepatch-SLE15-SP4_Update_60SUSE SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_60SUSE svcrdma: Fix offset arithmetic in read_chunk_range 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_60SUSE svcrdma: Fix pcl_for_each_segment for empty chunks 9.1 Critical -
kernel-livepatch-SLE15-SP4_Update_60SUSE nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_60SUSE sctp: stop processing a packet once its association is deleted 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_60SUSE net: tun: bound receive headroom 7.8 High -
kernel-livepatch-SLE15-SP4_Update_60SUSE tls: device: fix out-of-bounds write in tls_append_frag() 7.3 High -
kernel-livepatch-SLE15-SP4_Update_60SUSE xfrm: ah6: validate routing header segments_left 8.3 High -
kernel-livepatch-SLE15-SP4_Update_60SUSE net/packet: defer vmalloc TX_RING free until skbs finish 7.3 High -
kernel-livepatch-SLE15-SP4_Update_60SUSE ipv6: seg6: clear IPv4 control block on IPIP decapsulation No score -
kernel-livepatch-SLE15-SP4_Update_60SUSE nvmet-tcp: bound SGL data length before allocating command buffers No score -
kernel-livepatch-SLE15-SP4_Update_60SUSE fbdev: serialize mode sysfs access with lock_fb_info() No score -
kernel-livepatch-SLE15-SP4_Update_60SUSE drm/amdgpu: Fix UVD decode image min size calculation 7.8 High -
kernel-livepatch-SLE15-SP4_Update_60SUSE sctp: validate cookie AUTH state before use 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_60SUSE ipvlan: inherit needed_headroom and needed_tailroom from phy_dev 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_60SUSE net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_60SUSE net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers 7.8 High -
kernel-livepatch-SLE15-SP4_Update_60SUSE sctp: clear control chunk transport if it is being removed 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_60SUSE ipv6: prevent in6_dev_get() from resurrecting inet6_dev 7.8 High -
kernel-livepatch-SLE15-SP4_Update_60SUSE tipc: read le->link under the node lock in tipc_node_link_down() 7.8 High -
kernel-livepatch-SLE15-SP4_Update_60SUSE ip6_tunnel: clear skb2->cb[] in ip6ip6_err() 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_60SUSE bpf, sockmap: Fix sk_redir use-after-free in send verdict 8.4 High -
kernel-livepatch-SLE15-SP4_Update_60SUSE sctp: keep chunk->transport in step with the list it is queued on 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_60SUSE sctp: clear new_transport when removing a peer 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_60SUSE Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp 8.8 High -
kernel-livepatch-SLE15-SP4_Update_60SUSE net/smc: fix socket use-after-free during link group termination 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_60SUSE netfilter: ipset: do not update comments from kernel-side hash adds 8.4 High -
kernel-livepatch-SLE15-SP4_Update_60SUSE net: bridge: stop fast-leave after deleting a port group 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_60SUSE net: pktgen: fix proc entry use-after-free 7.8 High -
kernel-livepatch-SLE15-SP4_Update_60SUSE vxlan: use pskb_network_may_pull() in route_shortcircuit() 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_60SUSE sctp: prevent peer transport count overflow 8.8 High -
kernel-livepatch-SLE15-SP4_Update_60SUSE drm/vc4: Zero the tile state data array before each BIN job 7.8 High - Show olderLoading…