kernel-livepatch-SLE15-SP4_Update_60 vulnerabilities (SUSE)
87 vulnerabilities.
kernel-livepatch-SLE15-SP4_Update_60SUSEdrm/vmwgfx: validate DRAW_PRIMITIVES header size before division7.8 Highkernel-livepatch-SLE15-SP4_Update_60SUSEdrm/vmwgfx: bound DMA command body size against suffix pointer8.8 Highkernel-livepatch-SLE15-SP4_Update_60SUSEipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD9.8 Criticalkernel-livepatch-SLE15-SP4_Update_60SUSEconfigfs: fix lockless traversals of ->s_children7.8 Highkernel-livepatch-SLE15-SP4_Update_60SUSEtipc: require net admin for TIPCv2 netlink mutators7.8 Highkernel-livepatch-SLE15-SP4_Update_60SUSEnet/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen9.8 Criticalkernel-livepatch-SLE15-SP4_Update_60SUSEnetfilter: ipset: make sure gc is properly stopped7.8 Highkernel-livepatch-SLE15-SP4_Update_60SUSEsctp: add INIT verification after cookie unpacking9.8 Criticalkernel-livepatch-SLE15-SP4_Update_60SUSEsctp: fix addr_wq_timer race in sctp_free_addr_wq()7.8 Highkernel-livepatch-SLE15-SP4_Update_60SUSEgue: validate REMCSUM private option length9.8 Criticalkernel-livepatch-SLE15-SP4_Update_60SUSEnetfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop9.1 Criticalkernel-livepatch-SLE15-SP4_Update_60SUSEipv6: mcast: Fix potential UAF in MLD delayed work9.8 Criticalkernel-livepatch-SLE15-SP4_Update_60SUSEnet: thunderbolt: Fix frags[] overflow by bounding frame_count8.8 Highkernel-livepatch-SLE15-SP4_Update_60SUSExfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-livepatch-SLE15-SP4_Update_60SUSEnvmet-rdma: handle inline data with a nonzero offset9.8 Criticalkernel-livepatch-SLE15-SP4_Update_60SUSEdm-verity: fix buffer overflow in FEC calculation9.8 Criticalkernel-livepatch-SLE15-SP4_Update_60SUSEcpu: hotplug: Bound hotplug states sysfs output7.8 Highkernel-livepatch-SLE15-SP4_Update_60SUSEnet: sit: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-livepatch-SLE15-SP4_Update_60SUSEnet: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-livepatch-SLE15-SP4_Update_60SUSEnet: ip_vti: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-livepatch-SLE15-SP4_Update_60SUSEnet: ipip: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-livepatch-SLE15-SP4_Update_60SUSEnet: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-livepatch-SLE15-SP4_Update_60SUSEnet: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-livepatch-SLE15-SP4_Update_60SUSEs390/zcrypt: Validate length for CCA AES cipher key requests7.8 Highkernel-livepatch-SLE15-SP4_Update_60SUSEs390/zcrypt: Validate length for CCA ECC private key requests7.8 Highkernel-livepatch-SLE15-SP4_Update_60SUSEdrm/vc4: Prevent shader BO mappings from becoming writable7.8 Highkernel-livepatch-SLE15-SP4_Update_60SUSEsctp: fix auth_hmacs array size in struct sctp_cookie8.1 Highkernel-livepatch-SLE15-SP4_Update_60SUSExfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()7.8 Highkernel-livepatch-SLE15-SP4_Update_60SUSEnet: ipv4: bound TCP reordering sysctl writes and MTU probe sizes7.1 Highkernel-livepatch-SLE15-SP4_Update_60SUSEnvmet-auth: validate reply message payload bounds against transfer length9.1 Criticalkernel-livepatch-SLE15-SP4_Update_60SUSEi2c: core: fix adapter deregistration race7.8 Highkernel-livepatch-SLE15-SP4_Update_60SUSEi2c: core: fix adapter registration race7.8 Highkernel-livepatch-SLE15-SP4_Update_60SUSEnetfilter: bridge: make ebt_snat ARP rewrite writable8.8 Highkernel-livepatch-SLE15-SP4_Update_60SUSEcrypto: af_alg - Fix incorrect boolean values in af_alg_ctx4.8 Mediumkernel-livepatch-SLE15-SP4_Update_60SUSEcrypto: af_alg - Disallow concurrent writes in af_alg_sendmsg7.8 Highkernel-livepatch-SLE15-SP4_Update_60SUSEnet/ipv6: release expired exception dst cached in socket7.5 Highkernel-livepatch-SLE15-SP4_Update_60SUSEEDAC/i10nm: fix refcount leak in pci_get_dev_wrapper()8.2 High