kernel-livepatch-SLE15-SP4_Update_61 vulnerabilities (SUSE)
27 vulnerabilities.
-
kernel-livepatch-SLE15-SP4_Update_61SUSE ipv4: validate checksum_start before completing checksum 9.3 Critical -
kernel-livepatch-SLE15-SP4_Update_61SUSE ipv4: free inet_opt and ireq_opt after an RCU grace period 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_61SUSE RDMA/core: Reject unregistering netdevs in ib_get_eth_speed 7.0 High -
kernel-livepatch-SLE15-SP4_Update_61SUSE IB/isert: wait for deferred control PDU completions before releasing the connection 8.1 High -
kernel-livepatch-SLE15-SP4_Update_61SUSE RDMA/siw: Bound fragmented header copies by the remaining length 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_61SUSE exec: Cleanup POSIX timers right after de_thread() 7.8 High -
kernel-livepatch-SLE15-SP4_Update_61SUSE RDMA/ucma: Serialize join and leave on copy_to_user failure 7.8 High -
kernel-livepatch-SLE15-SP4_Update_61SUSE arm64: percpu: Fix LSE operations on {8,16}-bit types No score -
kernel-livepatch-SLE15-SP4_Update_61SUSE sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START 8.1 High -
kernel-livepatch-SLE15-SP4_Update_61SUSE bpf: Don't predict JMP32 pointer vs zero comparisons 7.0 High -
kernel-livepatch-SLE15-SP4_Update_61SUSE net/mlx5e: Fix use-after-free race in sample_restore_put() No score -
kernel-livepatch-SLE15-SP4_Update_61SUSE net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put No score -
kernel-livepatch-SLE15-SP4_Update_61SUSE smb: client: reject userspace cifs.idmap descriptions 8.5 High -
kernel-livepatch-SLE15-SP4_Update_61SUSE smb: client: fix heap overflow in DACL owner/group rewrite 8.8 High -
kernel-livepatch-SLE15-SP4_Update_61SUSE Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop No score -
kernel-livepatch-SLE15-SP4_Update_61SUSE scsi: target: iscsi: Reserve a terminator byte for the login payload 9.1 Critical -
kernel-livepatch-SLE15-SP4_Update_61SUSE nfsd: initialize copy-notify stateid before publishing it 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_61SUSE SUNRPC: harden gss_krb5_unwrap_v2 against short tokens 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_61SUSE svcrdma: Reject Read lists that exceed the page budget 7.5 High -
kernel-livepatch-SLE15-SP4_Update_61SUSE net: skbuff: don't touch shared zerocopy state in skb_tx_error() 7.8 High -
kernel-livepatch-SLE15-SP4_Update_61SUSE netfilter: nf_conntrack: defer invalid log until after unlock 7.5 High -
kernel-livepatch-SLE15-SP4_Update_61SUSE sctp: fix use-after-free of cached ASCONF chunk 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_61SUSE crypto: algif_skcipher - force synchronous processing on trees without ctx->state 7.1 High -
kernel-livepatch-SLE15-SP4_Update_61SUSE net: serialize netif_running() check in enqueue_to_backlog() 9.9 Critical -
kernel-livepatch-SLE15-SP4_Update_61SUSE bpf,fork: wipe ->bpf_storage before bailouts that access it 7.8 High -
kernel-livepatch-SLE15-SP4_Update_61SUSE espintcp: use sk_msg_free_partial to fix partial send 9.8 Critical -
kernel-livepatch-SLE15-SP4_Update_61SUSE smb: client: fix deadlock in smb2_find_smb_tcon() 7.5 High