kernel-livepatch-SLE15-SP5_Update_29 vulnerabilities (SUSE)
72 vulnerabilities.
-
kernel-livepatch-SLE15-SP5_Update_29SUSE net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle 9.8 Critical -
kernel-livepatch-SLE15-SP5_Update_29SUSE xfs: resample the data fork mapping after cycling ILOCK 7.8 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing 9.8 Critical -
kernel-livepatch-SLE15-SP5_Update_29SUSE sctp: validate embedded INIT chunk and address list lengths in cookie 9.1 Critical -
kernel-livepatch-SLE15-SP5_Update_29SUSE RDMA/umem: Fix truncation for block sizes >= 4G 7.8 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE crypto: af_alg - Cap AEAD AD length to 0x80000000 5.5 Medium -
kernel-livepatch-SLE15-SP5_Update_29SUSE libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() 7.5 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE ipc: limit next_id allocation to the valid ID range 7.8 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE net/sched: fix pedit partial COW leading to page cache corruption 7.8 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE net/sched: act_ct: Only release RCU read lock after ct_ft 7.8 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE io-wq: check that the predecessor is hashed in io_wq_remove_pending() 7.8 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE ipv4: icmp: validate reply type before using icmp_pointers 8.2 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() 7.8 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE wifi: brcmfmac: validate bsscfg indices in IF events 8.8 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE crypto: algif_aead - Fix minimum RX size check for decryption 5.5 Medium -
kernel-livepatch-SLE15-SP5_Update_29SUSE usb: ulpi: fix double free in ulpi_register_interface() error path 7.8 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE nfc: llcp: add missing return after LLCP_CLOSED checks 8.8 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE net/sched: teql: Fix double-free in teql_master_xmit 7.8 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE apparmor: fix unprivileged local user can do privileged policy management 7.8 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE ALSA: aloop: Fix racy access at PCM trigger 7.8 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() 7.5 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE ipvs: fix ipv4 null-ptr-deref in route error path 6.8 Medium -
kernel-livepatch-SLE15-SP5_Update_29SUSE mrp: introduce active flags to prevent UAF when applicant uninit 7.8 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE libceph: fix potential use-after-free in have_mon_and_osd_map() 9.8 Critical -
kernel-livepatch-SLE15-SP5_Update_29SUSE libceph: prevent potential out-of-bounds writes in handle_auth_session_key() 9.8 Critical -
kernel-livepatch-SLE15-SP5_Update_29SUSE mptcp: fix race condition in mptcp_schedule_work() 9.8 Critical -
kernel-livepatch-SLE15-SP5_Update_29SUSE sctp: Fix MAC comparison to be constant-time 8.1 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE smc: Fix use-after-free in tcp_write_timer_handler(). 7.8 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() 8.8 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE bpf: Propagate error from htab_lock_bucket() to userspace 7.1 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory 5.5 Medium -
kernel-livepatch-SLE15-SP5_Update_29SUSE wifi: mac80211: check S1G action frame size 7.1 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE igb: Do not free q_vector unless new one was allocated 7.8 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE netfilter: nf_tables: reject duplicate device on updates 7.8 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE ice: Fix a null pointer dereference in ice_copy_and_init_pkg() 5.5 Medium -
kernel-livepatch-SLE15-SP5_Update_29SUSE wifi: mac80211: reject TDLS operations when station is not associated 5.5 Medium -
kernel-livepatch-SLE15-SP5_Update_29SUSE vsock: Do not allow binding to VMADDR_PORT_ANY 7.8 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE net/packet: fix a race in packet_set_ring() and packet_notifier() 7.8 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls 8.6 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE ipv6: reject malicious packets in ipv6_gso_segment() 7.8 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE usb: gadget : fix use-after-free in composite_dev_cleanup() 7.8 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns 7.8 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE do_change_type(): refuse to operate on unmounted/not ours mounts 7.8 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE HID: core: ensure the allocated report buffer can contain the reserved report ID 8.8 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE HID: core: do not bypass hid_hw_raw_request 7.8 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE smb: client: fix use-after-free in crypt_message when using async crypto 9.8 Critical -
kernel-livepatch-SLE15-SP5_Update_29SUSE net/sched: sch_qfq: Fix race condition on qfq_aggregate 7.8 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE rpl: Fix use-after-free in rpl_do_srh_inline(). 9.8 Critical -
kernel-livepatch-SLE15-SP5_Update_29SUSE scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk 7.8 High -
kernel-livepatch-SLE15-SP5_Update_29SUSE s390/pkey: Prevent overflow in size calculation for memdup_user() 7.3 High - Show olderLoading…