kernel-livepatch-SLE15-SP5_Update_35 vulnerabilities (SUSE)
63 vulnerabilities.
-
kernel-livepatch-SLE15-SP5_Update_35SUSE ipv4: free inet_opt and ireq_opt after an RCU grace period 9.8 Critical -
kernel-livepatch-SLE15-SP5_Update_35SUSE nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget 9.8 Critical -
kernel-livepatch-SLE15-SP5_Update_35SUSE SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow 9.8 Critical -
kernel-livepatch-SLE15-SP5_Update_35SUSE SUNRPC: fix gssx_dec_option_array error path bugs 7.5 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE ipvs: clear IPv4 options after rebasing tunnel ICMP errors 9.8 Critical -
kernel-livepatch-SLE15-SP5_Update_35SUSE sctp: prevent peer transport count overflow 8.8 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get 7.8 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE xfrm: fix stale skb->prev after async crypto steals a GSO segment 9.8 Critical -
kernel-livepatch-SLE15-SP5_Update_35SUSE virtiofs: fix UAF on submount umount 7.8 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE crypto: ccp - copy IV using skcipher ivsize 7.8 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE macvlan: fix error recovery in macvlan_common_newlink() 7.8 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE net/sched: Enforce that teql can only be used as root qdisc 7.8 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE macvlan: fix possible UAF in macvlan_forward_source() 7.8 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE net/sched: sch_qfq: do not free existing class in qfq_change_class() 7.8 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf 7.5 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE libceph: make decode_pool() more resilient against corrupted osdmaps 9.1 Critical -
kernel-livepatch-SLE15-SP5_Update_35SUSE net: hns3: add VLAN id validation before using 8.8 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE iommu: disable SVA when CONFIG_X86 is set 7.8 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() 7.5 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE ipvs: fix ipv4 null-ptr-deref in route error path 6.8 Medium -
kernel-livepatch-SLE15-SP5_Update_35SUSE ocfs2: fix kernel BUG in ocfs2_find_victim_chain 7.1 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE netfilter: ebtables: fix table blob use-after-free 7.8 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE gtp: Fix use-after-free in __gtp_encap_destroy(). 7.8 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE mrp: introduce active flags to prevent UAF when applicant uninit 7.8 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE usbnet: Prevents free active kevent 5.4 Medium -
kernel-livepatch-SLE15-SP5_Update_35SUSE libceph: fix potential use-after-free in have_mon_and_osd_map() 9.8 Critical -
kernel-livepatch-SLE15-SP5_Update_35SUSE libceph: prevent potential out-of-bounds writes in handle_auth_session_key() 9.8 Critical -
kernel-livepatch-SLE15-SP5_Update_35SUSE ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr 7.8 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE mptcp: fix a race in mptcp_pm_del_add_timer() 9.8 Critical -
kernel-livepatch-SLE15-SP5_Update_35SUSE smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set(). 7.8 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE fs: udf: fix OOB read in lengthAllocDescs handling 7.8 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE drm/stm: ltdc: fix late dereference check No score -
kernel-livepatch-SLE15-SP5_Update_35SUSE USB: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup() 5.5 Medium -
kernel-livepatch-SLE15-SP5_Update_35SUSE USB: sl811: fix memory leak with using debugfs_lookup() 5.5 Medium -
kernel-livepatch-SLE15-SP5_Update_35SUSE USB: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup() 5.5 Medium -
kernel-livepatch-SLE15-SP5_Update_35SUSE USB: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup() 5.5 Medium -
kernel-livepatch-SLE15-SP5_Update_35SUSE x86/vmscape: Add conditional IBPB mitigation 5.5 Medium -
kernel-livepatch-SLE15-SP5_Update_35SUSE net/sched: ets: use old 'nbands' while purging unused classes 5.5 Medium -
kernel-livepatch-SLE15-SP5_Update_35SUSE perf/core: Exit early on perf_mmap() fail 7.8 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE perf/core: Prevent VMA split of buffer mappings 7.8 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE virtio-net: ensure the received length does not exceed allocated size 8.4 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds 7.1 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE page_pool: Fix use-after-free in page_pool_recycle_in_ring 7.8 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE arm64: set UXN on swapper page tables 5.5 Medium -
kernel-livepatch-SLE15-SP5_Update_35SUSE crypto: lzo - Fix compression buffer overrun 7.8 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE ipv4: use RCU protection in __ip_rt_update_pmtu() 8.1 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE ipv6: use RCU protection in ip6_default_advmss() 8.1 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE ndisc: use RCU protection in ndisc_alloc_skb() 7.8 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE ndisc: extend RCU protection in ndisc_send_skb() 8.1 High -
kernel-livepatch-SLE15-SP5_Update_35SUSE ata: libata-sff: Ensure that we cannot write outside the allocated buffer 7.8 High - Show olderLoading…