kernel-livepatch-SLE15-SP5_Update_44 vulnerabilities (SUSE)
85 vulnerabilities.
-
kernel-livepatch-SLE15-SP5_Update_44SUSE RDMA/srpt: fix integer overflow in immediate data length check 9.8 Critical -
kernel-livepatch-SLE15-SP5_Update_44SUSE ALSA: seq: close a re-opened queue timer in the destructor 7.8 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE libceph: Fix multiplication overflow in decode_new_up_state_weight() 9.8 Critical -
kernel-livepatch-SLE15-SP5_Update_44SUSE net/sched: serialize qdisc_rtab_list against concurrent get/put 7.8 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE pppoe: reload header pointer after dev_hard_header() 7.8 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE sctp: don't free the ASCONF's own transport in DEL-IP processing 9.8 Critical -
kernel-livepatch-SLE15-SP5_Update_44SUSE KVM: x86: wean fast IN from emulator_pio_in No score -
kernel-livepatch-SLE15-SP5_Update_44SUSE posix-cpu-timers: Prevent UAF caused by non-leader exec() race 7.8 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle 9.8 Critical -
kernel-livepatch-SLE15-SP5_Update_44SUSE ipv4: igmp: remove multicast group from hash table on device destruction 7.8 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE KVM: x86: Check for invalid/obsolete root *after* making MMU pages available 8.8 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE netfilter: ipset: fix race between dump and ip_set_list resize 7.8 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE ipv4: raw: reject IP_HDRINCL packets with ihl < 5 7.8 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits 9.0 Critical -
kernel-livepatch-SLE15-SP5_Update_44SUSE nfc: llcp: Fix use-after-free in llcp_sock_release() 7.8 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() 9.8 Critical -
kernel-livepatch-SLE15-SP5_Update_44SUSE ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() 9.8 Critical -
kernel-livepatch-SLE15-SP5_Update_44SUSE Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp 8.8 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE sctp: fix race between sctp_wait_for_connect and peeloff 7.8 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE Bluetooth: ISO: fix UAF in iso_recv_frame 8.8 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() 9.8 Critical -
kernel-livepatch-SLE15-SP5_Update_44SUSE ipv6: exthdrs: refresh nh after handling HAO option 9.8 Critical -
kernel-livepatch-SLE15-SP5_Update_44SUSE ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). 8.8 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE ipv6: validate extension header length before copying to cmsg 7.1 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE xfrm: input: hold netns during deferred transport reinjection 8.8 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE ip6: vti: Use ip6_tnl.net in vti6_changelink(). 8.8 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() 8.1 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() 9.8 Critical -
kernel-livepatch-SLE15-SP5_Update_44SUSE scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf 9.8 Critical -
kernel-livepatch-SLE15-SP5_Update_44SUSE drm/i915: Fix potential UAF in TTM object purge 7.8 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink 8.8 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE KEYS: fix overflow in keyctl_pkey_params_get_2() 7.8 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level 8.8 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() 7.1 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path 7.8 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() 7.1 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr 7.5 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE fuse: re-lock request before replacing page cache folio 7.8 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE drm/amdgpu/vce: Prevent partial address patches 8.8 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE xfs: resample the data fork mapping after cycling ILOCK 7.8 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() 8.0 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE net: mana: Use pci_name() for debugfs directory naming 5.5 Medium -
kernel-livepatch-SLE15-SP5_Update_44SUSE net: mana: Guard mana_remove against double invocation 5.5 Medium -
kernel-livepatch-SLE15-SP5_Update_44SUSE netfilter: nft_ct: bail out on template ct in get eval 7.8 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req(). 9.8 Critical -
kernel-livepatch-SLE15-SP5_Update_44SUSE Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() 8.0 High -
kernel-livepatch-SLE15-SP5_Update_44SUSE sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing 9.8 Critical -
kernel-livepatch-SLE15-SP5_Update_44SUSE sctp: validate embedded INIT chunk and address list lengths in cookie 9.1 Critical -
kernel-livepatch-SLE15-SP5_Update_44SUSE USB: serial: io_ti: fix heap overflow in get_manuf_info() 6.8 Medium -
kernel-livepatch-SLE15-SP5_Update_44SUSE netfilter: require Ethernet MAC header before using eth_hdr() 9.4 Critical - Show olderLoading…