kernel-livepatch-SLE15-SP5_Update_45 vulnerabilities (SUSE)
84 vulnerabilities.
kernel-livepatch-SLE15-SP5_Update_45SUSEsmb: client: require net admin for CIFS SWN netlink7.8 Highkernel-livepatch-SLE15-SP5_Update_45SUSEvsock/vmci: fix UAF when peer resets connection during handshake8.8 Highkernel-livepatch-SLE15-SP5_Update_45SUSEipv4: raw: reject IP_HDRINCL packets with ihl < 57.8 Highkernel-livepatch-SLE15-SP5_Update_45SUSEaf_unix: Fix UAF read of tail->len in unix_stream_data_wait()8.8 Highkernel-livepatch-SLE15-SP5_Update_45SUSEdrm/virtio: use uninterruptible resv lock for plane updates7.8 Highkernel-livepatch-SLE15-SP5_Update_45SUSEnet/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot7.5 Highkernel-livepatch-SLE15-SP5_Update_45SUSEnet: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring9.8 Criticalkernel-livepatch-SLE15-SP5_Update_45SUSEsecurity/keys: fix missed RCU read section on lookup7.8 Highkernel-livepatch-SLE15-SP5_Update_45SUSEnfc: llcp: Fix use-after-free in llcp_sock_release()7.8 Highkernel-livepatch-SLE15-SP5_Update_45SUSEnfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc()8.8 Highkernel-livepatch-SLE15-SP5_Update_45SUSEnetfilter: synproxy: refresh tcphdr after skb_ensure_writable9.8 Criticalkernel-livepatch-SLE15-SP5_Update_45SUSEipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()7.8 Highkernel-livepatch-SLE15-SP5_Update_45SUSEtunnels: do not assume transport header in iptunnel_pmtud_check_icmp()9.1 Criticalkernel-livepatch-SLE15-SP5_Update_45SUSEipv6: validate extension header length before copying to cmsg7.1 Highkernel-livepatch-SLE15-SP5_Update_45SUSEscsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()9.8 Criticalkernel-livepatch-SLE15-SP5_Update_45SUSEscsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf9.8 Criticalkernel-livepatch-SLE15-SP5_Update_45SUSEapparmor: fix use-after-free in rawdata dedup loop7.8 Highkernel-livepatch-SLE15-SP5_Update_45SUSEkeys: Pin request_key_auth payload in instantiate paths7.8 Highkernel-livepatch-SLE15-SP5_Update_45SUSEtipc: fix slab-use-after-free Read in tipc_aead_decrypt_done8.8 Highkernel-livepatch-SLE15-SP5_Update_45SUSEfuse: re-lock request before replacing page cache folio7.8 Highkernel-livepatch-SLE15-SP5_Update_45SUSEvirtiofs: fix UAF on submount umount7.8 Highkernel-livepatch-SLE15-SP5_Update_45SUSEnet/sched: act_api: use RCU with deferred freeing for action lifecycle7.8 Highkernel-livepatch-SLE15-SP5_Update_45SUSEtcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req().9.8 Criticalkernel-livepatch-SLE15-SP5_Update_45SUSElocking/rtmutex: Skip remove_waiter() when waiter is not enqueued5.5 Mediumkernel-livepatch-SLE15-SP5_Update_45SUSEdm log: fix out-of-bounds write due to region_count overflow7.8 Highkernel-livepatch-SLE15-SP5_Update_45SUSEfutex: Prevent lockup in requeue-PI during signal/ timeout wakeup5.5 Mediumkernel-livepatch-SLE15-SP5_Update_45SUSEsctp: stream: fully roll back denied add-stream state7.5 Highkernel-livepatch-SLE15-SP5_Update_45SUSEnetfilter: nf_queue: hold bridge skb->dev while queued7.8 Highkernel-livepatch-SLE15-SP5_Update_45SUSEbpf: Free reuseport cBPF prog after RCU grace period.7.8 Highkernel-livepatch-SLE15-SP5_Update_45SUSEcpuidle: Skip governor when only one idle state is available5.5 Mediumkernel-livepatch-SLE15-SP5_Update_45SUSEbonding: fix type confusion in bond_setup_by_slave()7.8 Highkernel-livepatch-SLE15-SP5_Update_45SUSEteam: fix header_ops type confusion with non-Ethernet ports7.8 Highkernel-livepatch-SLE15-SP5_Update_45SUSEbonding: prevent potential infinite loop in bond_header_parse()7.5 Highkernel-livepatch-SLE15-SP5_Update_45SUSEnet: fix memory leak in tcp_conn_request()5.5 Medium