kernel-livepatch-SLE15-SP6-RT_Update_11 vulnerabilities (SUSE)
355 vulnerabilities.
kernel-livepatch-SLE15-SP6-RT_Update_11SUSEnet: better track kernel sockets lifetime7.8 Highkernel-livepatch-SLE15-SP6-RT_Update_11SUSEuprobes: Reject the shared zeropage in uprobe_write_opcode()5.5 Mediumkernel-livepatch-SLE15-SP6-RT_Update_11SUSEmptcp: always handle address removal under msk socket lock7.8 Highkernel-livepatch-SLE15-SP6-RT_Update_11SUSEscsi: ufs: core: bsg: Fix crash when arpmb command fails5.5 Mediumkernel-livepatch-SLE15-SP6-RT_Update_11SUSEcifs.upcall makes an upcall to the wrong namespace in containerized environments5.9 Mediumkernel-livepatch-SLE15-SP6-RT_Update_11SUSEio_uring: prevent opcode speculation7.8 Highkernel-livepatch-SLE15-SP6-RT_Update_11SUSEsockmap, vsock: For connectible sockets allow only connected5.5 Mediumkernel-livepatch-SLE15-SP6-RT_Update_11SUSEbpf: avoid holding freeze_mutex during mmap operation5.5 Mediumkernel-livepatch-SLE15-SP6-RT_Update_11SUSEnet: Add rx_skb of kfree_skb to raw_tp_null_args[].5.5 Mediumkernel-livepatch-SLE15-SP6-RT_Update_11SUSEbpf: Fix deadlock when freeing cgroup storage5.5 Mediumkernel-livepatch-SLE15-SP6-RT_Update_11SUSEio_uring/kbuf: reallocate buf lists on upgrade7.8 Highkernel-livepatch-SLE15-SP6-RT_Update_11SUSEiommu/vt-d: Avoid use of NULL after WARN_ON_ONCE5.5 Mediumkernel-livepatch-SLE15-SP6-RT_Update_11SUSEteam: prevent adding a device which is already a team device lower5.5 Mediumkernel-livepatch-SLE15-SP6-RT_Update_11SUSEbpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT7.8 Highkernel-livepatch-SLE15-SP6-RT_Update_11SUSEOPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized5.5 Mediumkernel-livepatch-SLE15-SP6-RT_Update_11SUSEptp: Ensure info->enable callback is always set5.5 Mediumkernel-livepatch-SLE15-SP6-RT_Update_11SUSEax25: rcu protect dev->ax25_ptr7.8 Highkernel-livepatch-SLE15-SP6-RT_Update_11SUSEnet: xdp: Disallow attaching device-bound programs in generic mode7.8 Highkernel-livepatch-SLE15-SP6-RT_Update_11SUSEnet: let net.core.dev_weight always be non-zero5.5 Mediumkernel-livepatch-SLE15-SP6-RT_Update_11SUSEax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt7.8 Highkernel-livepatch-SLE15-SP6-RT_Update_11SUSEteam: better TEAM_OPTION_TYPE_STRING validation5.5 Mediumkernel-livepatch-SLE15-SP6-RT_Update_11SUSEnet: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels5.5 Mediumkernel-livepatch-SLE15-SP6-RT_Update_11SUSEipv6: mcast: add RCU protection to mld_newpack()7.8 Highkernel-livepatch-SLE15-SP6-RT_Update_11SUSEIn the Linux kernel, the following vulnerability has been resolved: vsock: Orphan socket after...5.5 Mediumkernel-livepatch-SLE15-SP6-RT_Update_11SUSEscsi: ufs: bsg: Set bsg_queue to NULL after removal7.8 Highkernel-livepatch-SLE15-SP6-RT_Update_11SUSEnvkm: correctly calculate the available space of the GSP cmdq buffer5.5 Mediumkernel-livepatch-SLE15-SP6-RT_Update_11SUSEocfs2: handle a symlink read error correctly5.5 Mediumkernel-livepatch-SLE15-SP6-RT_Update_11SUSEwifi: rtw89: fix race between cancel_hw_scan and hw_scan completion7.8 Highkernel-livepatch-SLE15-SP6-RT_Update_11SUSEmptcp: consolidate suboption status9.8 Criticalkernel-livepatch-SLE15-SP6-RT_Update_11SUSEOPP: add index check to assert to avoid buffer overflow in _read_freq()7.3 Highkernel-livepatch-SLE15-SP6-RT_Update_11SUSEpfifo_tail_enqueue: Drop new packet when sch->limit == 07.8 Highkernel-livepatch-SLE15-SP6-RT_Update_11SUSEmm: clear uffd-wp PTE/PMD state on mremap()5.5 Mediumkernel-livepatch-SLE15-SP6-RT_Update_11SUSEbpf: Fix bpf_sk_select_reuseport() memory leak5.5 Mediumkernel-livepatch-SLE15-SP6-RT_Update_11SUSEfs: relax assertions on failure to encode file handles5.5 Mediumkernel-livepatch-SLE15-SP6-RT_Update_11SUSEnetfilter: conntrack: clamp maximum hashtable size to INT_MAX5.5 Mediumkernel-livepatch-SLE15-SP6-RT_Update_11SUSEnet: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets8.2 Highkernel-livepatch-SLE15-SP6-RT_Update_11SUSEbpf: Mark raw_tp arguments with PTR_MAYBE_NULL5.5 Mediumkernel-livepatch-SLE15-SP6-RT_Update_11SUSEnet/smc: initialize close_work early to avoid warning7.5 Highkernel-livepatch-SLE15-SP6-RT_Update_11SUSEsctp: fix possible UAF in sctp_v6_available()7.8 Highkernel-livepatch-SLE15-SP6-RT_Update_11SUSEKVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN8.8 Highkernel-livepatch-SLE15-SP6-RT_Update_11SUSEnet: fix data-races around sk->sk_forward_alloc7.5 Highkernel-livepatch-SLE15-SP6-RT_Update_11SUSEsched/numa: Fix the potential null pointer dereference in task_numa_work()5.5 Mediumkernel-livepatch-SLE15-SP6-RT_Update_11SUSEbpf: Make sure internal and UAPI bpf_redirect flags don't overlap5.5 Mediumkernel-livepatch-SLE15-SP6-RT_Update_11SUSEbpf: devmap: provide rxq after redirect9.8 Criticalkernel-livepatch-SLE15-SP6-RT_Update_11SUSEnfsd: fix race between laundromat and free_stateid9.8 Criticalkernel-livepatch-SLE15-SP6-RT_Update_11SUSEtcp: fix mptcp DSS corruption due to large pmtu xmit7.5 Highkernel-livepatch-SLE15-SP6-RT_Update_11SUSEnetfilter: xtables: avoid NFPROTO_UNSPEC where needed5.5 Mediumkernel-livepatch-SLE15-SP6-RT_Update_11SUSEfou: fix initialization of grc9.8 Criticalkernel-livepatch-SLE15-SP6-RT_Update_11SUSEfou: Fix null-ptr-deref in GRO.7.5 Highkernel-livepatch-SLE15-SP6-RT_Update_11SUSEbpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()7.8 High- Show moreLoading…