kernel-livepatch-SLE15-SP6_Update_21 vulnerabilities (SUSE)
46 vulnerabilities.
-
kernel-livepatch-SLE15-SP6_Update_21SUSE veth: fix skb length accounting after XDP frag adjustment 10.0 Critical -
kernel-livepatch-SLE15-SP6_Update_21SUSE RDMA/srpt: fix integer overflow in immediate data length check 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_21SUSE ALSA: seq: close a re-opened queue timer in the destructor 7.8 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE pppoe: reload header pointer after dev_hard_header() 7.8 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE netfilter: ipset: fix race between dump and ip_set_list resize 7.8 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE net: ifb: report ethtool stats over num_tx_queues 7.1 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE ipv4: raw: reject IP_HDRINCL packets with ihl < 5 7.8 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE nfc: llcp: Fix use-after-free in llcp_sock_release() 7.8 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE net: hsr: fix potential OOB access in supervision frame handling 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_21SUSE tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_21SUSE sctp: fix race between sctp_wait_for_connect and peeloff 7.8 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync 8.8 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). 8.8 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE ipv6: validate extension header length before copying to cmsg 7.1 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE ip6: vti: Use ip6_tnl.net in vti6_changelink(). 8.8 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE xfrm: esp: restore combined single-frag length gate 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_21SUSE scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_21SUSE blk-cgroup: fix UAF in __blkcg_rstat_flush() 7.8 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete 7.8 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE apparmor: validate DFA start states are in bounds in unpack_pdb 7.1 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE apparmor: fix unprivileged local user can do privileged policy management 7.8 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE btrfs: reject new transactions if the fs is fully read-only 5.5 Medium -
kernel-livepatch-SLE15-SP6_Update_21SUSE crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode 7.1 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE macvlan: fix error recovery in macvlan_common_newlink() 7.8 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE spi: tegra210-quad: Protect curr_xfer check in IRQ handler 4.7 Medium -
kernel-livepatch-SLE15-SP6_Update_21SUSE net/sched: cls_u32: use skb_header_pointer_careful() 7.1 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer 5.5 Medium -
kernel-livepatch-SLE15-SP6_Update_21SUSE ALSA: aloop: Fix racy access at PCM trigger 7.8 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE btrfs: do not strictly require dirty metadata threshold for metadata writepages 5.5 Medium -
kernel-livepatch-SLE15-SP6_Update_21SUSE btrfs: send: check for inline extents in range_is_hole_in_parent() 5.5 Medium -
kernel-livepatch-SLE15-SP6_Update_21SUSE netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() 7.8 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() 7.8 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE net/sched: Enforce that teql can only be used as root qdisc 7.8 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec 5.5 Medium -
kernel-livepatch-SLE15-SP6_Update_21SUSE net: hv_netvsc: reject RSS hash key programming without RX indirection table 6.7 Medium -
kernel-livepatch-SLE15-SP6_Update_21SUSE dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() 7.8 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE crypto: af_alg - zero initialize memory allocated via sock_kmalloc 5.5 Medium -
kernel-livepatch-SLE15-SP6_Update_21SUSE net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change 7.8 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() 7.5 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE s390/ctcm: Fix double-kfree 8.8 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE smb: client: Fix refcount leak for cifs_sb_tlink 2.0 Low -
kernel-livepatch-SLE15-SP6_Update_21SUSE cifs: parse_dfs_referrals: prevent oob on malformed input 9.4 Critical -
kernel-livepatch-SLE15-SP6_Update_21SUSE crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg 7.8 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare 7.1 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue 7.8 High -
kernel-livepatch-SLE15-SP6_Update_21SUSE RDMA/mana_ib: boundary check before installing cq callbacks 7.8 High