kernel-livepatch-SLE15-SP6_Update_30 vulnerabilities (SUSE)
99 vulnerabilities.
kernel-livepatch-SLE15-SP6_Update_30SUSEblk-cgroup: fix UAF in __blkcg_rstat_flush()7.8 Highkernel-livepatch-SLE15-SP6_Update_30SUSE9p: avoid putting oldfid in p9_client_walk() error path10.0 Criticalkernel-livepatch-SLE15-SP6_Update_30SUSEKVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path7.8 Highkernel-livepatch-SLE15-SP6_Update_30SUSEfbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()7.1 Highkernel-livepatch-SLE15-SP6_Update_30SUSENFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr7.5 Highkernel-livepatch-SLE15-SP6_Update_30SUSEfuse: re-lock request before replacing page cache folio7.8 Highkernel-livepatch-SLE15-SP6_Update_30SUSEvirtiofs: fix UAF on submount umount7.8 Highkernel-livepatch-SLE15-SP6_Update_30SUSEdrm/amdgpu/vce: Prevent partial address patches8.8 Highkernel-livepatch-SLE15-SP6_Update_30SUSExfs: resample the data fork mapping after cycling ILOCK7.8 Highkernel-livepatch-SLE15-SP6_Update_30SUSEarm64: errata: Mitigate TLBI errata on various Arm CPUs8.8 Highkernel-livepatch-SLE15-SP6_Update_30SUSEnet: mana: Use pci_name() for debugfs directory naming5.5 Mediumkernel-livepatch-SLE15-SP6_Update_30SUSEnet: mana: Guard mana_remove against double invocation5.5 Mediumkernel-livepatch-SLE15-SP6_Update_30SUSEnetfilter: nft_ct: bail out on template ct in get eval7.8 Highkernel-livepatch-SLE15-SP6_Update_30SUSEl2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()7.8 Highkernel-livepatch-SLE15-SP6_Update_30SUSExsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata()7.8 Highkernel-livepatch-SLE15-SP6_Update_30SUSEsctp: validate cached peer INIT chunk length in COOKIE_ECHO processing9.8 Criticalkernel-livepatch-SLE15-SP6_Update_30SUSEsctp: validate embedded INIT chunk and address list lengths in cookie9.1 Criticalkernel-livepatch-SLE15-SP6_Update_30SUSEbnxt_en: Fix NULL pointer dereference5.5 Mediumkernel-livepatch-SLE15-SP6_Update_30SUSEnetfilter: require Ethernet MAC header before using eth_hdr()9.4 Criticalkernel-livepatch-SLE15-SP6_Update_30SUSEfs/mbcache: cancel shrink work before destroying the cache7.8 Highkernel-livepatch-SLE15-SP6_Update_30SUSEquota: Fix race of dquot_scan_active() with quota deactivation7.8 Highkernel-livepatch-SLE15-SP6_Update_30SUSEnetfilter: nf_conntrack_sip: don't use simple_strtoul9.8 Criticalkernel-livepatch-SLE15-SP6_Update_30SUSEsmb/client: fix possible infinite loop and oob read in symlink_data()8.1 Highkernel-livepatch-SLE15-SP6_Update_30SUSEnetfilter: nf_tables: use list_del_rcu for netlink hooks7.8 Highkernel-livepatch-SLE15-SP6_Update_30SUSEnet: gro: don't merge zcopy skbs7.8 Highkernel-livepatch-SLE15-SP6_Update_30SUSEsmb: client: reject userspace cifs.spnego descriptions7.1 Highkernel-livepatch-SLE15-SP6_Update_30SUSExfrm: ah: account for ESN high bits in async callbacks5.5 Mediumkernel-livepatch-SLE15-SP6_Update_30SUSEx86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache8.8 Highkernel-livepatch-SLE15-SP6_Update_30SUSERDMA/mana: Validate rx_hash_key_len7.8 Highkernel-livepatch-SLE15-SP6_Update_30SUSERDMA/mana: Fix error unwind in mana_ib_create_qp_rss()5.5 Mediumkernel-livepatch-SLE15-SP6_Update_30SUSERDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss()5.5 Mediumkernel-livepatch-SLE15-SP6_Update_30SUSERDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()7.8 Highkernel-livepatch-SLE15-SP6_Update_30SUSEusb: ulpi: fix memory leak on ulpi_register() error paths5.5 Mediumkernel-livepatch-SLE15-SP6_Update_30SUSERDMA/mana_ib: Disable RX steering on RSS QP destroy7.8 Highkernel-livepatch-SLE15-SP6_Update_30SUSEocfs2: split transactions in dio completion to avoid credit exhaustion5.5 Mediumkernel-livepatch-SLE15-SP6_Update_30SUSEBluetooth: hci_event: fix potential UAF in SSP passkey handlers8.8 Highkernel-livepatch-SLE15-SP6_Update_30SUSEpowerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling5.5 Mediumkernel-livepatch-SLE15-SP6_Update_30SUSEptrace: slightly saner 'get_dumpable()' logic7.1 Highkernel-livepatch-SLE15-SP6_Update_30SUSEscsi: storvsc: Fix scheduling while atomic on PREEMPT_RT5.5 Mediumkernel-livepatch-SLE15-SP6_Update_30SUSEnet/mana: Null service_wq on setup error to prevent double destroy7.8 Highkernel-livepatch-SLE15-SP6_Update_30SUSEnet: mana: Fix double destroy_workqueue on service rescan PCI path7.8 Highkernel-livepatch-SLE15-SP6_Update_30SUSEnet: mana: fix use-after-free in add_adev() error path7.8 Highkernel-livepatch-SLE15-SP6_Update_30SUSEbtrfs: reject root items with drop_progress and zero drop_level5.5 Mediumkernel-livepatch-SLE15-SP6_Update_30SUSEcrypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption7.8 Highkernel-livepatch-SLE15-SP6_Update_30SUSEx86/CPU: Fix FPDSS on Zen15.5 Mediumkernel-livepatch-SLE15-SP6_Update_30SUSEocfs2: fix possible deadlock between unlink and dio_end_io_write7.5 Highkernel-livepatch-SLE15-SP6_Update_30SUSEx86/platform/uv: Handle deconfigured sockets5.5 Mediumkernel-livepatch-SLE15-SP6_Update_30SUSEs390/syscalls: Add spectre boundary for syscall dispatch table5.5 Mediumkernel-livepatch-SLE15-SP6_Update_30SUSEs390/entry: Scrub r12 register on kernel entry5.5 Medium