kernel-livepatch-SLE15-SP6_Update_31 vulnerabilities (SUSE)
131 vulnerabilities.
-
kernel-livepatch-SLE15-SP6_Update_31SUSE wifi: mac80211: validate individual TWT params before driver setup 8.8 High -
kernel-livepatch-SLE15-SP6_Update_31SUSE netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() 7.5 High -
kernel-livepatch-SLE15-SP6_Update_31SUSE ipvs: clear IPv4 options after rebasing tunnel ICMP errors 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_31SUSE veth: fix skb length accounting after XDP frag adjustment 10.0 Critical -
kernel-livepatch-SLE15-SP6_Update_31SUSE packet: use consistent hard_header_len in non-ring send paths 7.8 High -
kernel-livepatch-SLE15-SP6_Update_31SUSE net: ipv6: clear suppressed fib6 rule result 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_31SUSE scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_31SUSE Bluetooth: ISO: hold sk properly in iso_conn_ready 8.8 High -
kernel-livepatch-SLE15-SP6_Update_31SUSE mm/hugetlb: fix list corruption in allocate_file_region_entries() 7.8 High -
kernel-livepatch-SLE15-SP6_Update_31SUSE KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active 8.2 High -
kernel-livepatch-SLE15-SP6_Update_31SUSE fou: Fix use-after-free in fou_create() 7.8 High -
kernel-livepatch-SLE15-SP6_Update_31SUSE wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames 8.8 High -
kernel-livepatch-SLE15-SP6_Update_31SUSE drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size 7.8 High -
kernel-livepatch-SLE15-SP6_Update_31SUSE RDMA/srpt: fix integer overflow in immediate data length check 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_31SUSE RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs 7.8 High -
kernel-livepatch-SLE15-SP6_Update_31SUSE RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe 7.8 High -
kernel-livepatch-SLE15-SP6_Update_31SUSE RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path 7.8 High -
kernel-livepatch-SLE15-SP6_Update_31SUSE RDMA/siw: Fix endpoint/socket association handling 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_31SUSE bridge: stp: Fix a potential use-after-free when deleting a bridge 7.8 High -
kernel-livepatch-SLE15-SP6_Update_31SUSE qede: fix off-by-one in BD ring consumption on build_skb failure 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_31SUSE SUNRPC: pin upper rpc_clnt across the TLS connect_worker 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_31SUSE KVM: arm64: vgic: Check the interrupt is still ours before migrating it 9.3 Critical -
kernel-livepatch-SLE15-SP6_Update_31SUSE KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling 9.3 Critical -
kernel-livepatch-SLE15-SP6_Update_31SUSE ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get 7.8 High -
kernel-livepatch-SLE15-SP6_Update_31SUSE netfilter: nf_nat_sip: reload possible stale data pointer 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_31SUSE sunrpc: pin svc_xprt across the asynchronous TLS handshake callback 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_31SUSE sunrpc: wait for in-flight TLS handshake callback when cancel loses race 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_31SUSE tpm: Make the TPM character devices non-seekable 7.8 High -
kernel-livepatch-SLE15-SP6_Update_31SUSE scsi: target: Bound PR-OUT TransportID parsing to the received buffer 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_31SUSE scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_31SUSE net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete 7.8 High -
kernel-livepatch-SLE15-SP6_Update_31SUSE locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_31SUSE ipvs: reset full ip_vs_seq structs in ip_vs_conn_new 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_31SUSE KVM: x86/mmu: Fix use-after-free on vendor module reload No score -
kernel-livepatch-SLE15-SP6_Update_31SUSE xfrm: fix stale skb->prev after async crypto steals a GSO segment 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_31SUSE RDMA/siw: publish QP after initialization 7.8 High -
kernel-livepatch-SLE15-SP6_Update_31SUSE ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF 7.8 High -
kernel-livepatch-SLE15-SP6_Update_31SUSE net/iucv: take a reference on the socket found in afiucv_hs_rcv() 8.8 High -
kernel-livepatch-SLE15-SP6_Update_31SUSE ALSA: seq: close a re-opened queue timer in the destructor 7.8 High -
kernel-livepatch-SLE15-SP6_Update_31SUSE ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_31SUSE libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_31SUSE libceph: Fix multiplication overflow in decode_new_up_state_weight() 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_31SUSE libceph: Reject monmaps advertising zero monitors 7.5 High -
kernel-livepatch-SLE15-SP6_Update_31SUSE net/sched: serialize qdisc_rtab_list against concurrent get/put 7.8 High -
kernel-livepatch-SLE15-SP6_Update_31SUSE net: gro: fix double aggregation of flush-marked skbs 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_31SUSE ice: fix PTP Call Trace during PTP release No score -
kernel-livepatch-SLE15-SP6_Update_31SUSE pppoe: reload header pointer after dev_hard_header() 7.8 High -
kernel-livepatch-SLE15-SP6_Update_31SUSE x86/bugs: Make Safe-RET robust against interrupt injection 8.8 High -
kernel-livepatch-SLE15-SP6_Update_31SUSE btrfs: do not trim a device which is not writeable No score -
kernel-livepatch-SLE15-SP6_Update_31SUSE xfrm: fix sk_dst_cache double-free in xfrm_user_policy() 7.8 High - Show olderLoading…