kernel-livepatch-SLE15-SP6_Update_33 vulnerabilities (SUSE)
29 vulnerabilities.
-
kernel-livepatch-SLE15-SP6_Update_33SUSE ipv4: validate checksum_start before completing checksum 9.3 Critical -
kernel-livepatch-SLE15-SP6_Update_33SUSE ipv4: free inet_opt and ireq_opt after an RCU grace period 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_33SUSE RDMA/rxe: validate access flags before swapping the MR's PD 7.8 High -
kernel-livepatch-SLE15-SP6_Update_33SUSE RDMA/core: Reject unregistering netdevs in ib_get_eth_speed 7.0 High -
kernel-livepatch-SLE15-SP6_Update_33SUSE IB/isert: wait for deferred control PDU completions before releasing the connection 8.1 High -
kernel-livepatch-SLE15-SP6_Update_33SUSE RDMA/siw: Bound fragmented header copies by the remaining length 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_33SUSE exec: Cleanup POSIX timers right after de_thread() 7.8 High -
kernel-livepatch-SLE15-SP6_Update_33SUSE RDMA/ucma: Serialize join and leave on copy_to_user failure 7.8 High -
kernel-livepatch-SLE15-SP6_Update_33SUSE arm64: percpu: Fix LSE operations on {8,16}-bit types No score -
kernel-livepatch-SLE15-SP6_Update_33SUSE smb: client: fix use-after-free of iface in cifs_try_adding_channels() 7.5 High -
kernel-livepatch-SLE15-SP6_Update_33SUSE sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START 8.1 High -
kernel-livepatch-SLE15-SP6_Update_33SUSE net/mlx5e: Fix use-after-free race in sample_restore_put() No score -
kernel-livepatch-SLE15-SP6_Update_33SUSE net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put No score -
kernel-livepatch-SLE15-SP6_Update_33SUSE x86/mm: Fix user-space data loss with MADV_FREE and THP No score -
kernel-livepatch-SLE15-SP6_Update_33SUSE smb: client: reject userspace cifs.idmap descriptions 8.5 High -
kernel-livepatch-SLE15-SP6_Update_33SUSE smb: client: fix heap overflow in DACL owner/group rewrite 8.8 High -
kernel-livepatch-SLE15-SP6_Update_33SUSE smb: client: bound dirent name against end of SMB response in cifs_filldir 8.1 High -
kernel-livepatch-SLE15-SP6_Update_33SUSE scsi: target: iscsi: Reserve a terminator byte for the login payload 9.1 Critical -
kernel-livepatch-SLE15-SP6_Update_33SUSE mm/huge_memory: transfer the pmd dirty bit to the folio on zap 5.7 Medium -
kernel-livepatch-SLE15-SP6_Update_33SUSE nfsd: initialize copy-notify stateid before publishing it 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_33SUSE svcrdma: Reject Read lists that exceed the page budget 7.5 High -
kernel-livepatch-SLE15-SP6_Update_33SUSE net: skbuff: don't touch shared zerocopy state in skb_tx_error() 7.8 High -
kernel-livepatch-SLE15-SP6_Update_33SUSE netfilter: nf_conntrack: defer invalid log until after unlock 7.5 High -
kernel-livepatch-SLE15-SP6_Update_33SUSE tls: rx: restore msg_iter before TLS 1.3 optimistic retry 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_33SUSE sctp: fix use-after-free of cached ASCONF chunk 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_33SUSE crypto: algif_skcipher - force synchronous processing on trees without ctx->state 7.1 High -
kernel-livepatch-SLE15-SP6_Update_33SUSE net: serialize netif_running() check in enqueue_to_backlog() 9.9 Critical -
kernel-livepatch-SLE15-SP6_Update_33SUSE espintcp: use sk_msg_free_partial to fix partial send 9.8 Critical -
kernel-livepatch-SLE15-SP6_Update_33SUSE btrfs: always detect conflicting inodes when logging inode refs 9.1 Critical