kernel-livepatch-SLE15-SP7-RT_Update_17 vulnerabilities (SUSE)
180 vulnerabilities.
kernel-livepatch-SLE15-SP7-RT_Update_17SUSEAppArmor: Allow apparmor to handle unaligned dfa tables5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_17SUSEpstore/ram: fix buffer overflow in persistent_ram_save_old()7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_17SUSEnetfilter: nft_inner: Fix IPv6 inner_thoff desync9.1 Criticalkernel-livepatch-SLE15-SP7-RT_Update_17SUSEeventpoll: fix ep_remove struct eventpoll / struct file UAF7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_17SUSEdrm/amdkfd: Clear VRAM on allocation to prevent stale data exposure5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_17SUSEsctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_17SUSEvsock/virtio: fix accept queue count leak on transport mismatch5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_17SUSEdrm/amdkfd: validate SVM ioctl nattr against buffer size7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_17SUSEsmb/client: fix out-of-bounds read in symlink_data()9.1 Criticalkernel-livepatch-SLE15-SP7-RT_Update_17SUSEexit: prevent preemption of oopsing TASK_DEAD task7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_17SUSEipv6: xfrm6: release dst on error in xfrm6_rcv_encap()5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_17SUSEice: fix double free in ice_sf_eth_activate() error path7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_17SUSEbtrfs: fix missing last_unlink_trans update when removing a directory5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_17SUSEfanotify: fix false positive on permission events7.1 Highkernel-livepatch-SLE15-SP7-RT_Update_17SUSERDMA/rxe: Reject unknown opcodes before ICRC processing7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_17SUSEisofs: validate block number from NFS file handle in isofs_export_iget7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_17SUSEBluetooth: virtio_bt: clamp rx length before skb_put7.7 Highkernel-livepatch-SLE15-SP7-RT_Update_17SUSEip6_gre: Use cached t->net in ip6erspan_changelink().7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_17SUSElibceph: Fix slab-out-of-bounds access in auth message processing9.1 Criticalkernel-livepatch-SLE15-SP7-RT_Update_17SUSExfrm: defensively unhash xfrm_state lists in __xfrm_state_delete7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_17SUSERDMA/hns: Fix unlocked call to hns_roce_qp_remove()7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_17SUSEnetfilter: reject zero shift in nft_bitwise5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_17SUSEKVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L17.9 Highkernel-livepatch-SLE15-SP7-RT_Update_17SUSEKVM: nSVM: Avoid clearing VMCB_LBR in vmcb125.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_17SUSEwifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup()7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_17SUSEfbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_17SUSEx86/shstk: Prevent deadlock during shstk sigreturn5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_17SUSEnet: rds: fix MR cleanup on copy error7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_17SUSEipv4: icmp: validate reply type before using icmp_pointers8.2 Highkernel-livepatch-SLE15-SP7-RT_Update_17SUSExfs: fix a resource leak in xfs_alloc_buftarg()5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_17SUSEext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_17SUSEbtrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_17SUSEapparmor: fix invalid deref of rawdata when export_binary is unset5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_17SUSESUNRPC: fix gss_auth kref leak in gss_alloc_msg error path5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_17SUSEgfs2: fix memory leaks in gfs2_fill_super error path5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_17SUSEext4: fix memory leak in ext4_ext_shift_extents()5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_17SUSEnet: stmmac: fix oops when split header is enabled5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_17SUSEext4: don't cache extent during splitting extent5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_17SUSEiommu/vt-d: Clear Present bit before tearing down PASID entry7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_17SUSEnet: hns3: fix double free issue for tx spare buffer7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_17SUSESUNRPC: auth_gss: fix memory leaks in XDR decoding error paths5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_17SUSEiommu/vt-d: Flush cache for PASID table before using it7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_17SUSEapparmor: fix NULL sock in aa_sock_file_perm5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_17SUSEnetfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_17SUSEopenvswitch: cap upcall PID array size and pre-size vport replies5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_17SUSEbpf: fix end-of-list detection in cgroup_storage_get_next_key()5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_17SUSEcrypto: algif_aead - snapshot IV for async AEAD requests5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_17SUSEnet/rds: handle zerocopy send cleanup before the message is queued7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_17SUSElib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_17SUSEnet: qrtr: ns: Limit the maximum server registration per node5.5 Medium- Show moreLoading…