kernel-livepatch-SLE15-SP7-RT_Update_20 vulnerabilities (SUSE)
668 vulnerabilities.
kernel-livepatch-SLE15-SP7-RT_Update_20SUSEqed: fix double free in qed_cxt_tables_alloc()8.4 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEvsock/vmci: fix UAF when peer resets connection during handshake8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEipv4: raw: reject IP_HDRINCL packets with ihl < 57.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEixgbevf: fix use-after-free in VEPA multicast source pruning9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSErbd: eliminate a race in lock_dwork draining on unmap7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEaf_unix: Fix UAF read of tail->len in unix_stream_data_wait()8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSERDMA/siw: Reject MPA FPDU length underflow before signed receive math9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSEdrm/v3d: Fix use-after-free of CPU job query arrays on error path7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEdrm/virtio: use uninterruptible resv lock for plane updates7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEdrm/amd/display: Validate GPIO pin LUT table size before iterating7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEbatman-adv: tt: fix negative tt_buff_len8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEhwmon: (pmbus/adm1266) reject implausible blackbox record_count5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_20SUSEhwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEhwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEhwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEhwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_20SUSEirq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEnet: ethernet: cortina: Make RX SKB per-port9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSEnet: ethernet: cortina: Carry over frag counter9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSEblock: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user()5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_20SUSEaccel/qaic: Add overflow check to remap_pfn_range during mmap7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEnet/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEnet: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSEdrm/msm/snapshot: fix dumping of the unaligned regions7.7 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEnet: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer9.3 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSERDMA/rtrs: Fix use-after-free in path file creation cleanup9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSEALSA: seq: Serialize UMP output teardown with event_input7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEdrm/xe/oa: Fix exec_queue leak on width check in stream open5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_20SUSEnet: mana: validate rx_req_idx to prevent out-of-bounds array access9.3 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSEsecurity/keys: fix missed RCU read section on lookup7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEInput: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size7.1 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEnfc: llcp: Fix use-after-free in llcp_sock_release()7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEnfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc()8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEnetfilter: synproxy: refresh tcphdr after skb_ensure_writable9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSEnetfilter: nf_tables: fix dst corruption in same register operation5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_20SUSEnet/smc: Do not re-initialize smc hashtables7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEnet/iucv: fix locking in .getsockopt7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEALSA: pcm: oss: Fix setup list UAF on proc write error7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEnet: hsr: fix potential OOB access in supervision frame handling9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSEethtool: rss: fix indir_table and hkey leak on get_rxfh failure5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_20SUSEethtool: module: call ethnl_ops_complete() on module flash errors5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_20SUSEethtool: module: avoid leaking a netdev ref on module flash errors5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_20SUSEethtool: cmis: require exact CDB reply length7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEethtool: cmis: validate start_cmd_payload_size from module7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEtunnels: do not assume transport header in iptunnel_pmtud_check_icmp()9.1 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSEbonding: refuse to enslave CAN devices5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_20SUSEethtool: eeprom: add more safeties to EEPROM Netlink fallback7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEnet/handshake: Use spin_lock_bh for hn_lock7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEnet: mana: Add NULL guards in teardown path to prevent panic on attach failure5.5 Medium- Show moreLoading…