kernel-livepatch-SLE15-SP7-RT_Update_20 vulnerabilities (SUSE)
668 vulnerabilities.
kernel-livepatch-SLE15-SP7-RT_Update_20SUSEASoC: tas2781: bound firmware description string parsing7.1 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEALSA: hda: cs35l41: validate and free ACPI mute objectNo scorekernel-livepatch-SLE15-SP7-RT_Update_20SUSEsmb: client: validate DFS referral PathConsumed9.1 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSEhwmon: occ: validate poll response sensor blocks7.7 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEBluetooth: btusb: validate Realtek vendor event length2.4 Lowkernel-livepatch-SLE15-SP7-RT_Update_20SUSEbonding: fix devconf_all NULL dereference when IPv6 is disabled5.7 Mediumkernel-livepatch-SLE15-SP7-RT_Update_20SUSErds: drop incoming messages that cross network namespace boundaries7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEdpaa2-switch: put MAC endpoint device on disconnectNo scorekernel-livepatch-SLE15-SP7-RT_Update_20SUSEdpaa2-eth: put MAC endpoint device on disconnectNo scorekernel-livepatch-SLE15-SP7-RT_Update_20SUSEiommu/amd: Wait for completion instead of returning early in iommu_completion_wait()8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEnfp: Check resource mutex allocation5.7 Mediumkernel-livepatch-SLE15-SP7-RT_Update_20SUSEwan: wanxl: Only reset hardware after BAR mappingNo scorekernel-livepatch-SLE15-SP7-RT_Update_20SUSEwifi: mwifiex: bound uAP association event IEs to the event buffer8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEiommu/amd: Bound the early ACPI HID mapNo scorekernel-livepatch-SLE15-SP7-RT_Update_20SUSEiommu/intel: Fix out-of-bounds memset in dmar_latency_disable()No scorekernel-livepatch-SLE15-SP7-RT_Update_20SUSErds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled6.8 Mediumkernel-livepatch-SLE15-SP7-RT_Update_20SUSEsctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid7.3 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEsctp: validate stream count in sctp_process_strreset_inreq()7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEtipc: fix infinite loop in __tipc_nl_compat_dumpit6.8 Mediumkernel-livepatch-SLE15-SP7-RT_Update_20SUSEcifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths5.7 Mediumkernel-livepatch-SLE15-SP7-RT_Update_20SUSEwifi: mt76: mt7915: guard HE capability lookups5.7 Mediumkernel-livepatch-SLE15-SP7-RT_Update_20SUSEwifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv()No scorekernel-livepatch-SLE15-SP7-RT_Update_20SUSEwifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap()No scorekernel-livepatch-SLE15-SP7-RT_Update_20SUSEwifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht()6.0 Mediumkernel-livepatch-SLE15-SP7-RT_Update_20SUSEwifi: brcmfmac: fix 802.1X-SHA256 call trace warning4.6 Mediumkernel-livepatch-SLE15-SP7-RT_Update_20SUSEdrm/vc4: hvs/v3d: Fix null dereference in unbindNo scorekernel-livepatch-SLE15-SP7-RT_Update_20SUSEamt: re-read skb header pointers after every pull9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSEsctp: auth: verify auth requirement when auth_chunk is NULL9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSEvmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEtipc: fix u16 MTU truncation in media and bearer MTU validation7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEnet/mlx5: Fix MCIA register buffer overflow on 32 dword reads7.1 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEtipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream()6.8 Mediumkernel-livepatch-SLE15-SP7-RT_Update_20SUSEnet: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOADNo scorekernel-livepatch-SLE15-SP7-RT_Update_20SUSEdrop_monitor: perform u64_stats updates under IRQ-disabled section2.0 Lowkernel-livepatch-SLE15-SP7-RT_Update_20SUSEbpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg()7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEdrm/imagination: Count paired job fence as dependency in prepare_job()2.0 Lowkernel-livepatch-SLE15-SP7-RT_Update_20SUSEdrm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()No scorekernel-livepatch-SLE15-SP7-RT_Update_20SUSEdrm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers2.4 Lowkernel-livepatch-SLE15-SP7-RT_Update_20SUSEdrm/dp/mst: fix buffer overflows in sideband chunk accumulation7.0 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEdrm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers0.0 Nonekernel-livepatch-SLE15-SP7-RT_Update_20SUSEdrm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass16.7 Mediumkernel-livepatch-SLE15-SP7-RT_Update_20SUSEdrm/nouveau: fix reversed error cleanup order in ucopy functions6.8 Mediumkernel-livepatch-SLE15-SP7-RT_Update_20SUSEdrm/i915/gem: Add missing nospec on parallel submit slot2.0 Lowkernel-livepatch-SLE15-SP7-RT_Update_20SUSEdrm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists4.8 Mediumkernel-livepatch-SLE15-SP7-RT_Update_20SUSEdrm/imagination: Fix double call to drm_sched_entity_fini()7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEdrm/imagination: Fix user array stride in pvr_set_uobj_array()7.1 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEdrm/imagination: fix error checking of pvr_vm_context_lookup()6.8 Mediumkernel-livepatch-SLE15-SP7-RT_Update_20SUSEdrm/imagination: acquire vm_ctx->lock before mapping memory to GPU VM7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEdrm/amdkfd: Check bounds in allocate_event_notification_slot7.1 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEdrm/amdkfd: fix 32-bit overflow in CWSR total size calculation7.8 High- Show moreLoading…