kernel-livepatch-SLE15-SP7-RT_Update_20 vulnerabilities (SUSE)
668 vulnerabilities.
kernel-livepatch-SLE15-SP7-RT_Update_20SUSERDMA/mlx5: Release the HW‑provided UAR index rather than the SW one7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEbnxt: fix head underflow on XDP head-grow9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSEtcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSERDMA/bnxt_re: Initialize dpi variable to zero4.8 Mediumkernel-livepatch-SLE15-SP7-RT_Update_20SUSERDMA/bnxt_re: Free SRQ toggle page after firmware teardown8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSERDMA/bnxt_re: Free CQ toggle page after firmware teardown8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSERDMA/bnxt_re: Avoid displaying the kernel pointer2.0 Lowkernel-livepatch-SLE15-SP7-RT_Update_20SUSERDMA/bnxt_re: Add a max slot check for SQ8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSERDMA/bnxt_re: Proper rollback if the ioremap fails9.2 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSERDMA/bnxt_re: Avoid repeated requests to allocate WC pages9.3 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSERDMA/irdma: Replace waitqueue and flag with completion9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSExprtrdma: Decouple req recycling from RPC completion9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSExprtrdma: Fix ep kref imbalance on ADDR_CHANGE8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSExprtrdma: Check frwr_wp_create() during connectNo scorekernel-livepatch-SLE15-SP7-RT_Update_20SUSExprtrdma: Fix bcall rep leak and unbounded peek9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSExprtrdma: Repost Receive buffers for malformed replies7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSExfrm: Fix dev use-after-free in xfrm async resumption9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSEbridge: stp: Fix a potential use-after-free when deleting a bridge7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEnet/mlx5e: Fix HV VHCA stats zero-sized buffer allocation8.4 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEnet/mlx5e: Fix HV VHCA stats agent registration race8.4 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEnet/mlx5e: Fix publication race for priv->channel_stats[]No scorekernel-livepatch-SLE15-SP7-RT_Update_20SUSESUNRPC: pin upper rpc_clnt across the TLS connect_worker9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSEmlxsw: fix refcount leak in mlxsw_sp_port_lag_join()No scorekernel-livepatch-SLE15-SP7-RT_Update_20SUSEmlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace()No scorekernel-livepatch-SLE15-SP7-RT_Update_20SUSEnet: ife: require ETH_HLEN to be pullable in ife_decode()9.1 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSEKVM: arm64: vgic: Check the interrupt is still ours before migrating it9.3 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSEKVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling9.3 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSEASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEnetfilter: nft_fib: reject fib expression on the netdev egress hook7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEnetfilter: nf_nat_sip: reload possible stale data pointer9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSEsunrpc: pin svc_xprt across the asynchronous TLS handshake callback9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSEsunrpc: wait for in-flight TLS handshake callback when cancel loses race9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSENFS: Charge unstable writes by request size, not folio size5.7 Mediumkernel-livepatch-SLE15-SP7-RT_Update_20SUSEscsi: target: Bound PR-OUT TransportID parsing to the received buffer9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSEscsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSEnet/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSElocking/rt: Fix the incorrect RCU protection in rt_spin_unlock()9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSEgve: fix header buffer corruption with header-split and HW-GRO9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSEnet/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEnet/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked8.2 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEnet/mlx5: HWS, fix matcher leak on resize target setup failure5.6 Mediumkernel-livepatch-SLE15-SP7-RT_Update_20SUSEipvs: reset full ip_vs_seq structs in ip_vs_conn_new9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_20SUSEwifi: mac80211: validate extension-frame layout before RX8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEbtrfs: free mapping node on duplicate reloc root insertNo scorekernel-livepatch-SLE15-SP7-RT_Update_20SUSEdrm/vmwgfx: Validate vmw_surface_metadata::array_size7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEdrm/vc4: Prevent shader BO mappings from becoming writable7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_20SUSEfirmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()No scorekernel-livepatch-SLE15-SP7-RT_Update_20SUSEdrm/imagination: Fit paired fragment job in the correct CCCB5.7 Mediumkernel-livepatch-SLE15-SP7-RT_Update_20SUSEserial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platformsNo scorekernel-livepatch-SLE15-SP7-RT_Update_20SUSElibceph: bound get_version reply decode to front len8.6 High- Show moreLoading…