kernel-livepatch-SLE15-SP7-RT_Update_21 vulnerabilities (SUSE)
508 vulnerabilities.
kernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet/af_iucv: fix NULL deref in afiucv_hs_callback_syn()7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEice: reject out-of-range ptype in ice_parser_profile_init8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEaudit: fix recursive locking deadlock in audit_dupe_exe()7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEi2c: core: fix NULL-deref on adapter registration failure4.1 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSExfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSExfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert5.7 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEperf/core: Detach event groups during remove_on_exec7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEipv6: ndisc: fix NULL deref in accept_untracked_na()5.7 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEtty: serial: samsung: Remove redundant port lock acquisition in rx helpers6.7 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEx86/bugs: Enable IBPB flush on BPF JIT allocation5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEvfio/pci: Latch disable_idle_d3 per device5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEvfio/pci: Release the VGA arbiter client on register_device() failure8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEvfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEvfio: Remove device debugfs before releasing devres5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEio_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEBluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEcoresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEcpufreq: Fix hotplug-suspend race during reboot4.7 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEcpufreq: pcc: fix use-after-free and double free in _OSC evaluation7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page9.1 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnvmet-auth: validate reply message payload bounds against transfer length9.1 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEtracing: Prevent out-of-bounds read in glob matching7.1 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEmodule: decompress: check return value of module_extend_max_pages()5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEKVM: guest_memfd: Treat memslot binding offset+size as unsigned values7.0 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEi2c: core: fix adapter deregistration race7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEhwmon: (lm90) Add lock protection to lm90_alert5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet/mlx5e: xsk: Fix unlocked writing to ICOSQ7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEi2c: i801: fix hardware state machine corruption in error path5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEtracing: Do not call map->ops->elt_free() if elt_alloc() fails5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEscsi: isci: Fix use-after-free in device removal path7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet: tls: prevent chain-after-chain in plain text SG9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEhwmon: (lm90) Stop work before releasing hwmon device4.7 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSExfrm: Check for underflow in xfrm_state_mtu7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEscsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEvxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu()9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEusb: typec: tcpm: validate VDO count in Discover Identity ACK handlers5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEUSB: serial: cypress_m8: fix memory corruption with small endpoint7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnetfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check8.2 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEscsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEserial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ7.3 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEi2c: core: fix adapter registration race7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEserial: 8250_dw: unregister 8250 port if clk_notifier_register() fails9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEbtrfs: only release the dirty pages io tree after successful writes7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEdm cache: fix dirty mapping checking in passthrough mode switching5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnetfilter: nf_queue: hold bridge skb->dev while queued7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEtracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()5.5 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEscsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()7.1 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnvmet-tcp: fix race between ICReq handling and queue teardown9.8 Critical- Show moreLoading…