kernel-livepatch-SLE15-SP7-RT_Update_21 vulnerabilities (SUSE)
508 vulnerabilities.
kernel-livepatch-SLE15-SP7-RT_Update_21SUSEdmaengine: dw-edma-pcie: Reject devices without driver dataNo scorekernel-livepatch-SLE15-SP7-RT_Update_21SUSExen/gntdev: fix error handling in ioctlNo scorekernel-livepatch-SLE15-SP7-RT_Update_21SUSExfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEtpm: Make the TPM character devices non-seekable7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnvmet-auth: reject short AUTH_RECEIVE buffers9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnvmet-rdma: handle inline data with a nonzero offset9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEcan: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEdm thin metadata: fix metadata snapshot consistency on commit failure7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEdm era: fix out-of-bounds memory access for non-zero start sector8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEdm-ioctl: fix a possible overflow in list_version_get_info9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEdm_early_create: fix freeing used table on dm_resume failure7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEdm-verity: fix buffer overflow in FEC calculation9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEscsi: xen: scsiback: Free the command tag on the TMR submit-failure path2.1 Lowkernel-livepatch-SLE15-SP7-RT_Update_21SUSEscsi: xen: scsiback: Free unsubmitted command instead of double-putting it9.3 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEwifi: libertas_tf: fix use-after-free in lbtf_free_adapter()5.4 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEcpu: hotplug: Bound hotplug states sysfs output7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEgpio: tegra: do not call pinctrl for GPIO directionNo scorekernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet: sit: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet: ip_vti: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet: ipip: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEocteontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEs390/monwriter: Reject buffer reuse with different data lengthNo scorekernel-livepatch-SLE15-SP7-RT_Update_21SUSEocteontx2-pf: fix SQB pointer leak on init failureNo scorekernel-livepatch-SLE15-SP7-RT_Update_21SUSEmacsec: don't read an unset MAC header in macsec_encrypt()7.3 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEdibs: loopback: validate offset and size in move_data()7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet: macb: drop in-flight Tx SKBs on close5.6 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEtracing/osnoise: Call synchronize_rcu() when unregistering7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEipvs: fix more places with wrong ipv6 transport offsets9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEwifi: ieee80211: validate MLE common info length8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEKVM: s390: pci: Fix handling of AIF enable without AISB8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEs390/zcrypt: Validate length for CCA AES cipher key requests7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEs390/zcrypt: Validate length for CCA ECC private key requests7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEovl: check access to copy_file_range source with src mounter creds2.0 Lowkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet/sched: Handle TC_ACT_REDIRECT from qdisc filter chains1.8 Lowkernel-livepatch-SLE15-SP7-RT_Update_21SUSEata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registeredNo scorekernel-livepatch-SLE15-SP7-RT_Update_21SUSEdrm/xe/guc: Hold device ref until queue teardown completes7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEsctp: fix auth_hmacs array size in struct sctp_cookie8.1 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet/packet: avoid fanout hook re-registration after unregister7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet: qrtr: restrict socket creation to the initial network namespace8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSErds: tcp: unregister sysctl before tearing down listen socket7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEdrm/amdgpu: Fix context pstate override handling7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEdrm/xe: Hold a dma-buf reference for imported BOs7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEdrm/xe/pt: Reset current_op in xe_pt_update_ops_init()7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEdrm/amdkfd: Check bounds on CRIU restore queue type and mqd size7.1 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEwifi: ath6kl: fix use-after-free in aggr_reset_state()8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEfscrypt: Add missing superblock check in find_or_insert_direct_key()7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEftrace: Add global mutex to serialize trace_parser accessNo score- Show moreLoading…