kernel-livepatch-SLE15-SP7-RT_Update_21 vulnerabilities (SUSE)
508 vulnerabilities.
kernel-livepatch-SLE15-SP7-RT_Update_21SUSEsctp: hold socket lock when dumping endpoints in sctp_diag2.0 Lowkernel-livepatch-SLE15-SP7-RT_Update_21SUSEflow_dissector: check device type before reading ETH_ADDRS7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEmd/raid1: fix writes_pending and barrier reference leaks on write failures7.1 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEmd/raid10: fix writes_pending leak on write request failures2.0 Lowkernel-livepatch-SLE15-SP7-RT_Update_21SUSEmd/raid10: fix writes_pending and barrier reference leaks on discard failures7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEmd/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retryNo scorekernel-livepatch-SLE15-SP7-RT_Update_21SUSEnetfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnetfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnetfilter: ipset: make sure gc is properly stopped7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnetfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leakNo scorekernel-livepatch-SLE15-SP7-RT_Update_21SUSEice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()7.1 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEipv4: fib: Don't ignore error route in local/main tables.10.0 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEsctp: fix err_chunk memory leaks in INIT handling8.7 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet: sungem: fix probe error cleanup7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEtipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet: enetc: check the number of BDs needed for xdp_frame9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEsctp: add INIT verification after cookie unpacking9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump5.7 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEsctp: fix addr_wq_timer race in sctp_free_addr_wq()7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEfs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid4.8 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEHID: bpf: Fix hid_bpf_get_data() range check7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEgue: validate REMCSUM private option length9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnetfilter: xt_u32: reject invalid shift counts7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnetfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()6.3 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnetfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop9.1 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnetfilter: xt_connmark: reject invalid shift parameters7.3 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEqede: fix off-by-one in BD ring consumption on build_skb failure9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEBluetooth: 6lowpan: avoid untracked enable workNo scorekernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet/tls: Consume empty data records in tls_sw_read_sock()7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEperf/x86/amd/core: Avoid enabling BRS from the SVM reload path5.6 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEipv4: igmp: Fix potential UAF in igmp_gq_start_timer()9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEipv6: mcast: Fix potential UAF in MLD delayed work9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer()5.7 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEvduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iterNo scorekernel-livepatch-SLE15-SP7-RT_Update_21SUSEtipc: restrict socket queue dumps in enqueue tracepoints9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet: atm: reject out-of-range traffic classes in QoS validation7.1 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEKVM: Move kvm_io_bus_get_dev() locking responsibilities to callers7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnetfilter: xt_cluster: reject template conntracks in hash match4.8 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnetfilter: nf_conncount: fix zone comparison in tuple dedup7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEselinux: check connect-related permissions on TCP Fast Open8.4 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEselinux: avoid sk_socket dereference in selinux_sctp_bind_connect()7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEperf/x86/amd/brs: Fix kernel address leakage4.8 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnvdimm/btt: Free arenas on btt_init() error pathsNo scorekernel-livepatch-SLE15-SP7-RT_Update_21SUSElockd: Plug nlm_file leak when nlm_do_fopen() fails8.7 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSElockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure8.2 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet/9p: fix infinite loop in p9_client_rpc on fatal signalNo scorekernel-livepatch-SLE15-SP7-RT_Update_21SUSEocfs2: avoid moving extents to occupied clusters7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits5.7 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEocfs2: add journal NULL check in ocfs2_checkpoint_inode()No scorekernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet: thunderbolt: Fix frags[] overflow by bounding frame_count8.8 High- Show moreLoading…