kernel-livepatch-SLE15-SP7-RT_Update_21 vulnerabilities (SUSE)
508 vulnerabilities.
kernel-livepatch-SLE15-SP7-RT_Update_21SUSEiommu/vt-d: Force requesting ACS when tboot is enabled9.3 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEslip: fix use-after-free in sl_sync()7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet: tun: bound receive headroom7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet/smc: do not dereference an unset send buffer on the SMC-D teardown path5.7 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet/smc: fix socket refcount leak in smc_switch_conns()No scorekernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet/smc: unregister the connection before draining the rx tasklet7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEseg6: reset IP6CB after IPv6 decapsulation9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEwifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEvsock/virtio: flush works in dependency order8.4 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEdrm/amdgpu: Reject UVD message with invalid number of h265 refs7.3 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEIB/mlx5: Properly support implicit ODP rereg_mr7.3 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEbpf: Add missing access_ok call to copy_user_syms4.6 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSERDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp7.3 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSERDMA/rxe: Fix OOB in free_rd_atomic_resources()8.5 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEtls: device: fix out-of-bounds write in tls_append_frag()7.3 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSExfrm: espintcp: fix UAF during close7.3 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEtcp: clamp route advmss to TCP_MIN_MSS6.8 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSExfrm: drop ESP-in-TCP packets with no ingress device6.8 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSExfrm: ah6: validate routing header segments_left7.3 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet: bridge: mcast: fix use-after-free of a master VLAN's multicast context7.3 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet/packet: defer vmalloc TX_RING free until skbs finish7.3 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEipv6: seg6: clear IPv4 control block on IPIP decapsulation9.2 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEcrypto: virtio - bound the akcipher result lengthNo scorekernel-livepatch-SLE15-SP7-RT_Update_21SUSExfs: validate attr entry pointer before field access5.3 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnfc: llcp: fix OOB read and u8 offset wrap in TLV parsers7.1 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEipv4: reject undersized MTUs in ip_do_fragment()6.8 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnvmet-tcp: bound SGL data length before allocating command buffers8.7 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEfbdev: serialize mode sysfs access with lock_fb_info()No scorekernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet/ionic: avoid OOB TX partner lookup for hwstamp RXQ8.4 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEselinux: do not cancel a policy conversion that never startedNo scorekernel-livepatch-SLE15-SP7-RT_Update_21SUSEdrm/amdkfd: Add bounds check for CRAT subtype length8.0 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet/mlx5e: TC, Check if flow is PEER before acquiring devcom lock6.7 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEserial: amba-pl011: synchronize DMA teardown7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet: remove CAP_SYS_RAWIO zero-padding in dev_validate_header7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet: gro: properly validate BIG TCP aggregation criteria9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEwifi: mac80211: validate individual TWT params before driver setup8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEBluetooth: ISO: ensure no dangling hcon references in iso_conn8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEALSA: pcm: wake linked drain waiters on unlink7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEigc: remove napi_synchronize() in igc_down()6.7 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEipvs: do not propagate one-packet flag to synced conns9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEidpf: bound interrupt-vector register fill to the allocated array9.3 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEmm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE4.8 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEvxlan: re-fetch eth header after route_shortcircuit()9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEs390/dasd: Fix potential NULL pointer dereferenceNo scorekernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet/mlx5: LAG, MPESW, Fix missing complete() on devcom error5.6 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnetfilter: xt_nat: reject unsupported target families7.3 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEtools/power/x86/intel-speed-select: Harden daemon pidfile open7.1 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSERDMA/hns: Fix warning in poll cq direct mode10.0 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEipv6: guard against possible NULL deref in __in6_dev_stats_get()7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEbtrfs: lzo: reject compressed segment that overflows the compressed input7.5 High- Show moreLoading…