kernel-livepatch-SLE15-SP7-RT_Update_21 vulnerabilities (SUSE)
508 vulnerabilities.
kernel-livepatch-SLE15-SP7-RT_Update_21SUSEnfsd: size fh_verify server sockaddr slot by xpt_locallen9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnfsd: validate symlink target length in NFSv4 CREATE7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()9.1 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnfsd: check client ownership when cancelling a copy-notify stateid7.1 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnfsd: fix cpntf publish race in nfs4_init_cp_state7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnfsd: fix nfsd_file leak on inter-server COPY setup failure7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnfsd: fix XDR padding calculation in ff_encode_getdeviceinfo5.3 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnfsd: gate nfs2 setacl by argp->mask9.1 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnfsd: gate nfs3 setacl by argp->mask9.1 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE8.2 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnfsd: revoke copy-notify stateids before dropping their reference8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSENFSD: Prevent lock owner use-after-free during client teardown9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEbtrfs: fix extent map leak in NOCOW direct I/O write5.7 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEsmb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEsmb: client: clear ce->tgthint in free_tgts()9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEsmb: client: reject a tree connect response whose byte count is too small9.1 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEecryptfs: hold msg ctx list lock when cleaning daemon queue7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEIn the Linux kernel, the following vulnerability has been resolved: entry: Fix seccomp bypass...8.4 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEbpf: Disable preemption in __bpf_get_stack7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEBluetooth: RFCOMM: serialize security confirmation handling8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEip: orphan prefetched skbs before multicast forwarding7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSESUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSESUNRPC: svcauth_gss: enforce krb5 token minimum length9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSESUNRPC: always drain cache_cleaner before destroying a cache_detail7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSESUNRPC: Check svc pool percpu counter allocation8.1 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSESUNRPC: fix gssx_dec_option_array error path bugs7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSESUNRPC: harden gss_krb5_unwrap_v2 against short tokens9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSESUNRPC: harden gss_unwrap_resp_priv length checks9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEsunrpc: init gssp_lock before publishing proc entry7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSESUNRPC: reject duplicate CREDS_VALUE optionsNo scorekernel-livepatch-SLE15-SP7-RT_Update_21SUSESUNRPC: Reject krb5 v2 wrap tokens with oversized ec field9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSESUNRPC: wait for in-flight client TLS handshake callback9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEsvcrdma: Fix offset arithmetic in read_chunk_range9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEsvcrdma: Fix pcl_for_each_segment for empty chunks9.1 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEsvcrdma: Reject connection when transport allocation fails8.2 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEudf: reject VAT indexes equal to the entry count7.1 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEqede: Fix NULL pointer dereference in TPA fragment processing7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSERDMA/cxgb4: Cancel reg_work before freeing device on remove7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSERDMA/ucma: Lock the handler in ucma_set_ib_path()7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSElockd: pin next file across nlm_inspect_file lock-drop9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnvme-tcp: fix host memory disclosure on R2T for a read command7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnvme-tcp: reject a read that transferred too few bytes7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEsctp: stop processing a packet once its association is deleted9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEsctp: fix NULL deref on untransmitted RECONF completion7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEiommu/amd: Put PCI device after handling PPR faultsNo scorekernel-livepatch-SLE15-SP7-RT_Update_21SUSEiommu/sva: Set handle->dev before the SVA handle is visible5.7 Medium- Show moreLoading…