kernel-livepatch-SLE15-SP7-RT_Update_21 vulnerabilities (SUSE)
508 vulnerabilities.
kernel-livepatch-SLE15-SP7-RT_Update_21SUSERDMA/cxgb4: free STAG index when TPT entry write fails2.0 Lowkernel-livepatch-SLE15-SP7-RT_Update_21SUSEIB/isert: reject PDUs declaring more data than was received9.1 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEIB/isert: reject login PDUs declaring more data than was received9.1 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEiommu/dma: Check atomic pool allocation result directly7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEbpf, x86: Fix trampoline stack size for 128-bit arguments7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSERDMA/erdma: Hold CQ references when processing EQ events7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSERDMA/erdma: Hold QP references for AE and CM processing7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSERDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ5.3 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEIB/isert: delay the final Login Response until the session is registered7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEIB/isert: post the full-feature receive buffers after session registration7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSERDMA/siw: Fix use-after-free in siw_accept()7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEbtrfs: defrag: fix deadlock between defrag and delalloc space reservation5.7 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEbtrfs: check if root is readonly when setting posix acl4.8 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEbtrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data()2.0 Lowkernel-livepatch-SLE15-SP7-RT_Update_21SUSEBluetooth: hci_conn: fix the SCO setup context lifetime8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEiommu/vt-d: Clear Present bit before tearing down copied context entry8.1 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEiommu/vt-d: Tear down scalable-mode context on probe failure8.2 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEiommu/vt-d: Flush context cache with correct SID when tearing down aliases8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns()7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSERDMA/cma: Fix WARNING in res_to_rt4.8 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSESquashfs: check block offset is not negative7.1 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEALSA: core: Fix use-after-free in snd_card_do_free()No scorekernel-livepatch-SLE15-SP7-RT_Update_21SUSEblk-iolatency: clear delay state when freeing policy data6.8 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEblk-iocost: clear delay state when freeing policy data2.0 Lowkernel-livepatch-SLE15-SP7-RT_Update_21SUSENFSv4: remove callback IDR entry on client allocation failure9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSENFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSENFSv4.1: zero referring call lists before decoding9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEDrivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partitionNo scorekernel-livepatch-SLE15-SP7-RT_Update_21SUSEBluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop7.1 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet/sched: fq_pie: clamp default quantum to avoid signed overflow6.8 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure6.7 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEdrm/xe: Don't hand out the flat CCS storage as usable VRAM7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEfutex: Prevent rcuwait use-after-free during requeue PI7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEperf/x86/intel: Fix kernel address leakages in LBR stack4.8 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnvmet-auth: Synchronize timeout work during SQ teardown9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnvmet-tcp: reject unsolicited H2CData PDUs7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEKVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit4.6 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSEKVM: nVMX: Service local TLB flushes on failed nested VM-Enter9.3 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSEKVM: nVM: Ensure INVVPID is emulated on the correct physical CPU8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEKVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables8.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEKVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save7.1 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEmedia: cec: disable delayed work before freeing an interrupted transmit7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEgtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free7.8 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSESUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6No scorekernel-livepatch-SLE15-SP7-RT_Update_21SUSEnet: qualcomm: rmnet: restore skb->dev on deaggregated frames6.8 Mediumkernel-livepatch-SLE15-SP7-RT_Update_21SUSENFSD: check truncate permission under inode lock9.1 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSENFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock9.8 Criticalkernel-livepatch-SLE15-SP7-RT_Update_21SUSENFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path8.2 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnfsd: release path refs on follow_down() error7.5 Highkernel-livepatch-SLE15-SP7-RT_Update_21SUSEnfsd: sample writeback error cursor before async COPY loop7.5 High- Show moreLoading…