kernel-livepatch-SLE15-SP7-RT_Update_5 vulnerabilities (SUSE)
104 vulnerabilities.
-
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE macvlan: fix error recovery in macvlan_common_newlink() 7.8 High -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() 7.8 High -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE net/sched: Enforce that teql can only be used as root qdisc 7.8 High -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE net/sched: sch_qfq: do not free existing class in qfq_change_class() 7.8 High -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf 7.5 High -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE sctp: Fix MAC comparison to be constant-time 8.1 High -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE xsk: Harden userspace-supplied xdp_desc validation 7.8 High -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE ipvs: Defer ip_vs_ftp unregister during netns cleanup 7.8 High -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE i40e: add validation for ring_len param 8.8 High -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() 8.8 High -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE ixgbe: fix incorrect map used in eee linkmode 7.1 High -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event 5.5 Medium -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE ocfs2: fix recursive semaphore deadlock in fiemap call 5.5 Medium -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE tee: fix NULL pointer dereference in tee_shm_put 5.5 Medium -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync() 7.5 High -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE ocfs2: prevent release journal inode after journal shutdown 5.5 Medium -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE cifs: prevent NULL pointer dereference in UTF16 conversion 5.5 Medium -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE xfs: do not propagate ENODATA disk errors into xattr code 7.8 High -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow 5.5 Medium -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path 5.5 Medium -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE KVM: x86: use array_index_nospec with indices that come from guest 7.8 High -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths 5.5 Medium -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE drm/xe/vm: Clear the scratch_pt pointer on error 5.5 Medium -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE drm/mediatek: Add error handling for old state CRTC in atomic_disable 5.5 Medium -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE xfrm: Duplicate SPI Handling 7.8 High -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE soc: qcom: mdt_loader: Ensure we don't read past the ELF header 7.8 High -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE jbd2: prevent softlockup in jbd2_log_do_checkpoint() 5.5 Medium -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE net: bridge: fix soft lockup in br_multicast_query_expired() 5.5 Medium -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM 7.5 High -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit 7.8 High -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE netfilter: ctnetlink: remove refcounting in expectation dumpers 5.5 Medium -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE mm/smaps: fix race between smaps_hugetlb_range and migration 4.7 Medium -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE rcu: Protect ->defer_qs_iw_pending from data race 7.0 High -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE drm/msm: Add error handling for krealloc in metadata setup 5.5 Medium -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE wifi: ath10k: shutdown driver when hardware is unreliable 5.5 Medium -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE rcu: Fix rcu_read_unlock() deadloop due to IRQ work 7.1 High -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE btrfs: do not allow relocation of partially dropped subvolumes 7.3 High -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE x86/vmscape: Add conditional IBPB mitigation 5.5 Medium -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE smb: client: fix race with concurrent opens in rename(2) 7.8 High -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE vsock/virtio: Validate length in packet header before skb_put() 8.4 High -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls 7.8 High -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities 5.5 Medium -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE drm/amd/display: fix a Null pointer dereference vulnerability 5.5 Medium -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE net, hsr: reject HSR frame if skb can't hold tag 9.8 Critical -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE RDMA/rxe: Flush delayed SKBs while releasing RXE resources 5.5 Medium -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE fs/buffer: fix use-after-free when call bh_read() helper 7.8 High -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE tls: fix handling of zero-length records on the rx_list 9.8 Critical -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper 5.5 Medium -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL 5.5 Medium -
kernel-livepatch-SLE15-SP7-RT_Update_5SUSE net/sched: Fix backlog accounting in qdisc_dequeue_internal 7.8 High - Show olderLoading…