kernel-livepatch-SLE15-SP7_Update_18 vulnerabilities (SUSE)
133 vulnerabilities.
kernel-livepatch-SLE15-SP7_Update_18SUSEnet/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash()5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEnetfilter: nf_conntrack_h323: fix OOB read in decode_choice()8.2 Highkernel-livepatch-SLE15-SP7_Update_18SUSExfrm6: fix uninitialized saddr in xfrm6_get_saddr()8.6 Highkernel-livepatch-SLE15-SP7_Update_18SUSERDMA/umem: Fix double dma_buf_unpin in failure path7.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSEx86: shadow stacks: proper error handling for mmap lock5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSExfrm: account XFRMA_IF_ID in aevent size calculation5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEixgbevf: add missing negotiate_features op to Hyper-V ops table5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSExsk: tighten UMEM headroom validation to account for tailroom and min frame7.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSExfrm_user: fix info leak in build_mapping()5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEipvs: fix NULL deref in ip_vs_add_service error path5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEnetfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEnet: ipa: fix GENERIC_CMD register field masks for IPA v5.0+5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEl2tp: Drop large packets with UDP encap5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEperf/x86/intel/uncore: Skip discovery table for offline dies5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEeventpoll: defer struct eventpoll free to RCU grace period7.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSExfs: close crash window in attr dabtree inactivation4.7 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEbnxt_en: set backing store type from query type5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEBluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEbpf: Reject sleepable kprobe_multi programs at attach time5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEBluetooth: hci_event: move wake reason storage into validated event handlers8.1 Highkernel-livepatch-SLE15-SP7_Update_18SUSEcrypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed7.1 Highkernel-livepatch-SLE15-SP7_Update_18SUSEcrypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed7.1 Highkernel-livepatch-SLE15-SP7_Update_18SUSEcrypto: ccp: Don't attempt to copy ID to userspace if PSP command failed7.1 Highkernel-livepatch-SLE15-SP7_Update_18SUSEcrypto: af_alg - limit RX SG extraction by receive buffer budget5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEnet: rfkill: prevent unlimited numbers of rfkill events from being created5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEidpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEteam: fix header_ops type confusion with non-Ethernet ports7.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSEmm/huge_memory: fix folio isn't locked in softleaf_to_folio()4.7 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEdrm/amdgpu: prevent immediate PASID reuse case5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEext4: publish jinode after initialization8.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSEbonding: prevent potential infinite loop in bond_header_parse()7.5 Highkernel-livepatch-SLE15-SP7_Update_18SUSEfutex: Don't leak robust_list pointer on exec race2.0 Lowkernel-livepatch-SLE15-SP7_Update_18SUSEio_uring/rsrc: don't rely on user vaddr alignment7.8 High