kernel-livepatch-SLE15-SP7_Update_18 vulnerabilities (SUSE)
133 vulnerabilities.
kernel-livepatch-SLE15-SP7_Update_18SUSEipc: limit next_id allocation to the valid ID range7.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSEBluetooth: serialize accept_q access8.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSEip6_vti: set netns_immutable on the fallback device.7.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSERDMA: During rereg_mr ensure that REREG_ACCESS is compatible7.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSEnet/sched: fix pedit partial COW leading to page cache corruption7.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSERevert "net/smc: Introduce TCP ULP support"7.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSEapparmor: fix rlimit for posix cpu timers7.3 Highkernel-livepatch-SLE15-SP7_Update_18SUSEtap: free page on error paths in tap_get_user_xdp()7.4 Highkernel-livepatch-SLE15-SP7_Update_18SUSEnet/sched: act_ct: Only release RCU read lock after ct_ft7.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSEio_uring/waitid: clear waitid info before copying it to userspace5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEcrypto: caam - guard HMAC key hex dumps in hash_digest_key5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSElib/scatterlist: fix length calculations in extract_kvec_to_sg9.8 Criticalkernel-livepatch-SLE15-SP7_Update_18SUSEio-wq: check that the predecessor is hashed in io_wq_remove_pending()7.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSEinet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP9.1 Criticalkernel-livepatch-SLE15-SP7_Update_18SUSEAppArmor: Allow apparmor to handle unaligned dfa tables5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEpstore/ram: fix buffer overflow in persistent_ram_save_old()7.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSEeventpoll: fix ep_remove struct eventpoll / struct file UAF7.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSEdrm/amdkfd: Clear VRAM on allocation to prevent stale data exposure5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEsctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL7.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSEvsock/virtio: fix accept queue count leak on transport mismatch5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEdrm/amdkfd: validate SVM ioctl nattr against buffer size7.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSEsmb/client: fix out-of-bounds read in symlink_data()9.1 Criticalkernel-livepatch-SLE15-SP7_Update_18SUSEexit: prevent preemption of oopsing TASK_DEAD task7.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSERDMA/rxe: Reject unknown opcodes before ICRC processing7.5 Highkernel-livepatch-SLE15-SP7_Update_18SUSEisofs: validate block number from NFS file handle in isofs_export_iget7.5 Highkernel-livepatch-SLE15-SP7_Update_18SUSEip6_gre: Use cached t->net in ip6erspan_changelink().7.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSExfrm: defensively unhash xfrm_state lists in __xfrm_state_delete7.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSERDMA/hns: Fix unlocked call to hns_roce_qp_remove()7.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSEKVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L17.9 Highkernel-livepatch-SLE15-SP7_Update_18SUSEKVM: nSVM: Avoid clearing VMCB_LBR in vmcb125.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEwifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup()7.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSEfbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info7.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSEx86/shstk: Prevent deadlock during shstk sigreturn5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEnet: rds: fix MR cleanup on copy error7.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSEext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEext4: fix memory leak in ext4_ext_shift_extents()5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEext4: don't cache extent during splitting extent5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEnet: hns3: fix double free issue for tx spare buffer7.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSEapparmor: fix NULL sock in aa_sock_file_perm5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEbpf: fix end-of-list detection in cgroup_storage_get_next_key()5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEcrypto: algif_aead - snapshot IV for async AEAD requests5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEnet/rds: handle zerocopy send cleanup before the message is queued7.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSElib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEunshare: fix unshare_fs() handling5.5 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSEbonding: fix type confusion in bond_setup_by_slave()7.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSEceph: fix i_nlink underrun during async unlink4.7 Mediumkernel-livepatch-SLE15-SP7_Update_18SUSElib/crypto: chacha: Zeroize permuted_state before it leaves scope7.5 Highkernel-livepatch-SLE15-SP7_Update_18SUSEmm/page_alloc: clear page->private in free_pages_prepare()7.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSExfrm: esp: avoid in-place decrypt on shared skb frags8.8 Highkernel-livepatch-SLE15-SP7_Update_18SUSEdrm/amdgpu: fix NULL pointer issue buffer funcs5.5 Medium- Show moreLoading…