kernel-livepatch-SLE15-SP7_Update_1 vulnerabilities (SUSE)
399 vulnerabilities.
kernel-livepatch-SLE15-SP7_Update_1SUSEIn the Linux kernel, the following vulnerability has been resolved: io_uring/uring_cmd:...7.8 Highkernel-livepatch-SLE15-SP7_Update_1SUSEio_uring/kbuf: reallocate buf lists on upgrade7.8 Highkernel-livepatch-SLE15-SP7_Update_1SUSEiommu/vt-d: Avoid use of NULL after WARN_ON_ONCE5.5 Mediumkernel-livepatch-SLE15-SP7_Update_1SUSEblock: don't revert iter for -EIOCBQUEUED7.8 Highkernel-livepatch-SLE15-SP7_Update_1SUSEKVM: Explicitly verify target vCPU is online in kvm_get_vcpu()7.8 Highkernel-livepatch-SLE15-SP7_Update_1SUSEdrm/i915: Grab intel_display from the encoder to avoid potential oopsies5.5 Mediumkernel-livepatch-SLE15-SP7_Update_1SUSEteam: prevent adding a device which is already a team device lower5.5 Mediumkernel-livepatch-SLE15-SP7_Update_1SUSEbpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT7.8 Highkernel-livepatch-SLE15-SP7_Update_1SUSEOPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized5.5 Mediumkernel-livepatch-SLE15-SP7_Update_1SUSEfbdev: omap: use threaded IRQ for LCD DMA5.5 Mediumkernel-livepatch-SLE15-SP7_Update_1SUSEptp: Ensure info->enable callback is always set5.5 Mediumkernel-livepatch-SLE15-SP7_Update_1SUSEax25: rcu protect dev->ax25_ptr7.8 Highkernel-livepatch-SLE15-SP7_Update_1SUSEnet: xdp: Disallow attaching device-bound programs in generic mode7.8 Highkernel-livepatch-SLE15-SP7_Update_1SUSEnet: let net.core.dev_weight always be non-zero5.5 Mediumkernel-livepatch-SLE15-SP7_Update_1SUSEnet/mlx5: HWS, fix definer's HWS_SET32 macro for negative offset7.8 Highkernel-livepatch-SLE15-SP7_Update_1SUSEnfsd: clear acl_access/acl_default after releasing them9.8 Criticalkernel-livepatch-SLE15-SP7_Update_1SUSEax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt7.8 Highkernel-livepatch-SLE15-SP7_Update_1SUSEteam: better TEAM_OPTION_TYPE_STRING validation5.5 Mediumkernel-livepatch-SLE15-SP7_Update_1SUSEorangefs: fix a oob in orangefs_debug_write7.1 Highkernel-livepatch-SLE15-SP7_Update_1SUSEpartitions: mac: fix handling of bogus partition table7.8 Highkernel-livepatch-SLE15-SP7_Update_1SUSEnet: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels5.5 Mediumkernel-livepatch-SLE15-SP7_Update_1SUSEipv4: use RCU protection in __ip_rt_update_pmtu()8.1 Highkernel-livepatch-SLE15-SP7_Update_1SUSEipv6: use RCU protection in ip6_default_advmss()8.1 Highkernel-livepatch-SLE15-SP7_Update_1SUSEndisc: use RCU protection in ndisc_alloc_skb()7.8 Highkernel-livepatch-SLE15-SP7_Update_1SUSEneighbour: use RCU protection in __neigh_notify()7.8 Highkernel-livepatch-SLE15-SP7_Update_1SUSEarp: use RCU protection in arp_xmit()8.1 Highkernel-livepatch-SLE15-SP7_Update_1SUSEopenvswitch: use RCU protection in ovs_vport_cmd_fill_info()7.8 Highkernel-livepatch-SLE15-SP7_Update_1SUSEndisc: extend RCU protection in ndisc_send_skb()8.1 Highkernel-livepatch-SLE15-SP7_Update_1SUSEipv6: mcast: extend RCU protection in igmp6_send()7.8 Highkernel-livepatch-SLE15-SP7_Update_1SUSEipv6: mcast: add RCU protection to mld_newpack()7.8 Highkernel-livepatch-SLE15-SP7_Update_1SUSEIn the Linux kernel, the following vulnerability has been resolved: vsock: Orphan socket after...5.5 Mediumkernel-livepatch-SLE15-SP7_Update_1SUSEHID: multitouch: Add NULL check in mt_input_configured5.5 Mediumkernel-livepatch-SLE15-SP7_Update_1SUSEscsi: ufs: bsg: Set bsg_queue to NULL after removal7.8 Highkernel-livepatch-SLE15-SP7_Update_1SUSEdrm/xe/tracing: Fix a potential TP_printk UAF7.8 Highkernel-livepatch-SLE15-SP7_Update_1SUSEbtrfs: fix use-after-free when attempting to join an aborted transaction7.8 Highkernel-livepatch-SLE15-SP7_Update_1SUSEscsi: ufs: core: Fix use-after free in init error and remove paths7.8 Highkernel-livepatch-SLE15-SP7_Update_1SUSEnvkm/gsp: correctly advance the read pointer of GSP message queue7.8 Highkernel-livepatch-SLE15-SP7_Update_1SUSEnvkm: correctly calculate the available space of the GSP cmdq buffer5.5 Mediumkernel-livepatch-SLE15-SP7_Update_1SUSEocfs2: handle a symlink read error correctly5.5 Mediumkernel-livepatch-SLE15-SP7_Update_1SUSEwifi: rtw89: fix race between cancel_hw_scan and hw_scan completion7.8 Highkernel-livepatch-SLE15-SP7_Update_1SUSEnet/mlx5e: add missing cpu_to_node to kvzalloc_node in mlx5e_open_xdpredirect_sq7.8 Highkernel-livepatch-SLE15-SP7_Update_1SUSEmptcp: consolidate suboption status9.8 Criticalkernel-livepatch-SLE15-SP7_Update_1SUSEmptcp: pm: only set fullmesh for subflow endp5.5 Mediumkernel-livepatch-SLE15-SP7_Update_1SUSEOPP: add index check to assert to avoid buffer overflow in _read_freq()7.3 Highkernel-livepatch-SLE15-SP7_Update_1SUSEudp: Deal with race between UDP socket address change and rehash4.7 Mediumkernel-livepatch-SLE15-SP7_Update_1SUSEnetem: Update sch->q.qlen before qdisc_tree_reduce_backlog()7.8 Highkernel-livepatch-SLE15-SP7_Update_1SUSEpfifo_tail_enqueue: Drop new packet when sch->limit == 07.8 Highkernel-livepatch-SLE15-SP7_Update_1SUSEnet: avoid race between device unregistration and ethnl ops7.8 Highkernel-livepatch-SLE15-SP7_Update_1SUSEmm: clear uffd-wp PTE/PMD state on mremap()5.5 Mediumkernel-livepatch-SLE15-SP7_Update_1SUSEbpf: Fix bpf_sk_select_reuseport() memory leak5.5 Medium- Show moreLoading…