kernel-livepatch-SLE15-SP7_Update_20 vulnerabilities (SUSE)
289 vulnerabilities.
-
kernel-livepatch-SLE15-SP7_Update_20SUSE ipv4: free inet_opt and ireq_opt after an RCU grace period 9.8 Critical -
kernel-livepatch-SLE15-SP7_Update_20SUSE nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget 9.8 Critical -
kernel-livepatch-SLE15-SP7_Update_20SUSE SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow 9.8 Critical -
kernel-livepatch-SLE15-SP7_Update_20SUSE SUNRPC: fix gssx_dec_option_array error path bugs 7.5 High -
kernel-livepatch-SLE15-SP7_Update_20SUSE ipvs: clear IPv4 options after rebasing tunnel ICMP errors 9.8 Critical -
kernel-livepatch-SLE15-SP7_Update_20SUSE veth: fix skb length accounting after XDP frag adjustment 10.0 Critical -
kernel-livepatch-SLE15-SP7_Update_20SUSE sctp: prevent peer transport count overflow 8.8 High -
kernel-livepatch-SLE15-SP7_Update_20SUSE RDMA/srpt: fix integer overflow in immediate data length check 9.8 Critical -
kernel-livepatch-SLE15-SP7_Update_20SUSE xfrm: fix stale skb->prev after async crypto steals a GSO segment 9.8 Critical -
kernel-livepatch-SLE15-SP7_Update_20SUSE libceph: Fix multiplication overflow in decode_new_up_state_weight() 9.8 Critical -
kernel-livepatch-SLE15-SP7_Update_20SUSE net/sched: serialize qdisc_rtab_list against concurrent get/put 7.8 High -
kernel-livepatch-SLE15-SP7_Update_20SUSE pppoe: reload header pointer after dev_hard_header() 7.8 High -
kernel-livepatch-SLE15-SP7_Update_20SUSE sctp: don't free the ASCONF's own transport in DEL-IP processing 9.8 Critical -
kernel-livepatch-SLE15-SP7_Update_20SUSE posix-cpu-timers: Prevent UAF caused by non-leader exec() race 7.8 High -
kernel-livepatch-SLE15-SP7_Update_20SUSE net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle 9.8 Critical -
kernel-livepatch-SLE15-SP7_Update_20SUSE usb: xhci: Fix sleep in atomic context in xhci_free_streams() No score -
kernel-livepatch-SLE15-SP7_Update_20SUSE ipv4: igmp: remove multicast group from hash table on device destruction 7.8 High -
kernel-livepatch-SLE15-SP7_Update_20SUSE usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_20SUSE usb: gadget: f_printer: take kref only for successful open 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_20SUSE USB: serial: keyspan_pda: fix information leak 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_20SUSE usb: typec: tcpm: Validate SVID index in svdm_consume_modes() 7.8 High -
kernel-livepatch-SLE15-SP7_Update_20SUSE NFSv4: include MAY_WRITE in open permission mask for O_TRUNC 7.1 High -
kernel-livepatch-SLE15-SP7_Update_20SUSE usb: gadget: net2280: Fix double free in probe error path 7.8 High -
kernel-livepatch-SLE15-SP7_Update_20SUSE tty: serial: pch_uart: add check for dma_alloc_coherent() 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_20SUSE drm/msm/dsi: don't dump registers past the mapped region 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_20SUSE wifi: mac80211: consume only present negotiated TTLM maps 8.1 High -
kernel-livepatch-SLE15-SP7_Update_20SUSE spi: ti-qspi: fix use-after-free after DMA setup failure 7.8 High -
kernel-livepatch-SLE15-SP7_Update_20SUSE device property: set fwnode->secondary to NULL in fwnode_init() 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_20SUSE netfs: Fix overrun check in netfs_extract_user_iter() 7.8 High -
kernel-livepatch-SLE15-SP7_Update_20SUSE KVM: x86: Check for invalid/obsolete root *after* making MMU pages available 8.8 High -
kernel-livepatch-SLE15-SP7_Update_20SUSE i2c: stub: Reject I2C block transfers with invalid length 7.8 High -
kernel-livepatch-SLE15-SP7_Update_20SUSE netfilter: ipset: fix race between dump and ip_set_list resize 7.8 High -
kernel-livepatch-SLE15-SP7_Update_20SUSE xfs: fail recovery on a committed log item with no regions 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_20SUSE efi: Allocate runtime workqueue before ACPI init 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_20SUSE drivers/base/memory: fix memory block reference leak in poison accounting 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_20SUSE net: wwan: iosm: fix potential memory leaks in ipc_imem_init() 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_20SUSE wifi: cfg80211: advance loop vars in cfg80211_merge_profile() 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_20SUSE net: ifb: report ethtool stats over num_tx_queues 7.1 High -
kernel-livepatch-SLE15-SP7_Update_20SUSE ipv4: raw: reject IP_HDRINCL packets with ihl < 5 7.8 High -
kernel-livepatch-SLE15-SP7_Update_20SUSE KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits 9.0 Critical -
kernel-livepatch-SLE15-SP7_Update_20SUSE batman-adv: tt: fix negative last_changeset_len 9.8 Critical -
kernel-livepatch-SLE15-SP7_Update_20SUSE bpf, skmsg: fix verdict sk_data_ready racing with ktls rx 9.8 Critical -
kernel-livepatch-SLE15-SP7_Update_20SUSE net: hsr: fix potential OOB access in supervision frame handling 9.8 Critical -
kernel-livepatch-SLE15-SP7_Update_20SUSE tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() 9.8 Critical -
kernel-livepatch-SLE15-SP7_Update_20SUSE Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt() 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_20SUSE ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() 9.8 Critical -
kernel-livepatch-SLE15-SP7_Update_20SUSE Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success 8.8 High -
kernel-livepatch-SLE15-SP7_Update_20SUSE Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp 8.8 High -
kernel-livepatch-SLE15-SP7_Update_20SUSE Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close 8.8 High -
kernel-livepatch-SLE15-SP7_Update_20SUSE sctp: fix race between sctp_wait_for_connect and peeloff 7.8 High - Show olderLoading…