kernel-livepatch-SLE15-SP7_Update_22 vulnerabilities (SUSE)
508 vulnerabilities.
kernel-livepatch-SLE15-SP7_Update_22SUSEdmaengine: dw-edma-pcie: Reject devices without driver dataNo scorekernel-livepatch-SLE15-SP7_Update_22SUSExen/gntdev: fix error handling in ioctlNo scorekernel-livepatch-SLE15-SP7_Update_22SUSExfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEtpm: Make the TPM character devices non-seekable7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnvmet-auth: reject short AUTH_RECEIVE buffers9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEnvmet-rdma: handle inline data with a nonzero offset9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEcan: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEdm thin metadata: fix metadata snapshot consistency on commit failure7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEdm era: fix out-of-bounds memory access for non-zero start sector8.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEdm-ioctl: fix a possible overflow in list_version_get_info9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEdm_early_create: fix freeing used table on dm_resume failure7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEdm-verity: fix buffer overflow in FEC calculation9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEscsi: xen: scsiback: Free the command tag on the TMR submit-failure path2.1 Lowkernel-livepatch-SLE15-SP7_Update_22SUSEscsi: xen: scsiback: Free unsubmitted command instead of double-putting it9.3 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEwifi: libertas_tf: fix use-after-free in lbtf_free_adapter()5.4 Mediumkernel-livepatch-SLE15-SP7_Update_22SUSEcpu: hotplug: Bound hotplug states sysfs output7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEgpio: tegra: do not call pinctrl for GPIO directionNo scorekernel-livepatch-SLE15-SP7_Update_22SUSEnet: sit: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnet: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnet: ip_vti: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnet: ipip: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnet: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnet: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEocteontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF8.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEs390/monwriter: Reject buffer reuse with different data lengthNo scorekernel-livepatch-SLE15-SP7_Update_22SUSEocteontx2-pf: fix SQB pointer leak on init failureNo scorekernel-livepatch-SLE15-SP7_Update_22SUSEmacsec: don't read an unset MAC header in macsec_encrypt()7.3 Highkernel-livepatch-SLE15-SP7_Update_22SUSEdibs: loopback: validate offset and size in move_data()7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnet: macb: drop in-flight Tx SKBs on close5.6 Mediumkernel-livepatch-SLE15-SP7_Update_22SUSEtracing/osnoise: Call synchronize_rcu() when unregistering7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEipvs: fix more places with wrong ipv6 transport offsets9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEwifi: ieee80211: validate MLE common info length8.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEKVM: s390: pci: Fix handling of AIF enable without AISB8.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEs390/zcrypt: Validate length for CCA AES cipher key requests7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEs390/zcrypt: Validate length for CCA ECC private key requests7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEovl: check access to copy_file_range source with src mounter creds2.0 Lowkernel-livepatch-SLE15-SP7_Update_22SUSEnet/sched: Handle TC_ACT_REDIRECT from qdisc filter chains1.8 Lowkernel-livepatch-SLE15-SP7_Update_22SUSEata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registeredNo scorekernel-livepatch-SLE15-SP7_Update_22SUSEdrm/xe/guc: Hold device ref until queue teardown completes7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEsctp: fix auth_hmacs array size in struct sctp_cookie8.1 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnet/packet: avoid fanout hook re-registration after unregister7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnet: qrtr: restrict socket creation to the initial network namespace8.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSErds: tcp: unregister sysctl before tearing down listen socket7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEdrm/amdgpu: Fix context pstate override handling7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEdrm/xe: Hold a dma-buf reference for imported BOs7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEdrm/xe/pt: Reset current_op in xe_pt_update_ops_init()7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEdrm/amdkfd: Check bounds on CRIU restore queue type and mqd size7.1 Highkernel-livepatch-SLE15-SP7_Update_22SUSEwifi: ath6kl: fix use-after-free in aggr_reset_state()8.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEfscrypt: Add missing superblock check in find_or_insert_direct_key()7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEftrace: Add global mutex to serialize trace_parser accessNo score- Show moreLoading…