kernel-livepatch-SLE15-SP7_Update_22 vulnerabilities (SUSE)
508 vulnerabilities.
kernel-livepatch-SLE15-SP7_Update_22SUSEsctp: hold socket lock when dumping endpoints in sctp_diag2.0 Lowkernel-livepatch-SLE15-SP7_Update_22SUSEflow_dissector: check device type before reading ETH_ADDRS7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEmd/raid1: fix writes_pending and barrier reference leaks on write failures7.1 Highkernel-livepatch-SLE15-SP7_Update_22SUSEmd/raid10: fix writes_pending leak on write request failures2.0 Lowkernel-livepatch-SLE15-SP7_Update_22SUSEmd/raid10: fix writes_pending and barrier reference leaks on discard failures7.5 Highkernel-livepatch-SLE15-SP7_Update_22SUSEmd/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retryNo scorekernel-livepatch-SLE15-SP7_Update_22SUSEnetfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEnetfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnetfilter: ipset: make sure gc is properly stopped7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnetfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leakNo scorekernel-livepatch-SLE15-SP7_Update_22SUSEice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()7.1 Highkernel-livepatch-SLE15-SP7_Update_22SUSEipv4: fib: Don't ignore error route in local/main tables.10.0 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEsctp: fix err_chunk memory leaks in INIT handling8.7 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnet: sungem: fix probe error cleanup7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEtipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnet: enetc: check the number of BDs needed for xdp_frame9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEsctp: add INIT verification after cookie unpacking9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump5.7 Mediumkernel-livepatch-SLE15-SP7_Update_22SUSEsctp: fix addr_wq_timer race in sctp_free_addr_wq()7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEfs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid4.8 Mediumkernel-livepatch-SLE15-SP7_Update_22SUSEHID: bpf: Fix hid_bpf_get_data() range check7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEgue: validate REMCSUM private option length9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEnetfilter: xt_u32: reject invalid shift counts7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnetfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()6.3 Mediumkernel-livepatch-SLE15-SP7_Update_22SUSEnetfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop9.1 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEnetfilter: xt_connmark: reject invalid shift parameters7.3 Highkernel-livepatch-SLE15-SP7_Update_22SUSEqede: fix off-by-one in BD ring consumption on build_skb failure9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEBluetooth: 6lowpan: avoid untracked enable workNo scorekernel-livepatch-SLE15-SP7_Update_22SUSEnet/tls: Consume empty data records in tls_sw_read_sock()7.5 Highkernel-livepatch-SLE15-SP7_Update_22SUSEperf/x86/amd/core: Avoid enabling BRS from the SVM reload path5.6 Mediumkernel-livepatch-SLE15-SP7_Update_22SUSEipv4: igmp: Fix potential UAF in igmp_gq_start_timer()9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEipv6: mcast: Fix potential UAF in MLD delayed work9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer()5.7 Mediumkernel-livepatch-SLE15-SP7_Update_22SUSEvduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iterNo scorekernel-livepatch-SLE15-SP7_Update_22SUSEtipc: restrict socket queue dumps in enqueue tracepoints9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEnet: atm: reject out-of-range traffic classes in QoS validation7.1 Highkernel-livepatch-SLE15-SP7_Update_22SUSEKVM: Move kvm_io_bus_get_dev() locking responsibilities to callers7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnetfilter: xt_cluster: reject template conntracks in hash match4.8 Mediumkernel-livepatch-SLE15-SP7_Update_22SUSEnetfilter: nf_conncount: fix zone comparison in tuple dedup7.5 Highkernel-livepatch-SLE15-SP7_Update_22SUSEselinux: check connect-related permissions on TCP Fast Open8.4 Highkernel-livepatch-SLE15-SP7_Update_22SUSEselinux: avoid sk_socket dereference in selinux_sctp_bind_connect()7.5 Highkernel-livepatch-SLE15-SP7_Update_22SUSEperf/x86/amd/brs: Fix kernel address leakage4.8 Mediumkernel-livepatch-SLE15-SP7_Update_22SUSEnvdimm/btt: Free arenas on btt_init() error pathsNo scorekernel-livepatch-SLE15-SP7_Update_22SUSElockd: Plug nlm_file leak when nlm_do_fopen() fails8.7 Highkernel-livepatch-SLE15-SP7_Update_22SUSElockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure8.2 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnet/9p: fix infinite loop in p9_client_rpc on fatal signalNo scorekernel-livepatch-SLE15-SP7_Update_22SUSEocfs2: avoid moving extents to occupied clusters7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits5.7 Mediumkernel-livepatch-SLE15-SP7_Update_22SUSEocfs2: add journal NULL check in ocfs2_checkpoint_inode()No scorekernel-livepatch-SLE15-SP7_Update_22SUSEnet: thunderbolt: Fix frags[] overflow by bounding frame_count8.8 High- Show moreLoading…