kernel-livepatch-SLE15-SP7_Update_22 vulnerabilities (SUSE)
508 vulnerabilities.
kernel-livepatch-SLE15-SP7_Update_22SUSEiommu/vt-d: Force requesting ACS when tboot is enabled9.3 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEslip: fix use-after-free in sl_sync()7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnet: tun: bound receive headroom7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnet/smc: do not dereference an unset send buffer on the SMC-D teardown path5.7 Mediumkernel-livepatch-SLE15-SP7_Update_22SUSEnet/smc: fix socket refcount leak in smc_switch_conns()No scorekernel-livepatch-SLE15-SP7_Update_22SUSEnet/smc: unregister the connection before draining the rx tasklet7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEseg6: reset IP6CB after IPv6 decapsulation9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEwifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEvsock/virtio: flush works in dependency order8.4 Highkernel-livepatch-SLE15-SP7_Update_22SUSEdrm/amdgpu: Reject UVD message with invalid number of h265 refs7.3 Highkernel-livepatch-SLE15-SP7_Update_22SUSEIB/mlx5: Properly support implicit ODP rereg_mr7.3 Highkernel-livepatch-SLE15-SP7_Update_22SUSEbpf: Add missing access_ok call to copy_user_syms4.6 Mediumkernel-livepatch-SLE15-SP7_Update_22SUSERDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp7.3 Highkernel-livepatch-SLE15-SP7_Update_22SUSERDMA/rxe: Fix OOB in free_rd_atomic_resources()8.5 Highkernel-livepatch-SLE15-SP7_Update_22SUSEtls: device: fix out-of-bounds write in tls_append_frag()7.3 Highkernel-livepatch-SLE15-SP7_Update_22SUSExfrm: espintcp: fix UAF during close7.3 Highkernel-livepatch-SLE15-SP7_Update_22SUSEtcp: clamp route advmss to TCP_MIN_MSS6.8 Mediumkernel-livepatch-SLE15-SP7_Update_22SUSExfrm: drop ESP-in-TCP packets with no ingress device6.8 Mediumkernel-livepatch-SLE15-SP7_Update_22SUSExfrm: ah6: validate routing header segments_left7.3 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnet: bridge: mcast: fix use-after-free of a master VLAN's multicast context7.3 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnet/packet: defer vmalloc TX_RING free until skbs finish7.3 Highkernel-livepatch-SLE15-SP7_Update_22SUSEipv6: seg6: clear IPv4 control block on IPIP decapsulation9.2 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEcrypto: virtio - bound the akcipher result lengthNo scorekernel-livepatch-SLE15-SP7_Update_22SUSExfs: validate attr entry pointer before field access5.3 Mediumkernel-livepatch-SLE15-SP7_Update_22SUSEnfc: llcp: fix OOB read and u8 offset wrap in TLV parsers7.1 Highkernel-livepatch-SLE15-SP7_Update_22SUSEipv4: reject undersized MTUs in ip_do_fragment()6.8 Mediumkernel-livepatch-SLE15-SP7_Update_22SUSEnvmet-tcp: bound SGL data length before allocating command buffers8.7 Highkernel-livepatch-SLE15-SP7_Update_22SUSEfbdev: serialize mode sysfs access with lock_fb_info()No scorekernel-livepatch-SLE15-SP7_Update_22SUSEnet/ionic: avoid OOB TX partner lookup for hwstamp RXQ8.4 Highkernel-livepatch-SLE15-SP7_Update_22SUSEselinux: do not cancel a policy conversion that never startedNo scorekernel-livepatch-SLE15-SP7_Update_22SUSEdrm/amdkfd: Add bounds check for CRAT subtype length8.0 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnet/mlx5e: TC, Check if flow is PEER before acquiring devcom lock6.7 Mediumkernel-livepatch-SLE15-SP7_Update_22SUSEserial: amba-pl011: synchronize DMA teardown7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnet: remove CAP_SYS_RAWIO zero-padding in dev_validate_header7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnet: gro: properly validate BIG TCP aggregation criteria9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEwifi: mac80211: validate individual TWT params before driver setup8.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEBluetooth: ISO: ensure no dangling hcon references in iso_conn8.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEALSA: pcm: wake linked drain waiters on unlink7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEigc: remove napi_synchronize() in igc_down()6.7 Mediumkernel-livepatch-SLE15-SP7_Update_22SUSEipvs: do not propagate one-packet flag to synced conns9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEidpf: bound interrupt-vector register fill to the allocated array9.3 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEmm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE4.8 Mediumkernel-livepatch-SLE15-SP7_Update_22SUSEvxlan: re-fetch eth header after route_shortcircuit()9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEs390/dasd: Fix potential NULL pointer dereferenceNo scorekernel-livepatch-SLE15-SP7_Update_22SUSEnet/mlx5: LAG, MPESW, Fix missing complete() on devcom error5.6 Mediumkernel-livepatch-SLE15-SP7_Update_22SUSEnetfilter: xt_nat: reject unsupported target families7.3 Highkernel-livepatch-SLE15-SP7_Update_22SUSEtools/power/x86/intel-speed-select: Harden daemon pidfile open7.1 Highkernel-livepatch-SLE15-SP7_Update_22SUSERDMA/hns: Fix warning in poll cq direct mode10.0 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEipv6: guard against possible NULL deref in __in6_dev_stats_get()7.5 Highkernel-livepatch-SLE15-SP7_Update_22SUSEbtrfs: lzo: reject compressed segment that overflows the compressed input7.5 High- Show moreLoading…