kernel-livepatch-SLE15-SP7_Update_22 vulnerabilities (SUSE)
508 vulnerabilities.
kernel-livepatch-SLE15-SP7_Update_22SUSEnfsd: size fh_verify server sockaddr slot by xpt_locallen9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEnfsd: validate symlink target length in NFSv4 CREATE7.5 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()9.1 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEnfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref7.5 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnfsd: check client ownership when cancelling a copy-notify stateid7.1 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEnfsd: fix cpntf publish race in nfs4_init_cp_state7.5 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnfsd: fix nfsd_file leak on inter-server COPY setup failure7.5 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEnfsd: fix XDR padding calculation in ff_encode_getdeviceinfo5.3 Mediumkernel-livepatch-SLE15-SP7_Update_22SUSEnfsd: gate nfs2 setacl by argp->mask9.1 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEnfsd: gate nfs3 setacl by argp->mask9.1 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEnfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE8.2 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnfsd: revoke copy-notify stateids before dropping their reference8.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSENFSD: Prevent lock owner use-after-free during client teardown9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEbtrfs: fix extent map leak in NOCOW direct I/O write5.7 Mediumkernel-livepatch-SLE15-SP7_Update_22SUSEsmb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEsmb: client: clear ce->tgthint in free_tgts()9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEsmb: client: reject a tree connect response whose byte count is too small9.1 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEecryptfs: hold msg ctx list lock when cleaning daemon queue7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEIn the Linux kernel, the following vulnerability has been resolved: entry: Fix seccomp bypass...8.4 Highkernel-livepatch-SLE15-SP7_Update_22SUSEbpf: Disable preemption in __bpf_get_stack7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEBluetooth: RFCOMM: serialize security confirmation handling8.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSEip: orphan prefetched skbs before multicast forwarding7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSESUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSESUNRPC: svcauth_gss: enforce krb5 token minimum length9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSESUNRPC: always drain cache_cleaner before destroying a cache_detail7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSESUNRPC: Check svc pool percpu counter allocation8.1 Highkernel-livepatch-SLE15-SP7_Update_22SUSESUNRPC: fix gssx_dec_option_array error path bugs7.5 Highkernel-livepatch-SLE15-SP7_Update_22SUSESUNRPC: harden gss_krb5_unwrap_v2 against short tokens9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSESUNRPC: harden gss_unwrap_resp_priv length checks9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEsunrpc: init gssp_lock before publishing proc entry7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSESUNRPC: reject duplicate CREDS_VALUE optionsNo scorekernel-livepatch-SLE15-SP7_Update_22SUSESUNRPC: Reject krb5 v2 wrap tokens with oversized ec field9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSESUNRPC: wait for in-flight client TLS handshake callback9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEsvcrdma: Fix offset arithmetic in read_chunk_range9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEsvcrdma: Fix pcl_for_each_segment for empty chunks9.1 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEsvcrdma: Reject connection when transport allocation fails8.2 Highkernel-livepatch-SLE15-SP7_Update_22SUSEudf: reject VAT indexes equal to the entry count7.1 Highkernel-livepatch-SLE15-SP7_Update_22SUSEqede: Fix NULL pointer dereference in TPA fragment processing7.5 Highkernel-livepatch-SLE15-SP7_Update_22SUSERDMA/cxgb4: Cancel reg_work before freeing device on remove7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSERDMA/ucma: Lock the handler in ucma_set_ib_path()7.8 Highkernel-livepatch-SLE15-SP7_Update_22SUSElockd: pin next file across nlm_inspect_file lock-drop9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEnvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEnvme-tcp: fix host memory disclosure on R2T for a read command7.5 Highkernel-livepatch-SLE15-SP7_Update_22SUSEnvme-tcp: reject a read that transferred too few bytes7.5 Highkernel-livepatch-SLE15-SP7_Update_22SUSEsctp: stop processing a packet once its association is deleted9.8 Criticalkernel-livepatch-SLE15-SP7_Update_22SUSEsctp: fix NULL deref on untransmitted RECONF completion7.5 Highkernel-livepatch-SLE15-SP7_Update_22SUSEiommu/amd: Put PCI device after handling PPR faultsNo scorekernel-livepatch-SLE15-SP7_Update_22SUSEiommu/sva: Set handle->dev before the SVA handle is visible5.7 Medium- Show moreLoading…