kernel-livepatch-SLE15-SP7_Update_5 vulnerabilities (SUSE)
121 vulnerabilities.
-
kernel-livepatch-SLE15-SP7_Update_5SUSE KVM: x86: Fix shadow paging use-after-free due to unexpected role 8.8 High -
kernel-livepatch-SLE15-SP7_Update_5SUSE ipv4: account for fraggap on the paged allocation path 7.8 High -
kernel-livepatch-SLE15-SP7_Update_5SUSE KVM: x86: Fix shadow paging use-after-free due to unexpected GFN 8.8 High -
kernel-livepatch-SLE15-SP7_Update_5SUSE ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() 9.8 Critical -
kernel-livepatch-SLE15-SP7_Update_5SUSE vxlan: validate ND option lengths in vxlan_na_create 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_5SUSE tls: Fix race condition in tls_sw_cancel_work_tx() 9.8 Critical -
kernel-livepatch-SLE15-SP7_Update_5SUSE macvlan: fix error recovery in macvlan_common_newlink() 7.8 High -
kernel-livepatch-SLE15-SP7_Update_5SUSE netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() 7.8 High -
kernel-livepatch-SLE15-SP7_Update_5SUSE net/sched: Enforce that teql can only be used as root qdisc 7.8 High -
kernel-livepatch-SLE15-SP7_Update_5SUSE net/sched: sch_qfq: do not free existing class in qfq_change_class() 7.8 High -
kernel-livepatch-SLE15-SP7_Update_5SUSE SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf 7.5 High -
kernel-livepatch-SLE15-SP7_Update_5SUSE ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() 7.5 High -
kernel-livepatch-SLE15-SP7_Update_5SUSE ipvs: fix ipv4 null-ptr-deref in route error path 6.8 Medium -
kernel-livepatch-SLE15-SP7_Update_5SUSE libceph: fix potential use-after-free in have_mon_and_osd_map() 9.8 Critical -
kernel-livepatch-SLE15-SP7_Update_5SUSE libceph: prevent potential out-of-bounds writes in handle_auth_session_key() 9.8 Critical -
kernel-livepatch-SLE15-SP7_Update_5SUSE net: bridge: fix use-after-free due to MST port state bypass 7.8 High -
kernel-livepatch-SLE15-SP7_Update_5SUSE Bluetooth: MGMT: cancel mesh send timer when hdev removed 7.8 High -
kernel-livepatch-SLE15-SP7_Update_5SUSE mptcp: fix race condition in mptcp_schedule_work() 9.8 Critical -
kernel-livepatch-SLE15-SP7_Update_5SUSE sctp: Fix MAC comparison to be constant-time 8.1 High -
kernel-livepatch-SLE15-SP7_Update_5SUSE tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). 8.1 High -
kernel-livepatch-SLE15-SP7_Update_5SUSE xsk: Harden userspace-supplied xdp_desc validation 7.8 High -
kernel-livepatch-SLE15-SP7_Update_5SUSE sunrpc: fix null pointer dereference on zero-length checksum 7.5 High -
kernel-livepatch-SLE15-SP7_Update_5SUSE ipvs: Defer ip_vs_ftp unregister during netns cleanup 7.8 High -
kernel-livepatch-SLE15-SP7_Update_5SUSE i40e: add validation for ring_len param 8.8 High -
kernel-livepatch-SLE15-SP7_Update_5SUSE scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() 8.8 High -
kernel-livepatch-SLE15-SP7_Update_5SUSE ixgbe: fix incorrect map used in eee linkmode 7.1 High -
kernel-livepatch-SLE15-SP7_Update_5SUSE wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_5SUSE ocfs2: fix recursive semaphore deadlock in fiemap call 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_5SUSE tee: fix NULL pointer dereference in tee_shm_put 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_5SUSE net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync() 7.5 High -
kernel-livepatch-SLE15-SP7_Update_5SUSE ocfs2: prevent release journal inode after journal shutdown 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_5SUSE cifs: prevent NULL pointer dereference in UTF16 conversion 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_5SUSE xfs: do not propagate ENODATA disk errors into xattr code 7.8 High -
kernel-livepatch-SLE15-SP7_Update_5SUSE net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_5SUSE net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_5SUSE KVM: x86: use array_index_nospec with indices that come from guest 7.8 High -
kernel-livepatch-SLE15-SP7_Update_5SUSE io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_5SUSE drm/xe/vm: Clear the scratch_pt pointer on error 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_5SUSE drm/mediatek: Add error handling for old state CRTC in atomic_disable 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_5SUSE xfrm: Duplicate SPI Handling 7.8 High -
kernel-livepatch-SLE15-SP7_Update_5SUSE soc: qcom: mdt_loader: Ensure we don't read past the ELF header 7.8 High -
kernel-livepatch-SLE15-SP7_Update_5SUSE jbd2: prevent softlockup in jbd2_log_do_checkpoint() 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_5SUSE net: bridge: fix soft lockup in br_multicast_query_expired() 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_5SUSE net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM 7.5 High -
kernel-livepatch-SLE15-SP7_Update_5SUSE net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit 7.8 High -
kernel-livepatch-SLE15-SP7_Update_5SUSE netfilter: ctnetlink: remove refcounting in expectation dumpers 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_5SUSE mm/smaps: fix race between smaps_hugetlb_range and migration 4.7 Medium -
kernel-livepatch-SLE15-SP7_Update_5SUSE rcu: Protect ->defer_qs_iw_pending from data race 7.0 High -
kernel-livepatch-SLE15-SP7_Update_5SUSE drm/msm: Add error handling for krealloc in metadata setup 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_5SUSE wifi: ath10k: shutdown driver when hardware is unreliable 5.5 Medium - Show olderLoading…