kernel-livepatch-SLE15-SP7_Update_6 vulnerabilities (SUSE)
495 vulnerabilities.
-
kernel-livepatch-SLE15-SP7_Update_6SUSE net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle 9.8 Critical -
kernel-livepatch-SLE15-SP7_Update_6SUSE xfs: resample the data fork mapping after cycling ILOCK 7.8 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE KVM: x86: Fix shadow paging use-after-free due to unexpected role 8.8 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE ipv4: account for fraggap on the paged allocation path 7.8 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing 9.8 Critical -
kernel-livepatch-SLE15-SP7_Update_6SUSE sctp: validate embedded INIT chunk and address list lengths in cookie 9.1 Critical -
kernel-livepatch-SLE15-SP7_Update_6SUSE wifi: nl80211: reject oversized EMA RNR lists 7.8 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE RDMA/umem: Fix truncation for block sizes >= 4G 7.8 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE crypto: af_alg - Cap AEAD AD length to 0x80000000 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_6SUSE libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() 7.5 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE ipc: limit next_id allocation to the valid ID range 7.8 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE net/sched: act_ct: Only release RCU read lock after ct_ft 7.8 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE io-wq: check that the predecessor is hashed in io_wq_remove_pending() 7.8 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE eventpoll: fix ep_remove struct eventpoll / struct file UAF 7.8 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE KVM: x86: Fix shadow paging use-after-free due to unexpected GFN 8.8 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE ipv4: icmp: validate reply type before using icmp_pointers 8.2 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() 7.8 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE wifi: brcmfmac: validate bsscfg indices in IF events 8.8 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE x86: shadow stacks: proper error handling for mmap lock 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_6SUSE crypto: algif_aead - Fix minimum RX size check for decryption 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_6SUSE ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() 9.8 Critical -
kernel-livepatch-SLE15-SP7_Update_6SUSE usb: ulpi: fix double free in ulpi_register_interface() error path 7.8 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE vxlan: validate ND option lengths in vxlan_na_create 5.5 Medium -
kernel-livepatch-SLE15-SP7_Update_6SUSE nfc: llcp: add missing return after LLCP_CLOSED checks 8.8 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE net/sched: teql: Fix double-free in teql_master_xmit 7.8 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE tls: Fix race condition in tls_sw_cancel_work_tx() 9.8 Critical -
kernel-livepatch-SLE15-SP7_Update_6SUSE macvlan: fix error recovery in macvlan_common_newlink() 7.8 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() 7.8 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE net/sched: Enforce that teql can only be used as root qdisc 7.8 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE net/sched: sch_qfq: do not free existing class in qfq_change_class() 7.8 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf 7.5 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE sctp: Fix MAC comparison to be constant-time 8.1 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE xsk: Harden userspace-supplied xdp_desc validation 7.8 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE ixgbevf: fix mailbox API compatibility by negotiating supported features 7.8 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE btrfs: do not assert we found block group item when creating free space tree No score -
kernel-livepatch-SLE15-SP7_Update_6SUSE drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies 7.8 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE ixgbe: fix too early devlink_free() in ixgbe_remove() No score -
kernel-livepatch-SLE15-SP7_Update_6SUSE hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() 7.1 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE NFSD: Define a proc_layoutcommit for the FlexFiles layout type 7.5 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card 5.1 Medium -
kernel-livepatch-SLE15-SP7_Update_6SUSE hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() 7.1 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE bpf: Explicitly check accesses to bpf_sock_addr 9.1 Critical -
kernel-livepatch-SLE15-SP7_Update_6SUSE tty: n_gsm: Don't block input queue by waiting MSC 6.8 Medium -
kernel-livepatch-SLE15-SP7_Update_6SUSE crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs 9.1 Critical -
kernel-livepatch-SLE15-SP7_Update_6SUSE RDMA/rxe: Fix race in do_task() when draining 7.8 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE coresight: trbe: Return NULL pointer for allocation failures 5.7 Medium -
kernel-livepatch-SLE15-SP7_Update_6SUSE iommu/vt-d: Disallow dirty tracking if incoherent page walk 8.8 High -
kernel-livepatch-SLE15-SP7_Update_6SUSE vhost: vringh: Fix copy_to_iter return value check No score -
kernel-livepatch-SLE15-SP7_Update_6SUSE smb: client: fix crypto buffers in non-linear memory 5.7 Medium -
kernel-livepatch-SLE15-SP7_Update_6SUSE vhost: vringh: Modify the return value check 7.8 High - Show olderLoading…