kernel-livepatch-SLE15-SP7_Update_7 vulnerabilities (SUSE)
145 vulnerabilities.
kernel-livepatch-SLE15-SP7_Update_7SUSEip6_tunnel: clear skb2->cb[] in ip4ip6_err()9.8 Criticalkernel-livepatch-SLE15-SP7_Update_7SUSEnetfilter: nf_conntrack_helper: pass helper to expect cleanup7.8 Highkernel-livepatch-SLE15-SP7_Update_7SUSEnetfilter: ctnetlink: ignore explicit helper on new expectations7.3 Highkernel-livepatch-SLE15-SP7_Update_7SUSEusb: ulpi: fix double free in ulpi_register_interface() error path7.8 Highkernel-livepatch-SLE15-SP7_Update_7SUSEusb: usbtmc: Flush anchored URBs in usbtmc_release7.8 Highkernel-livepatch-SLE15-SP7_Update_7SUSEnetfilter: ip6t_eui64: reject invalid MAC header for all packets9.4 Criticalkernel-livepatch-SLE15-SP7_Update_7SUSEnfc: llcp: add missing return after LLCP_CLOSED checks8.8 Highkernel-livepatch-SLE15-SP7_Update_7SUSEmm: blk-cgroup: fix use-after-free in cgwb_release_workfn()7.8 Highkernel-livepatch-SLE15-SP7_Update_7SUSEcan: gw: fix OOB heap access in cgw_csum_crc8_rel()8.8 Highkernel-livepatch-SLE15-SP7_Update_7SUSEnet/tls: fix use-after-free in -EBUSY error path of tls_do_encryption9.8 Criticalkernel-livepatch-SLE15-SP7_Update_7SUSEiavf: fix out-of-bounds writes in iavf_get_ethtool_stats()7.8 Highkernel-livepatch-SLE15-SP7_Update_7SUSEnet/sched: teql: Fix double-free in teql_master_xmit7.8 Highkernel-livepatch-SLE15-SP7_Update_7SUSEbridge: cfm: Fix race condition in peer_mep deletion7.8 Highkernel-livepatch-SLE15-SP7_Update_7SUSEtls: Fix race condition in tls_sw_cancel_work_tx()9.8 Criticalkernel-livepatch-SLE15-SP7_Update_7SUSEmacvlan: fix error recovery in macvlan_common_newlink()7.8 Highkernel-livepatch-SLE15-SP7_Update_7SUSEnetfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()7.8 Highkernel-livepatch-SLE15-SP7_Update_7SUSEnet/sched: Enforce that teql can only be used as root qdisc7.8 Highkernel-livepatch-SLE15-SP7_Update_7SUSEnet/sched: sch_qfq: do not free existing class in qfq_change_class()7.8 Highkernel-livepatch-SLE15-SP7_Update_7SUSESUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf7.5 Highkernel-livepatch-SLE15-SP7_Update_7SUSEiommu: disable SVA when CONFIG_X86 is set7.8 Highkernel-livepatch-SLE15-SP7_Update_7SUSEipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()7.5 Highkernel-livepatch-SLE15-SP7_Update_7SUSEipvs: fix ipv4 null-ptr-deref in route error path6.8 Mediumkernel-livepatch-SLE15-SP7_Update_7SUSElibceph: fix potential use-after-free in have_mon_and_osd_map()9.8 Criticalkernel-livepatch-SLE15-SP7_Update_7SUSElibceph: prevent potential out-of-bounds writes in handle_auth_session_key()9.8 Criticalkernel-livepatch-SLE15-SP7_Update_7SUSEnet: bridge: fix use-after-free due to MST port state bypass7.8 Highkernel-livepatch-SLE15-SP7_Update_7SUSEmptcp: fix race condition in mptcp_schedule_work()9.8 Criticalkernel-livepatch-SLE15-SP7_Update_7SUSEmedia: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()5.6 Mediumkernel-livepatch-SLE15-SP7_Update_7SUSEnetfilter: nft_objref: validate objref and objrefmap expressions7.8 Highkernel-livepatch-SLE15-SP7_Update_7SUSEbtrfs: avoid potential out-of-bounds in btrfs_encode_fh()7.8 Highkernel-livepatch-SLE15-SP7_Update_7SUSEsctp: Fix MAC comparison to be constant-time8.1 Highkernel-livepatch-SLE15-SP7_Update_7SUSESquashfs: reject negative file sizes in squashfs_read_inode()7.1 Highkernel-livepatch-SLE15-SP7_Update_7SUSEext4: avoid potential buffer over-read in parse_apply_sb_mount_options()7.8 Highkernel-livepatch-SLE15-SP7_Update_7SUSEcpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()7.0 Highkernel-livepatch-SLE15-SP7_Update_7SUSEpwm: berlin: Fix wrong register in suspend/resumeNo scorekernel-livepatch-SLE15-SP7_Update_7SUSEtcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().8.1 Highkernel-livepatch-SLE15-SP7_Update_7SUSEice: ice_adapter: release xa entry on adapter allocation failure7.6 Highkernel-livepatch-SLE15-SP7_Update_7SUSEbpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}7.5 Highkernel-livepatch-SLE15-SP7_Update_7SUSEmailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loopNo scorekernel-livepatch-SLE15-SP7_Update_7SUSEtls: wait for pending async decryptions if tls_strp_msg_hold fails9.8 Criticalkernel-livepatch-SLE15-SP7_Update_7SUSEnet/ip6_tunnel: Prevent perpetual tunnel growth7.8 Highkernel-livepatch-SLE15-SP7_Update_7SUSEaccel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()7.8 Highkernel-livepatch-SLE15-SP7_Update_7SUSEnvmet-fc: move lsop put work to nvmet_fc_ls_req_op7.5 Highkernel-livepatch-SLE15-SP7_Update_7SUSEbpf: Reject negative offsets for ALU ops7.8 Highkernel-livepatch-SLE15-SP7_Update_7SUSEsmc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().8.1 Highkernel-livepatch-SLE15-SP7_Update_7SUSEusbnet: Fix using smp_processor_id() in preemptible code warnings5.5 Mediumkernel-livepatch-SLE15-SP7_Update_7SUSExsk: Harden userspace-supplied xdp_desc validation7.8 Highkernel-livepatch-SLE15-SP7_Update_7SUSEEDAC/i10nm: Skip DIMM enumeration on a disabled memory controller7.0 Highkernel-livepatch-SLE15-SP7_Update_7SUSEPM / devfreq: mtk-cci: Fix potential error pointer dereference in probe()No scorekernel-livepatch-SLE15-SP7_Update_7SUSEASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping7.5 Highkernel-livepatch-SLE15-SP7_Update_7SUSEtls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().7.8 High- Show moreLoading…