kernel-obs-qa vulnerabilities (SUSE)
5,344 vulnerabilities.
kernel-obs-qaSUSEcan: ems_usb: validate CPC message lengths5.2 Mediumkernel-obs-qaSUSEcan: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure1.0 Lowkernel-obs-qaSUSEcan: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents7.0 Highkernel-obs-qaSUSEcan: peak_usb: add bounds check for USB channel index5.1 Mediumkernel-obs-qaSUSEcan: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error7.8 Highkernel-obs-qaSUSEcan: peak_usb: validate uCAN receive record lengths5.2 Mediumkernel-obs-qaSUSEdrm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size7.8 Highkernel-obs-qaSUSEdrm/vc4: Zero the tile state data array before each BIN job7.8 Highkernel-obs-qaSUSEdrm/panthor: reject firmware sections with oversized data7.8 Highkernel-obs-qaSUSEdrm/panthor: validate firmware interface structure sizes7.8 Highkernel-obs-qaSUSEdrm/amd/pm: fix pptable use-after-free7.8 Highkernel-obs-qaSUSEdrm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport7.8 Highkernel-obs-qaSUSEdrm/amdkfd: fix QID bit leak in pqm_create_queue()1.8 Lowkernel-obs-qaSUSEdrm/amdkfd: fix uint32_t overflow in EOP ring buffer size alignment7.8 Highkernel-obs-qaSUSEdrm/amdkfd: hold event_mutex while checkpointing CRIU events7.8 Highkernel-obs-qaSUSEdrm/vmwgfx: reject DX_BIND_QUERY without a DX context6.8 Mediumkernel-obs-qaSUSEdrm/vmwgfx: validate DRAW_PRIMITIVES header size before division7.8 Highkernel-obs-qaSUSEdrm/vmwgfx: bound DMA command body size against suffix pointer8.8 Highkernel-obs-qaSUSEdrm/vmwgfx: avoid destroy_workqueue(NULL) on vkms init failureNo scorekernel-obs-qaSUSEdrm/xe: Wait on external BO kernel fences in exec IOCTL7.8 Highkernel-obs-qaSUSEiommu/vt-d: Clear Present bit before tearing down scalable-mode context entry9.3 Criticalkernel-obs-qaSUSEfbcon: fix NULL pointer dereference for a console without vc_dataNo scorekernel-obs-qaSUSEdrm/radeon: fix integer overflow in radeon_align_pitch()7.8 Highkernel-obs-qaSUSEdrm/radeon: fix memory leak in radeon_ring_restore() on lock failure5.7 Mediumkernel-obs-qaSUSEwifi: rtw89: Correct data type for scan index to avoid infinite loop8.8 Highkernel-obs-qaSUSEwifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer8.1 Highkernel-obs-qaSUSEwifi: ath9k: fix OOB access from firmware tx status queue ID8.8 Highkernel-obs-qaSUSEvxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().9.8 Criticalkernel-obs-qaSUSEcrypto: ccp - Fix snp_filter_reserved_mem_regions() off-by-one7.8 Highkernel-obs-qaSUSEcrypto: atmel-sha204a - fix blocking and non-blocking rng logicNo scorekernel-obs-qaSUSEevm: terminate and bound the evm_xattrs read bufferNo scorekernel-obs-qaSUSEipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD9.8 Criticalkernel-obs-qaSUSEIB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier7.8 Highkernel-obs-qaSUSERDMA/mlx5: Fix devx subscribe-event unwind NULL dereference6.8 Mediumkernel-obs-qaSUSERDMA/srpt: fix integer overflow in immediate data length check9.8 Criticalkernel-obs-qaSUSEdrm/syncobj: Fix memory leak in drm_syncobj_find_fence()6.8 Mediumkernel-obs-qaSUSEtracing: Bound synthetic-field strings with seq_bufNo scorekernel-obs-qaSUSERDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs7.8 Highkernel-obs-qaSUSERDMA/hns: Fix log flood after cmd_mbox failureNo scorekernel-obs-qaSUSEALSA: seq: oss: Fix UAF at handling events with embedded SysEx data7.8 Highkernel-obs-qaSUSEALSA: seq: midi: Serialize output teardown with event_input7.8 Highkernel-obs-qaSUSEnvmet-tcp: fix page fragment cache leak in error path8.2 Highkernel-obs-qaSUSEnvmet-tcp: check return value of nvmet_tcp_set_queue_sock7.5 Highkernel-obs-qaSUSEnvme-multipath: fix flex array size in struct nvme_ns_head9.8 Criticalkernel-obs-qaSUSEnet/sched: cls_bpf: prevent unbounded recursion in offload rollbackNo scorekernel-obs-qaSUSEgpu: host1x: Allow entries in BO caches to be freed6.8 Mediumkernel-obs-qaSUSEgpu: host1x: Fix iommu_map_sgtable() return value check8.8 Highkernel-obs-qaSUSEdax/kmem: account for partial discontiguous resource upon removalNo scorekernel-obs-qaSUSERDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe7.8 Highkernel-obs-qaSUSERDMA/rxe: Copy WQE to local buffer in non-SRQ receive path7.8 High- Show moreLoading…