kernel-xen vulnerabilities (SUSE)
901 vulnerabilities.
-
kernel-xenSUSE ipv4: validate checksum_start before completing checksum 9.3 Critical -
kernel-xenSUSE NFSv4.1: zero referring call lists before decoding 9.8 Critical -
kernel-xenSUSE Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop No score -
kernel-xenSUSE scsi: target: iscsi: Reserve a terminator byte for the login payload 9.1 Critical -
kernel-xenSUSE SUNRPC: harden gss_krb5_unwrap_v2 against short tokens 9.8 Critical -
kernel-xenSUSE sctp: stop processing a packet once its association is deleted 9.8 Critical -
kernel-xenSUSE fbdev: serialize mode sysfs access with lock_fb_info() No score -
kernel-xenSUSE fbdev: bound mode sysfs output to the sysfs buffer 7.8 High -
kernel-xenSUSE sctp: validate cookie AUTH state before use 9.8 Critical -
kernel-xenSUSE macvlan: inherit needed_headroom and needed_tailroom from lowerdev 9.8 Critical -
kernel-xenSUSE ALSA: usx2y: bound the hwdep mmap fault offset 7.8 High -
kernel-xenSUSE ipv6: prevent in6_dev_get() from resurrecting inet6_dev 7.8 High -
kernel-xenSUSE ip6_tunnel: clear skb2->cb[] in ip6ip6_err() 9.8 Critical -
kernel-xenSUSE sctp: keep chunk->transport in step with the list it is queued on 9.8 Critical -
kernel-xenSUSE sctp: fix use-after-free of cached ASCONF chunk 9.8 Critical -
kernel-xenSUSE scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer 9.8 Critical -
kernel-xenSUSE ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data 7.8 High -
kernel-xenSUSE sctp: add INIT verification after cookie unpacking 9.8 Critical -
kernel-xenSUSE bridge: stp: Fix a potential use-after-free when deleting a bridge 7.8 High -
kernel-xenSUSE netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop 9.1 Critical -
kernel-xenSUSE ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() 9.8 Critical -
kernel-xenSUSE ipv6: mcast: Fix potential UAF in MLD delayed work 9.8 Critical -
kernel-xenSUSE scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE 9.8 Critical -
kernel-xenSUSE sctp: fix auth_hmacs array size in struct sctp_cookie 8.1 High -
kernel-xenSUSE ALSA: seq: close a re-opened queue timer in the destructor 7.8 High -
kernel-xenSUSE pppoe: reload header pointer after dev_hard_header() 7.8 High -
kernel-xenSUSE xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() 7.8 High -
kernel-xenSUSE sctp: don't free the ASCONF's own transport in DEL-IP processing 9.8 Critical -
kernel-xenSUSE net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes 7.1 High -
kernel-xenSUSE ipv4: raw: reject IP_HDRINCL packets with ihl < 5 7.8 High -
kernel-xenSUSE ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() 9.8 Critical -
kernel-xenSUSE ipv6: exthdrs: refresh nh after handling HAO option 9.8 Critical -
kernel-xenSUSE scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf 9.8 Critical -
kernel-xenSUSE KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() 7.1 High -
kernel-xenSUSE KVM: x86: Fix shadow paging use-after-free due to unexpected role 8.8 High -
kernel-xenSUSE Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() 8.0 High -
kernel-xenSUSE Bluetooth: bnep: reject short frames before parsing 7.1 High -
kernel-xenSUSE sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing 9.8 Critical -
kernel-xenSUSE sctp: validate embedded INIT chunk and address list lengths in cookie 9.1 Critical -
kernel-xenSUSE USB: serial: io_ti: fix heap overflow in get_manuf_info() 6.8 Medium -
kernel-xenSUSE locking/rtmutex: Skip remove_waiter() when waiter is not enqueued 5.5 Medium -
kernel-xenSUSE netfilter: require Ethernet MAC header before using eth_hdr() 9.4 Critical -
kernel-xenSUSE dm log: fix out-of-bounds write due to region_count overflow 7.8 High -
kernel-xenSUSE netfilter: nf_conntrack_sip: don't use simple_strtoul 9.8 Critical -
kernel-xenSUSE libceph: Fix potential out-of-bounds access in crush_decode() 9.8 Critical -
kernel-xenSUSE Bluetooth: serialize accept_q access 8.8 High -
kernel-xenSUSE net/sched: fix pedit partial COW leading to page cache corruption 7.8 High -
kernel-xenSUSE inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP 9.1 Critical -
kernel-xenSUSE smb: client: reject userspace cifs.spnego descriptions 7.1 High -
kernel-xenSUSE xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete 7.8 High - Show olderLoading…