kgraft-patch-SLE12-SP5_Update_67 vulnerabilities (SUSE)
246 vulnerabilities.
kgraft-patch-SLE12-SP5_Update_67SUSEmacvlan: fix error recovery in macvlan_common_newlink()7.8 Highkgraft-patch-SLE12-SP5_Update_67SUSEnet/sched: Enforce that teql can only be used as root qdisc7.8 Highkgraft-patch-SLE12-SP5_Update_67SUSEnet/sched: sch_qfq: do not free existing class in qfq_change_class()7.8 Highkgraft-patch-SLE12-SP5_Update_67SUSESUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf7.5 Highkgraft-patch-SLE12-SP5_Update_67SUSEipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()7.5 Highkgraft-patch-SLE12-SP5_Update_67SUSEipvs: fix ipv4 null-ptr-deref in route error path6.8 Mediumkgraft-patch-SLE12-SP5_Update_67SUSEmrp: introduce active flags to prevent UAF when applicant uninit7.8 Highkgraft-patch-SLE12-SP5_Update_67SUSElibceph: fix potential use-after-free in have_mon_and_osd_map()9.8 Criticalkgraft-patch-SLE12-SP5_Update_67SUSEcifs: fix session state check in reconnect to avoid use-after-free issue9.8 Criticalkgraft-patch-SLE12-SP5_Update_67SUSEsmc: Fix use-after-free in tcp_write_timer_handler().7.8 Highkgraft-patch-SLE12-SP5_Update_67SUSEipvs: Defer ip_vs_ftp unregister during netns cleanup7.8 Highkgraft-patch-SLE12-SP5_Update_67SUSEi40e: add validation for ring_len param8.8 Highkgraft-patch-SLE12-SP5_Update_67SUSEdo_change_type(): refuse to operate on unmounted/not ours mounts7.8 Highkgraft-patch-SLE12-SP5_Update_67SUSEsmb: client: fix use-after-free in crypt_message when using async crypto9.8 Criticalkgraft-patch-SLE12-SP5_Update_67SUSEnet/sched: sch_qfq: Fix race condition on qfq_aggregate7.8 Highkgraft-patch-SLE12-SP5_Update_67SUSEcalipso: Fix null-ptr-deref in calipso_req_{set,del}attr().7.5 Highkgraft-patch-SLE12-SP5_Update_67SUSEsch_hfsc: make hfsc_qlen_notify() idempotent7.8 Highkgraft-patch-SLE12-SP5_Update_67SUSEBluetooth: Fix error code in chan_alloc_skb_cb()5.5 Mediumkgraft-patch-SLE12-SP5_Update_67SUSEdrm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()5.5 Mediumkgraft-patch-SLE12-SP5_Update_67SUSEiscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()7.1 Highkgraft-patch-SLE12-SP5_Update_67SUSEBluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd8.8 Highkgraft-patch-SLE12-SP5_Update_67SUSErapidio: add check for rio_add_net() in rio_scan_alloc_net()5.5 Mediumkgraft-patch-SLE12-SP5_Update_67SUSErapidio: fix an API misues when rio_add_net() fails7.8 Highkgraft-patch-SLE12-SP5_Update_67SUSEppp: Fix KMSAN uninit-value warning with bpf5.5 Mediumkgraft-patch-SLE12-SP5_Update_67SUSEusb: atm: cxacru: fix a flaw in existing endpoint checks5.5 Mediumkgraft-patch-SLE12-SP5_Update_67SUSEcifs: fix potential memory leaks in session setup5.5 Mediumkgraft-patch-SLE12-SP5_Update_67SUSEtracing: Make sure trace_printk() can output as soon as it can be used5.5 Mediumkgraft-patch-SLE12-SP5_Update_67SUSEnetlink: prevent potential spectre v1 gadgets7.8 Highkgraft-patch-SLE12-SP5_Update_67SUSEIn the Linux kernel, the following vulnerability has been resolved: squashfs: harden sanity...5.5 Mediumkgraft-patch-SLE12-SP5_Update_67SUSEwifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads7.1 Highkgraft-patch-SLE12-SP5_Update_67SUSESquashfs: fix handling and sanity checking of xattr_ids count5.5 Mediumkgraft-patch-SLE12-SP5_Update_67SUSEipvlan: ensure network headers are in skb linear part5.5 Mediumkgraft-patch-SLE12-SP5_Update_67SUSEusbnet: gl620a: fix endpoint checking in genelink_bind()5.5 Mediumkgraft-patch-SLE12-SP5_Update_67SUSEtee: optee: Fix supplicant wait loop5.5 Mediumkgraft-patch-SLE12-SP5_Update_67SUSEgtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl().5.5 Mediumkgraft-patch-SLE12-SP5_Update_67SUSEgeneve: Fix use-after-free in geneve_find_dev().7.8 Highkgraft-patch-SLE12-SP5_Update_67SUSEibmvnic: Don't reference skb after sending to VIOS8.6 Highkgraft-patch-SLE12-SP5_Update_67SUSEnfp: bpf: Add check for nfp_app_ctrl_msg_alloc()5.5 Mediumkgraft-patch-SLE12-SP5_Update_67SUSEacct: perform last write from workqueue5.5 Mediumkgraft-patch-SLE12-SP5_Update_67SUSEPCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen15.5 Mediumkgraft-patch-SLE12-SP5_Update_67SUSEKVM: Explicitly verify target vCPU is online in kvm_get_vcpu()7.8 Highkgraft-patch-SLE12-SP5_Update_67SUSEwifi: rtlwifi: remove unused check_buddy_priv7.8 Highkgraft-patch-SLE12-SP5_Update_67SUSEteam: prevent adding a device which is already a team device lower5.5 Mediumkgraft-patch-SLE12-SP5_Update_67SUSEdrm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table5.5 Mediumkgraft-patch-SLE12-SP5_Update_67SUSEALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC7.8 Highkgraft-patch-SLE12-SP5_Update_67SUSEfbdev: omap: use threaded IRQ for LCD DMA5.5 Mediumkgraft-patch-SLE12-SP5_Update_67SUSEnet: hns3: fix oops when unload drivers paralleling5.5 Mediumkgraft-patch-SLE12-SP5_Update_67SUSEnfsd: clear acl_access/acl_default after releasing them9.8 Criticalkgraft-patch-SLE12-SP5_Update_67SUSEvrf: use RCU protection in l3mdev_l3_out()7.8 Highkgraft-patch-SLE12-SP5_Update_67SUSEarm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array7.8 High- Show olderLoading…