kgraft-patch-SLE12-SP5_Update_78 vulnerabilities (SUSE)
82 vulnerabilities.
kgraft-patch-SLE12-SP5_Update_78SUSEALSA: seq: close a re-opened queue timer in the destructor7.8 Highkgraft-patch-SLE12-SP5_Update_78SUSEpppoe: reload header pointer after dev_hard_header()7.8 Highkgraft-patch-SLE12-SP5_Update_78SUSEipv4: raw: reject IP_HDRINCL packets with ihl < 57.8 Highkgraft-patch-SLE12-SP5_Update_78SUSEnfc: llcp: Fix use-after-free in llcp_sock_release()7.8 Highkgraft-patch-SLE12-SP5_Update_78SUSEipv6: validate extension header length before copying to cmsg7.1 Highkgraft-patch-SLE12-SP5_Update_78SUSEscsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()9.8 Criticalkgraft-patch-SLE12-SP5_Update_78SUSEsmb: client: reject userspace cifs.spnego descriptions7.1 Highkgraft-patch-SLE12-SP5_Update_78SUSExfrm: defensively unhash xfrm_state lists in __xfrm_state_delete7.8 Highkgraft-patch-SLE12-SP5_Update_78SUSEbonding: alb: fix UAF in rlb_arp_recv during bond up/down7.8 Highkgraft-patch-SLE12-SP5_Update_78SUSEALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain()7.8 Highkgraft-patch-SLE12-SP5_Update_78SUSEnetfilter: xt_tcpmss: check remaining length before reading optlen8.2 Highkgraft-patch-SLE12-SP5_Update_78SUSEip6_tunnel: clear skb2->cb[] in ip4ip6_err()9.8 Criticalkgraft-patch-SLE12-SP5_Update_78SUSEnetfilter: ctnetlink: ignore explicit helper on new expectations7.3 Highkgraft-patch-SLE12-SP5_Update_78SUSEnetfilter: ip6t_eui64: reject invalid MAC header for all packets9.4 Criticalkgraft-patch-SLE12-SP5_Update_78SUSEapparmor: validate DFA start states are in bounds in unpack_pdb7.1 Highkgraft-patch-SLE12-SP5_Update_78SUSEapparmor: fix unprivileged local user can do privileged policy management7.8 Highkgraft-patch-SLE12-SP5_Update_78SUSEnftables disabled due to incorrect kernel backport7.3 Highkgraft-patch-SLE12-SP5_Update_78SUSEscsi: qla2xxx: Validate sp before freeing associated memory7.5 Highkgraft-patch-SLE12-SP5_Update_78SUSEmacvlan: fix error recovery in macvlan_common_newlink()7.8 Highkgraft-patch-SLE12-SP5_Update_78SUSEALSA: usb-audio: Prevent excessive number of frames7.8 Highkgraft-patch-SLE12-SP5_Update_78SUSEnet/sched: cls_u32: use skb_header_pointer_careful()7.1 Highkgraft-patch-SLE12-SP5_Update_78SUSEKVM: Don't clobber irqfd routing type when deassigning irqfd7.8 Highkgraft-patch-SLE12-SP5_Update_78SUSEALSA: aloop: Fix racy access at PCM trigger7.8 Highkgraft-patch-SLE12-SP5_Update_78SUSEwifi: mac80211: ocb: skip rx_no_sta when interface is not joined4.8 Mediumkgraft-patch-SLE12-SP5_Update_78SUSEbtrfs: send: check for inline extents in range_is_hole_in_parent()5.5 Mediumkgraft-patch-SLE12-SP5_Update_78SUSEsctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT5.5 Mediumkgraft-patch-SLE12-SP5_Update_78SUSEnvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec9.8 Criticalkgraft-patch-SLE12-SP5_Update_78SUSEnet/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag7.8 Highkgraft-patch-SLE12-SP5_Update_78SUSEbonding: limit BOND_MODE_8023AD to Ethernet devices7.1 Highkgraft-patch-SLE12-SP5_Update_78SUSEgue: Fix skb memleak with inner IP protocol 0.7.5 Highkgraft-patch-SLE12-SP5_Update_78SUSEALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()7.8 Highkgraft-patch-SLE12-SP5_Update_78SUSEvsock/virtio: cap TX credit to local buffer size5.5 Mediumkgraft-patch-SLE12-SP5_Update_78SUSEirqchip/gic-v3-its: Avoid truncating memory addresses5.5 Mediumkgraft-patch-SLE12-SP5_Update_78SUSEbe2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list5.5 Mediumkgraft-patch-SLE12-SP5_Update_78SUSEfou: Don't allow 0 for FOU_ATTR_IPPROTO.7.8 Highkgraft-patch-SLE12-SP5_Update_78SUSEnet/sched: Enforce that teql can only be used as root qdisc7.8 Highkgraft-patch-SLE12-SP5_Update_78SUSEvsock/virtio: fix potential underflow in virtio_transport_get_credit()5.5 Mediumkgraft-patch-SLE12-SP5_Update_78SUSEnet/sched: act_ife: avoid possible NULL deref5.5 Mediumkgraft-patch-SLE12-SP5_Update_78SUSEcrypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec5.5 Mediumkgraft-patch-SLE12-SP5_Update_78SUSEnet: hv_netvsc: reject RSS hash key programming without RX indirection table6.7 Mediumkgraft-patch-SLE12-SP5_Update_78SUSEbtrfs: fix deadlock in wait_current_trans() due to ignored transaction type5.7 Mediumkgraft-patch-SLE12-SP5_Update_78SUSEbtrfs: fix NULL dereference on root when tracing inode eviction5.5 Mediumkgraft-patch-SLE12-SP5_Update_78SUSEbtrfs: always detect conflicting inodes when logging inode refs9.1 Criticalkgraft-patch-SLE12-SP5_Update_78SUSEdst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()7.8 Highkgraft-patch-SLE12-SP5_Update_78SUSEip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()7.5 Highkgraft-patch-SLE12-SP5_Update_78SUSEnvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec7.5 Highkgraft-patch-SLE12-SP5_Update_78SUSElibceph: make free_choose_arg_map() resilient to partial allocation7.5 Highkgraft-patch-SLE12-SP5_Update_78SUSEcrypto: seqiv - Do not use req->iv after crypto_aead_encrypt7.5 Highkgraft-patch-SLE12-SP5_Update_78SUSElibceph: make decode_pool() more resilient against corrupted osdmaps9.1 Criticalkgraft-patch-SLE12-SP5_Update_78SUSEcrypto: af_alg - zero initialize memory allocated via sock_kmalloc5.5 Medium- Show olderLoading…