kgraft-patch-SLE12-SP5_Update_83 vulnerabilities (SUSE)
39 vulnerabilities.
kgraft-patch-SLE12-SP5_Update_83SUSEipv4: free inet_opt and ireq_opt after an RCU grace period9.8 Criticalkgraft-patch-SLE12-SP5_Update_83SUSEnfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget9.8 Criticalkgraft-patch-SLE12-SP5_Update_83SUSESUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow9.8 Criticalkgraft-patch-SLE12-SP5_Update_83SUSESUNRPC: fix gssx_dec_option_array error path bugs7.5 Highkgraft-patch-SLE12-SP5_Update_83SUSEipvs: clear IPv4 options after rebasing tunnel ICMP errors9.8 Criticalkgraft-patch-SLE12-SP5_Update_83SUSEsctp: prevent peer transport count overflow8.8 Highkgraft-patch-SLE12-SP5_Update_83SUSExfrm: fix stale skb->prev after async crypto steals a GSO segment9.8 Criticalkgraft-patch-SLE12-SP5_Update_83SUSEALSA: seq: close a re-opened queue timer in the destructor7.8 Highkgraft-patch-SLE12-SP5_Update_83SUSElibceph: Fix multiplication overflow in decode_new_up_state_weight()9.8 Criticalkgraft-patch-SLE12-SP5_Update_83SUSEpppoe: reload header pointer after dev_hard_header()7.8 Highkgraft-patch-SLE12-SP5_Update_83SUSEipv4: raw: reject IP_HDRINCL packets with ihl < 57.8 Highkgraft-patch-SLE12-SP5_Update_83SUSEnfc: llcp: Fix use-after-free in llcp_sock_release()7.8 Highkgraft-patch-SLE12-SP5_Update_83SUSEipv6: validate extension header length before copying to cmsg7.1 Highkgraft-patch-SLE12-SP5_Update_83SUSEscsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()9.8 Criticalkgraft-patch-SLE12-SP5_Update_83SUSEscsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf9.8 Criticalkgraft-patch-SLE12-SP5_Update_83SUSEKVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path7.8 Highkgraft-patch-SLE12-SP5_Update_83SUSExfs: resample the data fork mapping after cycling ILOCK7.8 Highkgraft-patch-SLE12-SP5_Update_83SUSEKVM: x86: Fix shadow paging use-after-free due to unexpected role8.8 Highkgraft-patch-SLE12-SP5_Update_83SUSEsctp: validate cached peer INIT chunk length in COOKIE_ECHO processing9.8 Criticalkgraft-patch-SLE12-SP5_Update_83SUSEsctp: validate embedded INIT chunk and address list lengths in cookie9.1 Criticalkgraft-patch-SLE12-SP5_Update_83SUSEnetfilter: require Ethernet MAC header before using eth_hdr()9.4 Criticalkgraft-patch-SLE12-SP5_Update_83SUSEcrypto: ccp - copy IV using skcipher ivsize7.8 Highkgraft-patch-SLE12-SP5_Update_83SUSEcrypto: af_alg - Cap AEAD AD length to 0x800000005.5 Mediumkgraft-patch-SLE12-SP5_Update_83SUSElibceph: Fix potential out-of-bounds access in __ceph_x_decrypt()7.5 Highkgraft-patch-SLE12-SP5_Update_83SUSEipc: limit next_id allocation to the valid ID range7.8 Highkgraft-patch-SLE12-SP5_Update_83SUSEnet/sched: fix pedit partial COW leading to page cache corruption7.8 Highkgraft-patch-SLE12-SP5_Update_83SUSEnet: gro: don't merge zcopy skbs7.8 Highkgraft-patch-SLE12-SP5_Update_83SUSEsmb: client: reject userspace cifs.spnego descriptions7.1 Highkgraft-patch-SLE12-SP5_Update_83SUSExfrm: defensively unhash xfrm_state lists in __xfrm_state_delete7.8 Highkgraft-patch-SLE12-SP5_Update_83SUSEKVM: x86: Fix shadow paging use-after-free due to unexpected GFN8.8 Highkgraft-patch-SLE12-SP5_Update_83SUSEbonding: alb: fix UAF in rlb_arp_recv during bond up/down7.8 Highkgraft-patch-SLE12-SP5_Update_83SUSEnet: skbuff: propagate shared-frag marker through frag-transfer helpers8.8 Highkgraft-patch-SLE12-SP5_Update_83SUSEdrm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()7.8 Highkgraft-patch-SLE12-SP5_Update_83SUSEcrypto: algif_aead - Fix minimum RX size check for decryption5.5 Mediumkgraft-patch-SLE12-SP5_Update_83SUSEipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()9.8 Criticalkgraft-patch-SLE12-SP5_Update_83SUSEip6_tunnel: clear skb2->cb[] in ip4ip6_err()9.8 Criticalkgraft-patch-SLE12-SP5_Update_83SUSEusb: ulpi: fix double free in ulpi_register_interface() error path7.8 Highkgraft-patch-SLE12-SP5_Update_83SUSEnfc: llcp: add missing return after LLCP_CLOSED checks8.8 Highkgraft-patch-SLE12-SP5_Update_83SUSEnet: ipv4: fix one memleak in __inet_del_ifa()6.8 Medium