kgraft-patch-SLE12-SP5_Update_84 vulnerabilities (SUSE)
107 vulnerabilities.
kgraft-patch-SLE12-SP5_Update_84SUSEipv4: free inet_opt and ireq_opt after an RCU grace period9.8 Criticalkgraft-patch-SLE12-SP5_Update_84SUSEnfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget9.8 Criticalkgraft-patch-SLE12-SP5_Update_84SUSESUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow9.8 Criticalkgraft-patch-SLE12-SP5_Update_84SUSESUNRPC: fix gssx_dec_option_array error path bugs7.5 Highkgraft-patch-SLE12-SP5_Update_84SUSEipvs: clear IPv4 options after rebasing tunnel ICMP errors9.8 Criticalkgraft-patch-SLE12-SP5_Update_84SUSEsctp: prevent peer transport count overflow8.8 Highkgraft-patch-SLE12-SP5_Update_84SUSExfrm: fix stale skb->prev after async crypto steals a GSO segment9.8 Criticalkgraft-patch-SLE12-SP5_Update_84SUSEALSA: seq: close a re-opened queue timer in the destructor7.8 Highkgraft-patch-SLE12-SP5_Update_84SUSEpppoe: reload header pointer after dev_hard_header()7.8 Highkgraft-patch-SLE12-SP5_Update_84SUSEipv4: raw: reject IP_HDRINCL packets with ihl < 57.8 Highkgraft-patch-SLE12-SP5_Update_84SUSEnfc: llcp: Fix use-after-free in llcp_sock_release()7.8 Highkgraft-patch-SLE12-SP5_Update_84SUSEipv6: validate extension header length before copying to cmsg7.1 Highkgraft-patch-SLE12-SP5_Update_84SUSEscsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()9.8 Criticalkgraft-patch-SLE12-SP5_Update_84SUSExfs: resample the data fork mapping after cycling ILOCK7.8 Highkgraft-patch-SLE12-SP5_Update_84SUSEKVM: x86: Fix shadow paging use-after-free due to unexpected role8.8 Highkgraft-patch-SLE12-SP5_Update_84SUSEsctp: validate cached peer INIT chunk length in COOKIE_ECHO processing9.8 Criticalkgraft-patch-SLE12-SP5_Update_84SUSEsctp: validate embedded INIT chunk and address list lengths in cookie9.1 Criticalkgraft-patch-SLE12-SP5_Update_84SUSEcrypto: ccp - copy IV using skcipher ivsize7.8 Highkgraft-patch-SLE12-SP5_Update_84SUSEcrypto: af_alg - Cap AEAD AD length to 0x800000005.5 Mediumkgraft-patch-SLE12-SP5_Update_84SUSElibceph: Fix potential out-of-bounds access in __ceph_x_decrypt()7.5 Highkgraft-patch-SLE12-SP5_Update_84SUSEipc: limit next_id allocation to the valid ID range7.8 Highkgraft-patch-SLE12-SP5_Update_84SUSEnet/sched: fix pedit partial COW leading to page cache corruption7.8 Highkgraft-patch-SLE12-SP5_Update_84SUSEArm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1,...9.1 Criticalkgraft-patch-SLE12-SP5_Update_84SUSEibmveth: Disable GSO for packets with small MSS8.6 Highkgraft-patch-SLE12-SP5_Update_84SUSEprocfs: fix missing RCU protection when reading real_parent in do_task_stat()7.8 Highkgraft-patch-SLE12-SP5_Update_84SUSERDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()7.8 Highkgraft-patch-SLE12-SP5_Update_84SUSEhfsplus: fix uninit-value by validating catalog record size5.5 Mediumkgraft-patch-SLE12-SP5_Update_84SUSEbtrfs: fix missing last_unlink_trans update when removing a directory5.5 Mediumkgraft-patch-SLE12-SP5_Update_84SUSEbtrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak4.7 Mediumkgraft-patch-SLE12-SP5_Update_84SUSEALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger7.8 Highkgraft-patch-SLE12-SP5_Update_84SUSEfanotify: fix false positive on permission events7.1 Highkgraft-patch-SLE12-SP5_Update_84SUSExfrm: defensively unhash xfrm_state lists in __xfrm_state_delete7.8 Highkgraft-patch-SLE12-SP5_Update_84SUSEKVM: x86: Fix shadow paging use-after-free due to unexpected GFN8.8 Highkgraft-patch-SLE12-SP5_Update_84SUSEALSA: aloop: Fix peer runtime UAF during format-change stop7.8 Highkgraft-patch-SLE12-SP5_Update_84SUSERDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv9.1 Criticalkgraft-patch-SLE12-SP5_Update_84SUSElibceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()7.5 Highkgraft-patch-SLE12-SP5_Update_84SUSEthermal: core: Fix thermal zone governor cleanup issues5.5 Mediumkgraft-patch-SLE12-SP5_Update_84SUSEnfsd: never defer requests during idmap lookup5.5 Mediumkgraft-patch-SLE12-SP5_Update_84SUSEbonding: alb: fix UAF in rlb_arp_recv during bond up/down7.8 Highkgraft-patch-SLE12-SP5_Update_84SUSESUNRPC: auth_gss: fix memory leaks in XDR decoding error paths5.5 Mediumkgraft-patch-SLE12-SP5_Update_84SUSERDMA/rxe: Fix double free in rxe_srq_from_init7.8 Highkgraft-patch-SLE12-SP5_Update_84SUSEslip: bound decode() reads against the compressed packet length8.2 Highkgraft-patch-SLE12-SP5_Update_84SUSEslip: reject VJ receive packets on instances with no rstate array5.5 Mediumkgraft-patch-SLE12-SP5_Update_84SUSEnetfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO5.5 Mediumkgraft-patch-SLE12-SP5_Update_84SUSEBluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()5.5 Mediumkgraft-patch-SLE12-SP5_Update_84SUSErtmutex: Use waiter::task instead of current in remove_waiter()7.8 Highkgraft-patch-SLE12-SP5_Update_84SUSEnet: skbuff: propagate shared-frag marker through frag-transfer helpers8.8 Highkgraft-patch-SLE12-SP5_Update_84SUSEscsi: qla2xxx: Completely fix fcport double free9.8 Criticalkgraft-patch-SLE12-SP5_Update_84SUSEscsi: hisi_sas: Fix NULL pointer exception during user_scan()5.5 Mediumkgraft-patch-SLE12-SP5_Update_84SUSElibceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()9.1 Critical- Show olderLoading…