kgraft-patch-SLE12-SP5_Update_85 vulnerabilities (SUSE)
83 vulnerabilities.
kgraft-patch-SLE12-SP5_Update_85SUSEipv4: free inet_opt and ireq_opt after an RCU grace period9.8 Criticalkgraft-patch-SLE12-SP5_Update_85SUSEnfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget9.8 Criticalkgraft-patch-SLE12-SP5_Update_85SUSESUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow9.8 Criticalkgraft-patch-SLE12-SP5_Update_85SUSESUNRPC: fix gssx_dec_option_array error path bugs7.5 Highkgraft-patch-SLE12-SP5_Update_85SUSEipvs: clear IPv4 options after rebasing tunnel ICMP errors9.8 Criticalkgraft-patch-SLE12-SP5_Update_85SUSEsctp: prevent peer transport count overflow8.8 Highkgraft-patch-SLE12-SP5_Update_85SUSExfrm: fix stale skb->prev after async crypto steals a GSO segment9.8 Criticalkgraft-patch-SLE12-SP5_Update_85SUSEALSA: seq: close a re-opened queue timer in the destructor7.8 Highkgraft-patch-SLE12-SP5_Update_85SUSEpppoe: reload header pointer after dev_hard_header()7.8 Highkgraft-patch-SLE12-SP5_Update_85SUSEipv4: raw: reject IP_HDRINCL packets with ihl < 57.8 Highkgraft-patch-SLE12-SP5_Update_85SUSEnfc: llcp: Fix use-after-free in llcp_sock_release()7.8 Highkgraft-patch-SLE12-SP5_Update_85SUSEipv6: validate extension header length before copying to cmsg7.1 Highkgraft-patch-SLE12-SP5_Update_85SUSEscsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()9.8 Criticalkgraft-patch-SLE12-SP5_Update_85SUSExfs: resample the data fork mapping after cycling ILOCK7.8 Highkgraft-patch-SLE12-SP5_Update_85SUSEKVM: x86: Fix shadow paging use-after-free due to unexpected role8.8 Highkgraft-patch-SLE12-SP5_Update_85SUSEaudit: fix incorrect inheritable capability in CAPSET records5.5 Mediumkgraft-patch-SLE12-SP5_Update_85SUSEBluetooth: bnep: reject short frames before parsing7.1 Highkgraft-patch-SLE12-SP5_Update_85SUSEsctp: validate cached peer INIT chunk length in COOKIE_ECHO processing9.8 Criticalkgraft-patch-SLE12-SP5_Update_85SUSEsctp: validate embedded INIT chunk and address list lengths in cookie9.1 Criticalkgraft-patch-SLE12-SP5_Update_85SUSEUSB: serial: kl5kusb105: fix bulk-out buffer overflow7.8 Highkgraft-patch-SLE12-SP5_Update_85SUSEthunderbolt: Reject zero-length property entries in validator5.5 Mediumkgraft-patch-SLE12-SP5_Update_85SUSEthunderbolt: Clamp XDomain response data copy to allocation size7.8 Highkgraft-patch-SLE12-SP5_Update_85SUSEppp: require CAP_NET_ADMIN in target netns for unattached ioctls8.8 Highkgraft-patch-SLE12-SP5_Update_85SUSEocfs2: fix listxattr handling when the buffer is full7.1 Highkgraft-patch-SLE12-SP5_Update_85SUSEocfs2: validate bg_bits during freefrag scan7.1 Highkgraft-patch-SLE12-SP5_Update_85SUSEcrypto: ccp - copy IV using skcipher ivsize7.8 Highkgraft-patch-SLE12-SP5_Update_85SUSEcrypto: af_alg - Cap AEAD AD length to 0x800000005.5 Mediumkgraft-patch-SLE12-SP5_Update_85SUSEceph: fix a buffer leak in __ceph_setxattr()7.8 Highkgraft-patch-SLE12-SP5_Update_85SUSElibceph: Fix potential null-ptr-deref in decode_choose_args()7.5 Highkgraft-patch-SLE12-SP5_Update_85SUSElibceph: Fix potential out-of-bounds access in __ceph_x_decrypt()7.5 Highkgraft-patch-SLE12-SP5_Update_85SUSElibceph: Fix potential out-of-bounds access in crush_decode()9.8 Criticalkgraft-patch-SLE12-SP5_Update_85SUSElibceph: handle rbtree insertion error in decode_choose_args()7.5 Highkgraft-patch-SLE12-SP5_Update_85SUSEipc: limit next_id allocation to the valid ID range7.8 Highkgraft-patch-SLE12-SP5_Update_85SUSEBluetooth: serialize accept_q access8.8 Highkgraft-patch-SLE12-SP5_Update_85SUSEnet/sched: fix pedit partial COW leading to page cache corruption7.8 Highkgraft-patch-SLE12-SP5_Update_85SUSEapparmor: fix rlimit for posix cpu timers7.3 Highkgraft-patch-SLE12-SP5_Update_85SUSEtap: free page on error paths in tap_get_user_xdp()7.4 Highkgraft-patch-SLE12-SP5_Update_85SUSEhfsplus: fix held lock freed on hfsplus_fill_super()7.0 Highkgraft-patch-SLE12-SP5_Update_85SUSEBluetooth: hci_uart: fix UAFs and race conditions in close and init paths7.8 Highkgraft-patch-SLE12-SP5_Update_85SUSEinet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP9.1 Criticalkgraft-patch-SLE12-SP5_Update_85SUSEAppArmor: Allow apparmor to handle unaligned dfa tables5.5 Mediumkgraft-patch-SLE12-SP5_Update_85SUSEpstore/ram: fix buffer overflow in persistent_ram_save_old()7.8 Highkgraft-patch-SLE12-SP5_Update_85SUSERDMA/rxe: Reject unknown opcodes before ICRC processing7.5 Highkgraft-patch-SLE12-SP5_Update_85SUSEisofs: validate block number from NFS file handle in isofs_export_iget7.5 Highkgraft-patch-SLE12-SP5_Update_85SUSEKVM: SVM: Inject #UD for INVLPGA if EFER.SVME=05.5 Mediumkgraft-patch-SLE12-SP5_Update_85SUSEwifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup()7.8 Highkgraft-patch-SLE12-SP5_Update_85SUSEfbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info7.8 Highkgraft-patch-SLE12-SP5_Update_85SUSEhfsplus: return error when node already exists in hfs_bnode_create5.5 Mediumkgraft-patch-SLE12-SP5_Update_85SUSEext4: fix memory leak in ext4_ext_shift_extents()5.5 Mediumkgraft-patch-SLE12-SP5_Update_85SUSEext4: don't cache extent during splitting extent5.5 Medium- Show olderLoading…