kgraft-patch-SLE12-SP5_Update_85 vulnerabilities (SUSE)
83 vulnerabilities.
kgraft-patch-SLE12-SP5_Update_85SUSEopenvswitch: cap upcall PID array size and pre-size vport replies5.5 Mediumkgraft-patch-SLE12-SP5_Update_85SUSEcrypto: algif_aead - snapshot IV for async AEAD requests5.5 Mediumkgraft-patch-SLE12-SP5_Update_85SUSElib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()5.5 Mediumkgraft-patch-SLE12-SP5_Update_85SUSEunshare: fix unshare_fs() handling5.5 Mediumkgraft-patch-SLE12-SP5_Update_85SUSEbonding: fix type confusion in bond_setup_by_slave()7.8 Highkgraft-patch-SLE12-SP5_Update_85SUSElib/crypto: chacha: Zeroize permuted_state before it leaves scope7.5 Highkgraft-patch-SLE12-SP5_Update_85SUSExfrm: esp: avoid in-place decrypt on shared skb frags8.8 Highkgraft-patch-SLE12-SP5_Update_85SUSEALSA: usb-audio: Add sanity check for OOB writes at silencing7.8 Highkgraft-patch-SLE12-SP5_Update_85SUSEnetfilter: nf_conntrack_h323: fix OOB read in decode_choice()8.2 Highkgraft-patch-SLE12-SP5_Update_85SUSExfrm6: fix uninitialized saddr in xfrm6_get_saddr()8.6 Highkgraft-patch-SLE12-SP5_Update_85SUSEbtrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file()9.1 Criticalkgraft-patch-SLE12-SP5_Update_85SUSEfs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath8.8 Highkgraft-patch-SLE12-SP5_Update_85SUSExsk: tighten UMEM headroom validation to account for tailroom and min frame7.8 Highkgraft-patch-SLE12-SP5_Update_85SUSExfrm_user: fix info leak in build_mapping()5.5 Mediumkgraft-patch-SLE12-SP5_Update_85SUSEl2tp: Drop large packets with UDP encap5.5 Mediumkgraft-patch-SLE12-SP5_Update_85SUSEHID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq8.1 Highkgraft-patch-SLE12-SP5_Update_85SUSEHID: multitouch: Check to ensure report responses match the request7.8 Highkgraft-patch-SLE12-SP5_Update_85SUSEcrypto: af-alg - fix NULL pointer dereference in scatterwalk5.5 Mediumkgraft-patch-SLE12-SP5_Update_85SUSEnet: use skb_header_pointer() for TCPv4 GSO frag_off check5.5 Mediumkgraft-patch-SLE12-SP5_Update_85SUSEnet: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak5.5 Mediumkgraft-patch-SLE12-SP5_Update_85SUSEdrm/ioc32: stop speculation on the drm_compat_ioctl path5.5 Mediumkgraft-patch-SLE12-SP5_Update_85SUSEBluetooth: SMP: derive legacy responder STK authentication from MITM state8.8 Highkgraft-patch-SLE12-SP5_Update_85SUSEnet: ipv6: flowlabel: defer exclusive option free until RCU teardown7.8 Highkgraft-patch-SLE12-SP5_Update_85SUSEcrypto: af_alg - limit RX SG extraction by receive buffer budget5.5 Mediumkgraft-patch-SLE12-SP5_Update_85SUSEnet: rfkill: prevent unlimited numbers of rfkill events from being created5.5 Mediumkgraft-patch-SLE12-SP5_Update_85SUSEKVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock5.5 Mediumkgraft-patch-SLE12-SP5_Update_85SUSEbcache: fix cached_dev.sb_bio use-after-free and crash7.8 Highkgraft-patch-SLE12-SP5_Update_85SUSEteam: fix header_ops type confusion with non-Ethernet ports7.8 Highkgraft-patch-SLE12-SP5_Update_85SUSEBluetooth: L2CAP: Fix deadlock in l2cap_conn_del()5.5 Mediumkgraft-patch-SLE12-SP5_Update_85SUSEdrm/amdgpu: prevent immediate PASID reuse case5.5 Mediumkgraft-patch-SLE12-SP5_Update_85SUSEbonding: prevent potential infinite loop in bond_header_parse()7.5 Highkgraft-patch-SLE12-SP5_Update_85SUSEnet: add proper RCU protection to /proc/net/ptype5.5 Mediumkgraft-patch-SLE12-SP5_Update_85SUSEnet: ipv4: fix one memleak in __inet_del_ifa()6.8 Medium