kgraft-patch-SLE12-SP5_Update_87 vulnerabilities (SUSE)
239 vulnerabilities.
kgraft-patch-SLE12-SP5_Update_87SUSEnet/sched: act_api: use RCU with deferred freeing for action lifecycle7.8 Highkgraft-patch-SLE12-SP5_Update_87SUSEnetlabel: validate unlabeled address and mask attribute lengths5.5 Mediumkgraft-patch-SLE12-SP5_Update_87SUSEipv6: sit: reload inner IPv6 header after GSO offloads9.8 Criticalkgraft-patch-SLE12-SP5_Update_87SUSEnet: guard timestamp cmsgs to real error queue skbs7.1 Highkgraft-patch-SLE12-SP5_Update_87SUSEnetfilter: revalidate bridge ports5.5 Mediumkgraft-patch-SLE12-SP5_Update_87SUSEnetfilter: x_tables: avoid leaking percpu counter pointers5.5 Mediumkgraft-patch-SLE12-SP5_Update_87SUSElocking/rtmutex: Skip remove_waiter() when waiter is not enqueued5.5 Mediumkgraft-patch-SLE12-SP5_Update_87SUSEthunderbolt: Bound root directory content to block size7.1 Highkgraft-patch-SLE12-SP5_Update_87SUSEnet: pull headers in qdisc_pkt_len_segs_init()8.4 Highkgraft-patch-SLE12-SP5_Update_87SUSEbpf: Fix use-after-free in offloaded map/prog info fill7.8 Highkgraft-patch-SLE12-SP5_Update_87SUSEnet/rds: Restrict use of RDS/IB to the initial network namespace7.8 Highkgraft-patch-SLE12-SP5_Update_87SUSEdm cache: fix dirty mapping checking in passthrough mode switching5.5 Mediumkgraft-patch-SLE12-SP5_Update_87SUSEdm log: fix out-of-bounds write due to region_count overflow7.8 Highkgraft-patch-SLE12-SP5_Update_87SUSEnetfilter: xtables: restrict several matches to inet family5.5 Mediumkgraft-patch-SLE12-SP5_Update_87SUSEfs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling7.5 Highkgraft-patch-SLE12-SP5_Update_87SUSEnet/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion5.5 Mediumkgraft-patch-SLE12-SP5_Update_87SUSEvrf: Fix a potential NPD when removing a port from a VRF5.5 Mediumkgraft-patch-SLE12-SP5_Update_87SUSEnetfilter: xt_policy: fix strict mode inbound policy matching8.3 Highkgraft-patch-SLE12-SP5_Update_87SUSEnetfilter: nf_queue: hold bridge skb->dev while queued7.8 Highkgraft-patch-SLE12-SP5_Update_87SUSEipmi: Check event message buffer response for bad data5.5 Mediumkgraft-patch-SLE12-SP5_Update_87SUSEipmi:si: Return state to normal if message allocation fails5.5 Mediumkgraft-patch-SLE12-SP5_Update_87SUSEdm-thin: fix metadata refcount underflow7.8 Highkgraft-patch-SLE12-SP5_Update_87SUSEmd/raid5: validate payload size before accessing journal metadata7.1 Highkgraft-patch-SLE12-SP5_Update_87SUSEtpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure5.5 Mediumkgraft-patch-SLE12-SP5_Update_87SUSEpowerpc, perf: Check that current->mm is alive before getting user callchain5.5 Mediumkgraft-patch-SLE12-SP5_Update_87SUSEx86/apic: Disable x2apic on resume if the kernel expects so5.5 Mediumkgraft-patch-SLE12-SP5_Update_87SUSEAPEI/GHES: ensure that won't go past CPER allocated record5.5 Mediumkgraft-patch-SLE12-SP5_Update_87SUSEmedia: cx88: Add missing unmap in snd_cx88_hw_params()5.5 Mediumkgraft-patch-SLE12-SP5_Update_87SUSEBluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ8.1 Highkgraft-patch-SLE12-SP5_Update_87SUSEdlm: validate length in dlm_search_rsb_tree9.8 Criticalkgraft-patch-SLE12-SP5_Update_87SUSEnetfilter: ctnetlink: ensure safe access to master conntrack7.8 Highkgraft-patch-SLE12-SP5_Update_87SUSEs390/syscalls: Add spectre boundary for syscall dispatch table5.5 Mediumkgraft-patch-SLE12-SP5_Update_87SUSEACPI: processor: Fix previous acpi_processor_errata_piix4() fix5.5 Mediumkgraft-patch-SLE12-SP5_Update_87SUSEip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()7.5 Highkgraft-patch-SLE12-SP5_Update_87SUSEtimers: Fix NULL function pointer race in timer_shutdown_sync()4.7 Mediumkgraft-patch-SLE12-SP5_Update_87SUSEdrm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE7.8 Highkgraft-patch-SLE12-SP5_Update_87SUSEcrypto: af_alg - Fix incorrect boolean values in af_alg_ctx4.8 Mediumkgraft-patch-SLE12-SP5_Update_87SUSEcrypto: af_alg - Disallow concurrent writes in af_alg_sendmsg7.8 Highkgraft-patch-SLE12-SP5_Update_87SUSEgeneve: fix header validation in geneve[6]_xmit_skb5.5 Medium