kgraft-patch-SLE12-SP5_Update_87 vulnerabilities (SUSE)
239 vulnerabilities.
kgraft-patch-SLE12-SP5_Update_87SUSEpower: supply: core: fix supplied_from allocations9.8 Criticalkgraft-patch-SLE12-SP5_Update_87SUSEnet: mana: initialize gdma queue id to INVALID_QUEUE_IDNo scorekgraft-patch-SLE12-SP5_Update_87SUSEALSA: seq: avoid stale FIFO cells during resize5.7 Mediumkgraft-patch-SLE12-SP5_Update_87SUSEtipc: fix UAF in tipc_l2_send_msg()9.8 Criticalkgraft-patch-SLE12-SP5_Update_87SUSEtcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)7.5 Highkgraft-patch-SLE12-SP5_Update_87SUSEPCI: Check ROM header and data structure addr before accessing7.7 Highkgraft-patch-SLE12-SP5_Update_87SUSExprtrdma: Fix bcall rep leak and unbounded peek9.8 Criticalkgraft-patch-SLE12-SP5_Update_87SUSExfrm: validate selector family and prefixlen during match7.8 Highkgraft-patch-SLE12-SP5_Update_87SUSEipv4: fib: Don't ignore error route in local/main tables.10.0 Criticalkgraft-patch-SLE12-SP5_Update_87SUSEbridge: stp: Fix a potential use-after-free when deleting a bridge7.8 Highkgraft-patch-SLE12-SP5_Update_87SUSEqede: fix off-by-one in BD ring consumption on build_skb failure9.8 Criticalkgraft-patch-SLE12-SP5_Update_87SUSEipv4: igmp: Fix potential UAF in igmp_gq_start_timer()9.8 Criticalkgraft-patch-SLE12-SP5_Update_87SUSEnet: atm: reject out-of-range traffic classes in QoS validation7.1 Highkgraft-patch-SLE12-SP5_Update_87SUSEnet: ife: require ETH_HLEN to be pullable in ife_decode()9.1 Criticalkgraft-patch-SLE12-SP5_Update_87SUSEKVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs7.1 Highkgraft-patch-SLE12-SP5_Update_87SUSEKVM: Move kvm_io_bus_get_dev() locking responsibilities to callers7.8 Highkgraft-patch-SLE12-SP5_Update_87SUSEnetfilter: nf_nat_sip: reload possible stale data pointer9.8 Criticalkgraft-patch-SLE12-SP5_Update_87SUSEocfs2: avoid moving extents to occupied clusters7.8 Highkgraft-patch-SLE12-SP5_Update_87SUSEi2c: imx: fix locked bus on SMBus block-read of 0 (atomic)No scorekgraft-patch-SLE12-SP5_Update_87SUSExen/gntdev: fix error handling in ioctlNo scorekgraft-patch-SLE12-SP5_Update_87SUSEtpm: Make the TPM character devices non-seekable7.8 Highkgraft-patch-SLE12-SP5_Update_87SUSEdm thin metadata: fix metadata snapshot consistency on commit failure7.8 Highkgraft-patch-SLE12-SP5_Update_87SUSEscsi: xen: scsiback: Free the command tag on the TMR submit-failure path2.1 Lowkgraft-patch-SLE12-SP5_Update_87SUSEscsi: target: Bound PR-OUT TransportID parsing to the received buffer9.8 Criticalkgraft-patch-SLE12-SP5_Update_87SUSEscsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE9.8 Criticalkgraft-patch-SLE12-SP5_Update_87SUSEnet/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked7.8 Highkgraft-patch-SLE12-SP5_Update_87SUSEipvs: reset full ip_vs_seq structs in ip_vs_conn_new9.8 Criticalkgraft-patch-SLE12-SP5_Update_87SUSEnet: macb: drop in-flight Tx SKBs on close5.6 Mediumkgraft-patch-SLE12-SP5_Update_87SUSEbtrfs: free mapping node on duplicate reloc root insertNo scorekgraft-patch-SLE12-SP5_Update_87SUSElibceph: bound get_version reply decode to front len8.6 Highkgraft-patch-SLE12-SP5_Update_87SUSEvxlan: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkgraft-patch-SLE12-SP5_Update_87SUSEKVM: x86/mmu: Fix use-after-free on vendor module reloadNo scorekgraft-patch-SLE12-SP5_Update_87SUSExfrm: fix stale skb->prev after async crypto steals a GSO segment9.8 Criticalkgraft-patch-SLE12-SP5_Update_87SUSEIB/mad: Drop unmatched RMPP responses before reassembly7.1 Highkgraft-patch-SLE12-SP5_Update_87SUSEwifi: libertas: fix memory leak in helper_firmware_cb()2.4 Lowkgraft-patch-SLE12-SP5_Update_87SUSEwifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lockNo scorekgraft-patch-SLE12-SP5_Update_87SUSEppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF7.8 Highkgraft-patch-SLE12-SP5_Update_87SUSEnet/iucv: take a reference on the socket found in afiucv_hs_rcv()8.8 Highkgraft-patch-SLE12-SP5_Update_87SUSEwifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request4.1 Mediumkgraft-patch-SLE12-SP5_Update_87SUSEwatchdog: pretimeout: Fix UAF in watchdog_unregister_governor()9.8 Criticalkgraft-patch-SLE12-SP5_Update_87SUSEwifi: carl9170: bound memcpy length in cmd callback to prevent OOB read5.4 Mediumkgraft-patch-SLE12-SP5_Update_87SUSEwifi: carl9170: fix buffer overflow in rx_stream failover path7.0 Highkgraft-patch-SLE12-SP5_Update_87SUSEnet/packet: avoid fanout hook re-registration after unregister7.8 Highkgraft-patch-SLE12-SP5_Update_87SUSEiommu/amd: Wait for completion instead of returning early in iommu_completion_wait()8.8 Highkgraft-patch-SLE12-SP5_Update_87SUSEnfp: Check resource mutex allocation5.7 Mediumkgraft-patch-SLE12-SP5_Update_87SUSEiommu/amd: Bound the early ACPI HID mapNo scorekgraft-patch-SLE12-SP5_Update_87SUSEsctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid7.3 Highkgraft-patch-SLE12-SP5_Update_87SUSEsctp: validate stream count in sctp_process_strreset_inreq()7.5 Highkgraft-patch-SLE12-SP5_Update_87SUSEtipc: fix infinite loop in __tipc_nl_compat_dumpit6.8 Mediumkgraft-patch-SLE12-SP5_Update_87SUSEsctp: auth: verify auth requirement when auth_chunk is NULL9.8 Critical- Show moreLoading…