kgraft-patch-SLE12-SP5_Update_88 vulnerabilities (SUSE)
229 vulnerabilities.
kgraft-patch-SLE12-SP5_Update_88SUSEKVM: x86/mmu: Check write tracking in all address spaces7.1 Highkgraft-patch-SLE12-SP5_Update_88SUSERDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters9.8 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEbtrfs: do not force reloc root creation during qgroup_account_snapshot()5.5 Mediumkgraft-patch-SLE12-SP5_Update_88SUSEipv6: fix fib6 walker UAF on seq stop7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEsmb: client: avoid leaking refcount in cifs_queue_oplock_break()7.5 Highkgraft-patch-SLE12-SP5_Update_88SUSEsmb: client: fix races in cifsd thread creationNo scorekgraft-patch-SLE12-SP5_Update_88SUSEsmb/client: flush dirty data before punching a hole4.8 Mediumkgraft-patch-SLE12-SP5_Update_88SUSEvhost-scsi: flush backend after device ioctls7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSERDMA/efa: Fix PBL chunk length computationNo scorekgraft-patch-SLE12-SP5_Update_88SUSERDMA/ipoib: Drain RCU callbacks during module teardownNo scorekgraft-patch-SLE12-SP5_Update_88SUSERDMA/rvt: Return NULL after port allocation failure9.8 Criticalkgraft-patch-SLE12-SP5_Update_88SUSERDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[]7.1 Highkgraft-patch-SLE12-SP5_Update_88SUSERDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry()7.3 Highkgraft-patch-SLE12-SP5_Update_88SUSERDMA/cxgb4: free STAG index when TPT entry write failsNo scorekgraft-patch-SLE12-SP5_Update_88SUSEIB/isert: reject PDUs declaring more data than was received9.1 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEIB/isert: reject login PDUs declaring more data than was received9.1 Criticalkgraft-patch-SLE12-SP5_Update_88SUSERDMA/srp: fix heap information leak on a truncated SRP_CRED_REQNo scorekgraft-patch-SLE12-SP5_Update_88SUSEIB/isert: delay the final Login Response until the session is registered7.5 Highkgraft-patch-SLE12-SP5_Update_88SUSEIB/isert: post the full-feature receive buffers after session registration7.5 Highkgraft-patch-SLE12-SP5_Update_88SUSEbtrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data()2.0 Lowkgraft-patch-SLE12-SP5_Update_88SUSEnfc: llcp: bound SNL TLV parsing to the skb and add length checks7.1 Highkgraft-patch-SLE12-SP5_Update_88SUSESquashfs: check block offset is not negative7.1 Highkgraft-patch-SLE12-SP5_Update_88SUSENFSv4: remove callback IDR entry on client allocation failure9.8 Criticalkgraft-patch-SLE12-SP5_Update_88SUSENFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers7.5 Highkgraft-patch-SLE12-SP5_Update_88SUSENFSv4.1: zero referring call lists before decoding9.8 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEBluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loopNo scorekgraft-patch-SLE12-SP5_Update_88SUSEnvmet-tcp: reject unsolicited H2CData PDUs7.5 Highkgraft-patch-SLE12-SP5_Update_88SUSEKVM: nVMX: Service local TLB flushes on failed nested VM-Enter9.3 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEKVM: nVM: Ensure INVVPID is emulated on the correct physical CPU8.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEKVM: x86: hyper-v: Clamp stimer deadline to avoid livelock7.1 Highkgraft-patch-SLE12-SP5_Update_88SUSEmedia: zoran: Avoid freeing a registered video_device twice7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEgtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSESUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6No scorekgraft-patch-SLE12-SP5_Update_88SUSEmm: memcg: stop reclaim when a limit update is superseded5.7 Mediumkgraft-patch-SLE12-SP5_Update_88SUSEnfsd: release path refs on follow_down() error7.5 Highkgraft-patch-SLE12-SP5_Update_88SUSEnfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke9.8 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEnfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget9.8 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEnfsd: fix XDR padding calculation in ff_encode_getdeviceinfo5.3 Mediumkgraft-patch-SLE12-SP5_Update_88SUSENFSD: Prevent lock owner use-after-free during client teardown9.8 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEbtrfs: fix extent map leak in NOCOW direct I/O write5.7 Mediumkgraft-patch-SLE12-SP5_Update_88SUSEbpf: Disable preemption in __bpf_get_stack7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEBluetooth: RFCOMM: serialize security confirmation handling8.8 Highkgraft-patch-SLE12-SP5_Update_88SUSESUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow9.8 Criticalkgraft-patch-SLE12-SP5_Update_88SUSESUNRPC: always drain cache_cleaner before destroying a cache_detail7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSESUNRPC: fix gssx_dec_option_array error path bugs7.5 Highkgraft-patch-SLE12-SP5_Update_88SUSEsunrpc: init gssp_lock before publishing proc entry7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSESUNRPC: reject duplicate CREDS_VALUE optionsNo scorekgraft-patch-SLE12-SP5_Update_88SUSESUNRPC: Reject krb5 v2 wrap tokens with oversized ec field9.8 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEsvcrdma: Reject connection when transport allocation fails8.2 Highkgraft-patch-SLE12-SP5_Update_88SUSEwifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets8.1 High- Show olderLoading…