kgraft-patch-SLE12-SP5_Update_88 vulnerabilities (SUSE)
229 vulnerabilities.
kgraft-patch-SLE12-SP5_Update_88SUSEgue: validate REMCSUM private option length9.8 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEnetfilter: xt_u32: reject invalid shift counts7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEnetfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()6.3 Mediumkgraft-patch-SLE12-SP5_Update_88SUSEnetfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop9.1 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEipv6: mcast: Fix potential UAF in MLD delayed work9.8 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer()5.7 Mediumkgraft-patch-SLE12-SP5_Update_88SUSEnetfilter: xt_cluster: reject template conntracks in hash match4.8 Mediumkgraft-patch-SLE12-SP5_Update_88SUSEselinux: check connect-related permissions on TCP Fast Open8.4 Highkgraft-patch-SLE12-SP5_Update_88SUSEnvdimm/btt: Free arenas on btt_init() error pathsNo scorekgraft-patch-SLE12-SP5_Update_88SUSEnet/9p: fix infinite loop in p9_client_rpc on fatal signalNo scorekgraft-patch-SLE12-SP5_Update_88SUSEocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits5.7 Mediumkgraft-patch-SLE12-SP5_Update_88SUSEnet: thunderbolt: Fix frags[] overflow by bounding frame_count8.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEnvmet-rdma: handle inline data with a nonzero offset9.8 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEdm era: fix out-of-bounds memory access for non-zero start sector8.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEdm-ioctl: fix a possible overflow in list_version_get_info9.8 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEdm-verity: fix buffer overflow in FEC calculation9.8 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEcpu: hotplug: Bound hotplug states sysfs output7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEnet: sit: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEnet: ip_vti: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEnet: ipip: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEnet: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEnet: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink8.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEs390/monwriter: Reject buffer reuse with different data lengthNo scorekgraft-patch-SLE12-SP5_Update_88SUSEmacsec: don't read an unset MAC header in macsec_encrypt()7.3 Highkgraft-patch-SLE12-SP5_Update_88SUSEBluetooth: btrtl: validate firmware patch bounds7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEipvs: fix more places with wrong ipv6 transport offsets9.8 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEdrm/vc4: Prevent shader BO mappings from becoming writable7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEnet/sched: act_tunnel_key: Defer dst_release to RCU callback7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEsctp: fix auth_hmacs array size in struct sctp_cookie8.1 Highkgraft-patch-SLE12-SP5_Update_88SUSEUSB: serial: io_edgeport: cap received transmit credits7.0 Highkgraft-patch-SLE12-SP5_Update_88SUSEwifi: carl9170: fix OOB read from off-by-two in TX status handler2.4 Lowkgraft-patch-SLE12-SP5_Update_88SUSEsmb: client: validate DFS referral PathConsumed9.1 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEcdrom: fix stack out-of-bounds read in CDROMVOLCTRL0.0 Nonekgraft-patch-SLE12-SP5_Update_88SUSEsctp: avoid auth_enable sysctl UAF during netns teardown7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEdrm/amdgpu/vce: fix integer overflow in image size8.8 Highkgraft-patch-SLE12-SP5_Update_88SUSExfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEusbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()8.1 Highkgraft-patch-SLE12-SP5_Update_88SUSEiio: event: Fix event FIFO reset race7.1 Highkgraft-patch-SLE12-SP5_Update_88SUSEsmb: client: restrict implied bcc[0] exemption to responses without data area8.2 Highkgraft-patch-SLE12-SP5_Update_88SUSEsmb/client: fix chown/chgrp with SMB3 POSIX Extensions7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEwriteback: fix race between cgroup_writeback_umount() and inode_switch_wbs()7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEproc: protect ptrace_may_access() with exec_update_lock (FD links)7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEcpufreq: Fix hotplug-suspend race during reboot4.7 Mediumkgraft-patch-SLE12-SP5_Update_88SUSEcpufreq: pcc: fix use-after-free and double free in _OSC evaluation7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEusb: free iso schedules on failed submit7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEUSB: iowarrior: fix use-after-free on disconnect7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEnvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page9.1 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEtracing: Prevent out-of-bounds read in glob matching7.1 Highkgraft-patch-SLE12-SP5_Update_88SUSEi2c: core: fix adapter deregistration race7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEi2c: stub: Reject I2C block transfers with invalid length7.8 High- Show moreLoading…