kgraft-patch-SLE12-SP5_Update_88 vulnerabilities (SUSE)
229 vulnerabilities.
kgraft-patch-SLE12-SP5_Update_88SUSEip6_tunnel: clear skb2->cb[] in ip6ip6_err()9.8 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEima: Instantiate file_truncate and path_truncate hooks8.1 Highkgraft-patch-SLE12-SP5_Update_88SUSEbpf, sockmap: Fix sk_redir use-after-free in send verdict8.4 Highkgraft-patch-SLE12-SP5_Update_88SUSEsctp: keep chunk->transport in step with the list it is queued on9.8 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEsctp: clear new_transport when removing a peer9.8 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEthunderbolt: Bound the DROM dual link port number before indexing sw->ports7.0 Highkgraft-patch-SLE12-SP5_Update_88SUSEBluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp8.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEaudit: fix potential use-after-free in audit_del_rule()7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output()7.0 Highkgraft-patch-SLE12-SP5_Update_88SUSEALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set7.3 Highkgraft-patch-SLE12-SP5_Update_88SUSEALSA: usb-audio: Clamp frame size in implicit-feedback mode8.4 Highkgraft-patch-SLE12-SP5_Update_88SUSEbinfmt_misc: reject a flag character as the field delimiter7.1 Highkgraft-patch-SLE12-SP5_Update_88SUSEnet: bridge: stop fast-leave after deleting a port group9.8 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEvxlan: use neigh_ha_snapshot() in route_shortcircuit()10.0 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEvxlan: use pskb_network_may_pull() for transmit path header pulls9.8 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEvxlan: use pskb_network_may_pull() in route_shortcircuit()9.8 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEtracing: Check return value of __register_event() in trace_module_add_events()7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEsctp: prevent peer transport count overflow8.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEnet: openvswitch: fix skb leak on flow key update failure during ct6.8 Mediumkgraft-patch-SLE12-SP5_Update_88SUSEdrm/vc4: Zero the tile state data array before each BIN job7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEdrm/vmwgfx: validate DRAW_PRIMITIVES header size before division7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEdrm/vmwgfx: bound DMA command body size against suffix pointer8.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEfbcon: fix NULL pointer dereference for a console without vc_dataNo scorekgraft-patch-SLE12-SP5_Update_88SUSEipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD9.8 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEnvmet-tcp: fix page fragment cache leak in error path8.2 Highkgraft-patch-SLE12-SP5_Update_88SUSEnvme-multipath: fix flex array size in struct nvme_ns_head9.8 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEconfigfs_lookup(): don't leave ->s_dentry dangling on failure7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEocfs2: reject FITRIM ranges shorter than a cluster7.1 Highkgraft-patch-SLE12-SP5_Update_88SUSEconfigfs: fix lockless traversals of ->s_children7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEixgbe: do not configure xps for XDP queues7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEext4: validate donor file superblock early in EXT4_IOC_MOVE_EXTNo scorekgraft-patch-SLE12-SP5_Update_88SUSEnet/sched: cls_flow: Dont expose folded kernel pointers4.8 Mediumkgraft-patch-SLE12-SP5_Update_88SUSEipv4: fib: Don't dump dying fib_info in fib_leaf_notify().7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEnet: fib_rules: Don't dump dying fib_rule in fib_rules_dump().7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEnet/sched: sch_hfsc: Don't make class passive twice4.8 Mediumkgraft-patch-SLE12-SP5_Update_88SUSEtipc: require net admin for TIPCv2 netlink mutators7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEtipc: prevent snt_unacked underflow on CONN_ACK7.5 Highkgraft-patch-SLE12-SP5_Update_88SUSEspi: xilinx: use FIFO occupancy register to determine buffer size6.7 Mediumkgraft-patch-SLE12-SP5_Update_88SUSEtcp: clear sock_ops cb flags before force-closing a child socket9.8 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEnet/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen9.8 Criticalkgraft-patch-SLE12-SP5_Update_88SUSExfrm: Fix dev use-after-free in xfrm async resumption9.8 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEsctp: hold socket lock when dumping endpoints in sctp_diag2.0 Lowkgraft-patch-SLE12-SP5_Update_88SUSEflow_dissector: check device type before reading ETH_ADDRS7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEnetfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types9.8 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEnetfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEsctp: fix err_chunk memory leaks in INIT handling8.7 Highkgraft-patch-SLE12-SP5_Update_88SUSEnet: sungem: fix probe error cleanup7.8 Highkgraft-patch-SLE12-SP5_Update_88SUSEsctp: add INIT verification after cookie unpacking9.8 Criticalkgraft-patch-SLE12-SP5_Update_88SUSEipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump5.7 Mediumkgraft-patch-SLE12-SP5_Update_88SUSEsctp: fix addr_wq_timer race in sctp_free_addr_wq()7.8 High- Show moreLoading…