podman vulnerabilities (SUSE)
552 vulnerabilities.
podmanSUSEnet: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink8.8 HighpodmanSUSEnet: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink8.8 HighpodmanSUSEocteontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF8.8 HighpodmanSUSEs390/monwriter: Reject buffer reuse with different data lengthNo scorepodmanSUSEocteontx2-pf: fix SQB pointer leak on init failureNo scorepodmanSUSEmacsec: don't read an unset MAC header in macsec_encrypt()7.3 HighpodmanSUSEnet: macb: drop in-flight Tx SKBs on close5.6 MediumpodmanSUSEtracing/osnoise: Call synchronize_rcu() when unregistering7.8 HighpodmanSUSEipvs: fix more places with wrong ipv6 transport offsets9.8 CriticalpodmanSUSEwifi: ieee80211: validate MLE common info length8.8 HighpodmanSUSEKVM: s390: pci: Fix handling of AIF enable without AISB8.8 HighpodmanSUSEs390/zcrypt: Validate length for CCA AES cipher key requests7.8 HighpodmanSUSEs390/zcrypt: Validate length for CCA ECC private key requests7.8 HighpodmanSUSEovl: check access to copy_file_range source with src mounter creds2.0 LowpodmanSUSEdrm/vc4: Prevent shader BO mappings from becoming writable7.8 HighpodmanSUSEnet/sched: Handle TC_ACT_REDIRECT from qdisc filter chains1.8 LowpodmanSUSEsctp: fix auth_hmacs array size in struct sctp_cookie8.1 HighpodmanSUSEnet/packet: avoid fanout hook re-registration after unregister7.8 HighpodmanSUSEnet: qrtr: restrict socket creation to the initial network namespace8.8 HighpodmanSUSErds: tcp: unregister sysctl before tearing down listen socket7.8 HighpodmanSUSEdrm/amdgpu: Fix context pstate override handling7.8 HighpodmanSUSEdrm/amdkfd: Check bounds on CRIU restore queue type and mqd size7.1 HighpodmanSUSEdrm/i915/hdcp: check streams[] bounds before overflow7.8 HighpodmanSUSEwifi: ath6kl: fix use-after-free in aggr_reset_state()8.8 HighpodmanSUSEsctp: avoid auth_enable sysctl UAF during netns teardown7.8 HighpodmanSUSEfscrypt: Add missing superblock check in find_or_insert_direct_key()7.8 HighpodmanSUSEftrace: Add global mutex to serialize trace_parser accessNo scorepodmanSUSEnet/af_iucv: fix NULL deref in afiucv_hs_callback_syn()7.5 HighpodmanSUSEaudit: fix recursive locking deadlock in audit_dupe_exe()7.5 HighpodmanSUSEi2c: core: fix NULL-deref on adapter registration failure4.1 MediumpodmanSUSExfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()7.8 HighpodmanSUSExfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert5.7 MediumpodmanSUSEwifi: mac80211: fix fils_discovery double free on alloc failure7.8 HighpodmanSUSEperf/core: Detach event groups during remove_on_exec7.8 HighpodmanSUSEipv6: ndisc: fix NULL deref in accept_untracked_na()5.7 MediumpodmanSUSEtty: serial: samsung: Remove redundant port lock acquisition in rx helpers6.7 MediumpodmanSUSEx86/bugs: Enable IBPB flush on BPF JIT allocation5.5 MediumpodmanSUSEvfio/pci: Latch disable_idle_d3 per device5.5 MediumpodmanSUSEvfio/pci: Release the VGA arbiter client on register_device() failure8.8 HighpodmanSUSEvfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc5.5 MediumpodmanSUSEio_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item5.5 MediumpodmanSUSEBluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()5.5 MediumpodmanSUSEcoresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()7.8 HighpodmanSUSEcpufreq: Fix hotplug-suspend race during reboot4.7 MediumpodmanSUSEcpufreq: pcc: fix use-after-free and double free in _OSC evaluation7.8 HighpodmanSUSEnvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page9.1 CriticalpodmanSUSEnvmet-auth: validate reply message payload bounds against transfer length9.1 CriticalpodmanSUSEtracing: Prevent out-of-bounds read in glob matching7.1 HighpodmanSUSEmodule: decompress: check return value of module_extend_max_pages()5.5 MediumpodmanSUSEKVM: guest_memfd: Treat memslot binding offset+size as unsigned values7.0 High- Show moreLoading…