podman vulnerabilities (SUSE)
552 vulnerabilities.
podmanSUSEocfs2: reject FITRIM ranges shorter than a cluster7.1 HighpodmanSUSERDMA/irdma: Fix OOB read during CQ MR registration4.8 MediumpodmanSUSEconfigfs: fix lockless traversals of ->s_children7.8 HighpodmanSUSEixgbe: do not configure xps for XDP queues7.8 HighpodmanSUSEvduse: hold vduse_lock across IDR lookup in open path8.8 HighpodmanSUSEvhost/net: complete zerocopy ubufs only once9.3 CriticalpodmanSUSEext4: fix kernel BUG in ext4_write_inline_data_end6.8 MediumpodmanSUSEext4: validate donor file superblock early in EXT4_IOC_MOVE_EXTNo scorepodmanSUSEBluetooth: hci_core: Fix UAF in hci_unregister_dev()7.8 HighpodmanSUSEnet/sched: cls_flow: Dont expose folded kernel pointers4.8 MediumpodmanSUSEipv4: fib: Don't dump dying fib_info in fib_leaf_notify().7.8 HighpodmanSUSEnet: fib_rules: Don't dump dying fib_rule in fib_rules_dump().7.8 HighpodmanSUSEnet/sched: sch_hfsc: Don't make class passive twice4.8 MediumpodmanSUSEtipc: require net admin for TIPCv2 netlink mutators7.8 HighpodmanSUSEtipc: prevent snt_unacked underflow on CONN_ACK7.5 HighpodmanSUSEtipc: reject inverted service ranges from peer bindings7.5 HighpodmanSUSEALSA: seq: Fix kernel heap address leak in bounce_error_event()4.8 MediumpodmanSUSEhandshake: Require admin permission for DONE command7.8 HighpodmanSUSEtcp: clear sock_ops cb flags before force-closing a child socket9.8 CriticalpodmanSUSEnet/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen9.8 CriticalpodmanSUSEALSA: seq: avoid stale FIFO cells during resize5.7 MediumpodmanSUSEbpf: Guard __get_user acesss with access_ok for uprobe_multi data7.8 HighpodmanSUSEsockmap: Fix use-after-free in udp_bpf_recvmsg()7.8 HighpodmanSUSEbpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check8.4 HighpodmanSUSEtipc: fix UAF in tipc_l2_send_msg()9.8 CriticalpodmanSUSEsoundwire: fix bug in sdw_add_element_group_count found by syzkaller7.8 HighpodmanSUSEPCI: Check ROM header and data structure addr before accessing7.7 HighpodmanSUSEapparmor: check label build before no_new_privs test7.1 HighpodmanSUSEapparmor: aa_label_alloc use aa_label_free on alloc failure7.8 HighpodmanSUSExfrm: validate selector family and prefixlen during match7.8 HighpodmanSUSEdrm/amdkfd: fix list_del corruption in kfd_criu_resume_svm7.8 HighpodmanSUSEocteontx2-pf: Fix leak of SQ timestamp buffer on teardownNo scorepodmanSUSEsctp: hold socket lock when dumping endpoints in sctp_diag2.0 LowpodmanSUSEflow_dissector: check device type before reading ETH_ADDRS7.8 HighpodmanSUSEmd/raid1: fix writes_pending and barrier reference leaks on write failures7.1 HighpodmanSUSEmd/raid10: fix writes_pending leak on write request failures2.0 LowpodmanSUSEmd/raid10: fix writes_pending and barrier reference leaks on discard failures7.5 HighpodmanSUSEmd/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retryNo scorepodmanSUSEnetfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types9.8 CriticalpodmanSUSEnetfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()7.8 HighpodmanSUSEnetfilter: ipset: make sure gc is properly stopped7.8 HighpodmanSUSEnetfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leakNo scorepodmanSUSEice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()7.1 HighpodmanSUSEipv4: fib: Don't ignore error route in local/main tables.10.0 CriticalpodmanSUSEsctp: fix err_chunk memory leaks in INIT handling8.7 HighpodmanSUSEnet: sungem: fix probe error cleanup7.8 HighpodmanSUSEtipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()7.8 HighpodmanSUSEnet: enetc: check the number of BDs needed for xdp_frame9.8 CriticalpodmanSUSEsctp: add INIT verification after cookie unpacking9.8 CriticalpodmanSUSEipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump5.7 Medium- Show moreLoading…