podman vulnerabilities (SUSE)
552 vulnerabilities.
podmanSUSEdrm/amdgpu: Fix UVD decode image min size calculation7.8 HighpodmanSUSEsctp: validate cookie AUTH state before use9.8 CriticalpodmanSUSEipvlan: inherit needed_headroom and needed_tailroom from phy_dev9.8 CriticalpodmanSUSEmacvlan: inherit needed_headroom and needed_tailroom from lowerdev9.8 CriticalpodmanSUSEnet/sched: cls_u32: skip hash tables in u32_bind_class()7.8 HighpodmanSUSEnet: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG9.8 CriticalpodmanSUSEl2tp: fix tunnel and session refcount leak on seq_file release6.8 MediumpodmanSUSEbonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor7.3 HighpodmanSUSEenic: fix tx_hang_reset use-after-free on device removal7.8 HighpodmanSUSEnet/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()8.2 HighpodmanSUSEdevlink: fix net namespace reference leak in reload6.7 MediumpodmanSUSEvhost_iotlb: bound map allocation in add_range7.1 HighpodmanSUSExsk: require at least 16 bytes of TX metadata7.8 HighpodmanSUSEudp: fix potential use-after-free in tunnel segmentation10.0 CriticalpodmanSUSEnet/openvswitch: check Ethernet header length in key_extract()7.8 HighpodmanSUSEnet/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers7.8 HighpodmanSUSEbnxt_en: Disable EOP for TPA on all chips to prevent data corruption8.2 HighpodmanSUSEtcp: fix TFO max_qlen accounting across reuseport migration7.5 HighpodmanSUSEnet/atm: fix slab-out-of-bounds read in vcc_setsockopt()7.1 HighpodmanSUSEsctp: clear control chunk transport if it is being removed9.8 CriticalpodmanSUSEima: fix out-of-bounds read in xattr_verify()5.3 MediumpodmanSUSEnet/packet: reset the MAC header on the packet-socket transmit path7.8 HighpodmanSUSEpacket: synchronize pressure clearing with ring reconfiguration7.8 HighpodmanSUSEnet/sched: reject overly deep qdisc hierarchies7.8 HighpodmanSUSEnetfilter: ebt_nflog: pin the NFLOG backend7.8 HighpodmanSUSEnet: bridge: mrp: fix uninitialised bytes on the wire4.8 MediumpodmanSUSEdrm/v3d: Serialize the scheduler timeout handlers5.7 MediumpodmanSUSEperf/core: Fix group leader use-after-free after sibling detach7.8 HighpodmanSUSEtracing: Fix race between update_event_fields and, event_define_fields10.0 CriticalpodmanSUSEmm/huge_memory: fix huge_zero_pfn race7.8 HighpodmanSUSEnet: smc: fix splice entry lifetime imbalance in smc_rx_splice8.4 HighpodmanSUSEipv6: prevent in6_dev_get() from resurrecting inet6_dev7.8 HighpodmanSUSEnetfilter: bridge: release template ct on non-IP path7.5 HighpodmanSUSEnet: atlantic: free RX pages of consumed but not refilled buffers6.7 MediumpodmanSUSExdp: reject clones that overrun skb_shared_info tailroom9.8 CriticalpodmanSUSEvxlan: do not arm the ageing timer on a device that is down8.8 HighpodmanSUSEveth: fix skb length accounting after XDP frag adjustment10.0 CriticalpodmanSUSEtipc: read le->link under the node lock in tipc_node_link_down()7.8 HighpodmanSUSEsmb: client: Fix use-after-free in cifs_try_adding_channels()9.8 CriticalpodmanSUSEptp: ocp: Fix board ID over-read7.1 HighpodmanSUSEring-buffer: Use current_context for safe per-CPU buffer swap7.8 HighpodmanSUSEmm/page_table_check: skip special zero mappings5.7 MediumpodmanSUSEipv6: fix Route Information option length validation7.5 HighpodmanSUSEip6_tunnel: clear skb2->cb[] in ip6ip6_err()9.8 CriticalpodmanSUSEfscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()7.8 HighpodmanSUSEsched/psi: Shut down rtpoll_timer in psi_cgroup_free()7.8 HighpodmanSUSEima: Instantiate file_truncate and path_truncate hooks8.1 HighpodmanSUSEbpf, sockmap: Fix sk_redir use-after-free in send verdict8.4 HighpodmanSUSEsctp: keep chunk->transport in step with the list it is queued on9.8 CriticalpodmanSUSEsctp: clear new_transport when removing a peer9.8 Critical- Show moreLoading…