podman vulnerabilities (SUSE)
552 vulnerabilities.
podmanSUSEdrm/amdgpu: Reject UVD message with invalid number of h265 refs7.3 HighpodmanSUSEIB/mlx5: Properly support implicit ODP rereg_mr7.3 HighpodmanSUSEbpf: Add missing access_ok call to copy_user_syms4.6 MediumpodmanSUSERDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp7.3 HighpodmanSUSERDMA/rxe: Fix OOB in free_rd_atomic_resources()8.5 HighpodmanSUSEtls: device: fix out-of-bounds write in tls_append_frag()7.3 HighpodmanSUSExfrm: espintcp: fix UAF during close7.3 HighpodmanSUSEtcp: clamp route advmss to TCP_MIN_MSS6.8 MediumpodmanSUSExfrm: drop ESP-in-TCP packets with no ingress device6.8 MediumpodmanSUSExfrm: ah6: validate routing header segments_left7.3 HighpodmanSUSEnet: bridge: mcast: fix use-after-free of a master VLAN's multicast context7.3 HighpodmanSUSEnet/packet: defer vmalloc TX_RING free until skbs finish7.3 HighpodmanSUSEipv6: seg6: clear IPv4 control block on IPIP decapsulation9.2 CriticalpodmanSUSEcrypto: virtio - bound the akcipher result lengthNo scorepodmanSUSExfs: validate attr entry pointer before field access5.3 MediumpodmanSUSEnfc: llcp: fix OOB read and u8 offset wrap in TLV parsers7.1 HighpodmanSUSEipv4: reject undersized MTUs in ip_do_fragment()6.8 MediumpodmanSUSEnvmet-tcp: bound SGL data length before allocating command buffers8.7 HighpodmanSUSEfbdev: serialize mode sysfs access with lock_fb_info()No scorepodmanSUSESecurity update for podmanNo scorepodmanSUSEselinux: do not cancel a policy conversion that never startedNo scorepodmanSUSEdrm/amdkfd: Add bounds check for CRAT subtype length8.0 HighpodmanSUSEnet/mlx5e: TC, Check if flow is PEER before acquiring devcom lock6.7 MediumpodmanSUSEserial: amba-pl011: synchronize DMA teardown7.8 HighpodmanSUSEnet: remove CAP_SYS_RAWIO zero-padding in dev_validate_header7.8 HighpodmanSUSEnet: gro: properly validate BIG TCP aggregation criteria9.8 CriticalpodmanSUSESecurity update for podmanNo scorepodmanSUSESecurity update for podmanNo scorepodmanSUSEwifi: mac80211: validate individual TWT params before driver setup8.8 HighpodmanSUSEALSA: pcm: wake linked drain waiters on unlink7.8 HighpodmanSUSEigc: remove napi_synchronize() in igc_down()6.7 MediumpodmanSUSEipvs: do not propagate one-packet flag to synced conns9.8 CriticalpodmanSUSEidpf: bound interrupt-vector register fill to the allocated array9.3 CriticalpodmanSUSEmm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE4.8 MediumpodmanSUSEvxlan: re-fetch eth header after route_shortcircuit()9.8 CriticalpodmanSUSEs390/dasd: Fix potential NULL pointer dereferenceNo scorepodmanSUSEnet/mlx5: LAG, MPESW, Fix missing complete() on devcom error5.6 MediumpodmanSUSEnetfilter: xt_nat: reject unsupported target families7.3 HighpodmanSUSEtools/power/x86/intel-speed-select: Harden daemon pidfile open7.1 HighpodmanSUSERDMA/hns: Fix warning in poll cq direct mode10.0 CriticalpodmanSUSEipv6: guard against possible NULL deref in __in6_dev_stats_get()7.5 HighpodmanSUSEbtrfs: lzo: reject compressed segment that overflows the compressed input7.5 HighpodmanSUSEocteontx2-af: npc: Fix size of entry2cntr_mapNo scorepodmanSUSEveth: fix NAPI leak in XDP enable error path7.8 HighpodmanSUSEnetfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read9.1 CriticalpodmanSUSEblock: stop the timeout timer when releasing a never added disk9.8 CriticalpodmanSUSEmptcp: options: reset DSS fields in case of unexpected size9.8 CriticalpodmanSUSEmptcp: fastopen: only mark MPTFO subflows with SYN data9.4 CriticalpodmanSUSEfbdev: bound mode sysfs output to the sysfs buffer7.8 HighpodmanSUSElibceph: fix OOB read in decode_watchers() via missing bounds check9.8 Critical- Show moreLoading…