podman vulnerabilities (SUSE)
552 vulnerabilities.
podmanSUSERDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry()7.3 HighpodmanSUSERDMA/cxgb4: free STAG index when TPT entry write fails2.0 LowpodmanSUSEIB/isert: reject PDUs declaring more data than was received9.1 CriticalpodmanSUSEIB/isert: reject login PDUs declaring more data than was received9.1 CriticalpodmanSUSEiommu/dma: Check atomic pool allocation result directly7.8 HighpodmanSUSEbpf, x86: Fix trampoline stack size for 128-bit arguments7.8 HighpodmanSUSERDMA/erdma: Hold CQ references when processing EQ events7.8 HighpodmanSUSERDMA/erdma: Hold QP references for AE and CM processing7.8 HighpodmanSUSERDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ5.3 MediumpodmanSUSEIB/isert: delay the final Login Response until the session is registered7.5 HighpodmanSUSEIB/isert: post the full-feature receive buffers after session registration7.5 HighpodmanSUSERDMA/siw: Fix use-after-free in siw_accept()7.8 HighpodmanSUSEbtrfs: defrag: fix deadlock between defrag and delalloc space reservation5.7 MediumpodmanSUSEbtrfs: check if root is readonly when setting posix acl4.8 MediumpodmanSUSEbtrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data()2.0 LowpodmanSUSEBluetooth: hci_conn: fix the SCO setup context lifetime8.8 HighpodmanSUSEnvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns()7.5 HighpodmanSUSERDMA/cma: Fix WARNING in res_to_rt4.8 MediumpodmanSUSESquashfs: check block offset is not negative7.1 HighpodmanSUSEALSA: core: Fix use-after-free in snd_card_do_free()No scorepodmanSUSEblk-iolatency: clear delay state when freeing policy data6.8 MediumpodmanSUSEblk-iocost: clear delay state when freeing policy data2.0 LowpodmanSUSENFSv4: remove callback IDR entry on client allocation failure9.8 CriticalpodmanSUSENFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers7.5 HighpodmanSUSENFSv4.1: zero referring call lists before decoding9.8 CriticalpodmanSUSEDrivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partitionNo scorepodmanSUSEBluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop7.1 HighpodmanSUSEnet/sched: fq_pie: clamp default quantum to avoid signed overflow6.8 MediumpodmanSUSEfutex: Prevent rcuwait use-after-free during requeue PI7.8 HighpodmanSUSEperf/x86/intel: Fix kernel address leakages in LBR stack4.8 MediumpodmanSUSEnvmet-auth: Synchronize timeout work during SQ teardown9.8 CriticalpodmanSUSEnvmet-tcp: reject unsolicited H2CData PDUs7.5 HighpodmanSUSEKVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit4.6 MediumpodmanSUSEKVM: nVMX: Service local TLB flushes on failed nested VM-Enter9.3 CriticalpodmanSUSEKVM: nVM: Ensure INVVPID is emulated on the correct physical CPU8.8 HighpodmanSUSEKVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables8.8 HighpodmanSUSEKVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save7.1 HighpodmanSUSEmedia: cec: disable delayed work before freeing an interrupted transmit7.8 HighpodmanSUSEgtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free7.8 HighpodmanSUSESUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6No scorepodmanSUSENFSD: check truncate permission under inode lock9.1 CriticalpodmanSUSENFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock9.8 CriticalpodmanSUSENFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path8.2 HighpodmanSUSEnfsd: release path refs on follow_down() error7.5 HighpodmanSUSEnfsd: sample writeback error cursor before async COPY loop7.5 HighpodmanSUSEnfsd: size fh_verify server sockaddr slot by xpt_locallen9.8 CriticalpodmanSUSEnfsd: validate symlink target length in NFSv4 CREATE7.5 HighpodmanSUSEnfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()9.1 CriticalpodmanSUSEnfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref7.5 HighpodmanSUSEnfsd: check client ownership when cancelling a copy-notify stateid7.1 High- Show moreLoading…