kernel-default-base vulnerabilities (openSUSE)
10,463 vulnerabilities.
kernel-default-baseopenSUSEthunderbolt: Bound the DROM dual link port number before indexing sw->ports7.0 Highkernel-default-baseopenSUSERDMA/bnxt_re: zero shared page before exposing to userspace7.1 Highkernel-default-baseopenSUSEnet/sched: cls_route: fix fastmap use-after-free on filter7.8 Highkernel-default-baseopenSUSEpacket: use consistent hard_header_len in non-ring send paths7.8 Highkernel-default-baseopenSUSEnet: ipv6: clear suppressed fib6 rule result9.8 Criticalkernel-default-baseopenSUSEnetfilter: nft_payload: fix mask build for partial field offload7.1 Highkernel-default-baseopenSUSEvhost: reset the vring metadata cache on vring reconfiguration8.8 Highkernel-default-baseopenSUSEcrypto: algif_skcipher - force synchronous processing on trees without ctx->state7.1 Highkernel-default-baseopenSUSEnet: mpls: initialize rtm_tos in mpls_getroute()4.8 Mediumkernel-default-baseopenSUSEdmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open()7.8 Highkernel-default-baseopenSUSEbtrfs: skip global block reserve accounting for rescue mountsNo scorekernel-default-baseopenSUSEkeys: fix out-of-bounds read in keyring_get_key_chunk()7.1 Highkernel-default-baseopenSUSEkeys: make keyring key-chunk byte order agree with keyring_diff_objects()6.9 Mediumkernel-default-baseopenSUSEnetfilter: nf_tables: make nft_object rhltable per table7.8 Highkernel-default-baseopenSUSEnetfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH7.1 Highkernel-default-baseopenSUSErds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check()7.8 Highkernel-default-baseopenSUSEscsi: libiscsi: Fix stale-data leak into the SCSI sense buffer7.5 Highkernel-default-baseopenSUSEscsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer9.8 Criticalkernel-default-baseopenSUSEscsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake raceNo scorekernel-default-baseopenSUSEhwmon: (nct6775-core) Fix number of temperature registers for NCT6116No scorekernel-default-baseopenSUSEhwmon: (lm90) Only report alarms if driver is readyNo scorekernel-default-baseopenSUSEhwmon: (nzxt-smart2) DMA-align output buffer7.8 Highkernel-default-baseopenSUSEnet: do not send ICMP/NDISC Redirects when peer allocation fails7.5 Highkernel-default-baseopenSUSEhwmon: (nct6775-core) Prevent access to unsupported weight registers7.8 Highkernel-default-baseopenSUSEforcedeth: fix UAF of txrx_stats in nv_remove7.8 Highkernel-default-baseopenSUSEhwmon: (adt7470) Fix busy-loop and I2C flooding in update threadNo scorekernel-default-baseopenSUSEhwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed readNo scorekernel-default-baseopenSUSErtase: fix double free of multi-frag skb on DMA map failure9.8 Criticalkernel-default-baseopenSUSEnet/sched: cls_u32: validate offshift to prevent shift-out-of-bounds7.8 Highkernel-default-baseopenSUSEBluetooth: ISO: clear iso_data always when detaching conn from hcon8.8 Highkernel-default-baseopenSUSEBluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp8.8 Highkernel-default-baseopenSUSEBluetooth: ISO: lock sk in iso_connect_ind8.8 Highkernel-default-baseopenSUSEBluetooth: ISO: hold sk properly in iso_conn_ready8.8 Highkernel-default-baseopenSUSEBluetooth: ISO: fix leaking sk after socket release6.8 Mediumkernel-default-baseopenSUSEBluetooth: ISO: avoid deadlocks in iso_sock_timeout8.8 Highkernel-default-baseopenSUSEBluetooth: ISO: fix refcounting of iso_conn8.8 Highkernel-default-baseopenSUSEBluetooth: ISO: fix race of kfree vs kref_get_unless_zero8.8 Highkernel-default-baseopenSUSEBluetooth: btintel: Validate length before parsing diagnostics TLV2.4 Lowkernel-default-baseopenSUSEBluetooth: hci_conn: hold conn reference in abort_conn_sync()8.8 Highkernel-default-baseopenSUSEBluetooth: hci_sync: hold conn in hci_connect_big_sync() callback8.8 Highkernel-default-baseopenSUSEBluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback7.8 Highkernel-default-baseopenSUSEocteontx2-af: Block VFs from clobbering special CGX PKIND state8.8 Highkernel-default-baseopenSUSEscsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit5.6 Mediumkernel-default-baseopenSUSEqede: sync udp_tunnel ports outside qede_lock in the recovery path7.5 Highkernel-default-baseopenSUSEpinctrl: devicetree: don't free uninitialized dev_name on error path7.8 Highkernel-default-baseopenSUSEmm/hugetlb: fix list corruption in allocate_file_region_entries()7.8 Highkernel-default-baseopenSUSEKVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs9.3 Criticalkernel-default-baseopenSUSEKVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active8.2 Highkernel-default-baseopenSUSEKVM: s390: pci: Reject adapter interrupt forwarding if already enabled8.8 Highkernel-default-baseopenSUSEdibs: fix use-after-free of dmb_node in loopback attach/detach/unregister7.8 High- Show moreLoading…