kernel-default-base vulnerabilities (openSUSE)
10,463 vulnerabilities.
kernel-default-baseopenSUSElibceph: reject buckets with mismatched CRUSH ids9.8 Criticalkernel-default-baseopenSUSEceph: cap delegated inode count in ceph_parse_deleg_inos()7.5 Highkernel-default-baseopenSUSEbtrfs: fix extent map leak in NOCOW direct I/O write5.7 Mediumkernel-default-baseopenSUSEcifs: fix loff_t underflow in cifs_remap_file_range() when len == 07.1 Highkernel-default-baseopenSUSEsmb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions7.8 Highkernel-default-baseopenSUSEsmb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T29.8 Criticalkernel-default-baseopenSUSEsmb: client: clear ce->tgthint in free_tgts()9.8 Criticalkernel-default-baseopenSUSEsmb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()9.8 Criticalkernel-default-baseopenSUSEsmb: client: reject a tree connect response whose byte count is too small9.1 Criticalkernel-default-baseopenSUSEHID: picolcd: clamp eeprom debugfs read to bytes actually receivedNo scorekernel-default-baseopenSUSEHID: roccat: free buffered reports when destroying device2.4 Lowkernel-default-baseopenSUSEHID: sensor: custom: Fix field sysfs group cleanup on failure8.8 Highkernel-default-baseopenSUSEHID: mcp2221: stop device IO before hid_hw_stop5.4 Mediumkernel-default-baseopenSUSEHID: mcp2221: clear rxbuf after I2C/SMBus transfer completes7.8 Highkernel-default-baseopenSUSEHID: mcp2221: validate report size in mcp2221_raw_event()2.4 Lowkernel-default-baseopenSUSEHID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer7.8 Highkernel-default-baseopenSUSEecryptfs: pass packet set buffer size to parser7.1 Highkernel-default-baseopenSUSEIn the Linux kernel, the following vulnerability has been resolved: entry: Fix seccomp bypass...8.4 Highkernel-default-baseopenSUSEerofs: skip sufficiently large global buffers when resizing7.8 Highkernel-default-baseopenSUSEfbdev: omapfb: panel-dsi-cm: initialize lock before registering display8.4 Highkernel-default-baseopenSUSEfbdev: uvesafb: unregister connector callback on init failure7.8 Highkernel-default-baseopenSUSEfsnotify: Fix stale object mask after concurrent mark updates2.0 Lowkernel-default-baseopenSUSEhugetlb: only adjust reservation during unmapping if mapcount is 07.1 Highkernel-default-baseopenSUSEACPI: pfr_update: fix stack buffer overflow in query_capability()7.8 Highkernel-default-baseopenSUSEauxdisplay: charlcd: cancel backlight work on registration failure7.8 Highkernel-default-baseopenSUSEBluetooth: eir: Fix OOB read in eir_get_service_data()8.1 Highkernel-default-baseopenSUSEbpf: Disable preemption in __bpf_get_stack7.8 Highkernel-default-baseopenSUSEBluetooth: RFCOMM: serialize security confirmation handling8.8 Highkernel-default-baseopenSUSEip: orphan prefetched skbs before multicast forwarding7.8 Highkernel-default-baseopenSUSEip6_gre: fix hardware header length for NBMA tunnels7.8 Highkernel-default-baseopenSUSElandlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation8.4 Highkernel-default-baseopenSUSElibnvdimm/labels: Prevent integer overflow in __nd_label_validate()7.8 Highkernel-default-baseopenSUSEmd/raid10: fix still_degraded being inverted in raid10_sync_request()9.8 Criticalkernel-default-baseopenSUSEmptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction8.2 Highkernel-default-baseopenSUSEnouveau/gem: reserve the bo in the info ioctl around the vma lookup7.8 Highkernel-default-baseopenSUSESUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow9.8 Criticalkernel-default-baseopenSUSESUNRPC: svcauth_gss: enforce krb5 token minimum length9.8 Criticalkernel-default-baseopenSUSESUNRPC: always drain cache_cleaner before destroying a cache_detail7.8 Highkernel-default-baseopenSUSESUNRPC: Check svc pool percpu counter allocation8.1 Highkernel-default-baseopenSUSEsunrpc: defer rq_argp and rq_resp free until after RCU grace period7.8 Highkernel-default-baseopenSUSESUNRPC: fix gssx_dec_option_array error path bugs7.5 Highkernel-default-baseopenSUSESUNRPC: harden gss_krb5_unwrap_v2 against short tokens9.8 Criticalkernel-default-baseopenSUSESUNRPC: harden gss_unwrap_resp_priv length checks9.8 Criticalkernel-default-baseopenSUSEsunrpc: init gssp_lock before publishing proc entry7.8 Highkernel-default-baseopenSUSESUNRPC: reject duplicate CREDS_VALUE optionsNo scorekernel-default-baseopenSUSESUNRPC: Reject krb5 v2 wrap tokens with oversized ec field9.8 Criticalkernel-default-baseopenSUSESUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v29.1 Criticalkernel-default-baseopenSUSESUNRPC: wait for in-flight client TLS handshake callback9.8 Criticalkernel-default-baseopenSUSEsvcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id8.1 Highkernel-default-baseopenSUSEsvcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails8.8 High- Show moreLoading…