kernel-default vulnerabilities (openSUSE)
10,730 vulnerabilities.
kernel-defaultopenSUSEthunderbolt: Bound the DROM dual link port number before indexing sw->ports7.0 Highkernel-defaultopenSUSERDMA/bnxt_re: zero shared page before exposing to userspace7.1 Highkernel-defaultopenSUSEnet/sched: cls_route: fix fastmap use-after-free on filter7.8 Highkernel-defaultopenSUSEpacket: use consistent hard_header_len in non-ring send paths7.8 Highkernel-defaultopenSUSEnet: ipv6: clear suppressed fib6 rule result9.8 Criticalkernel-defaultopenSUSEnetfilter: nft_payload: fix mask build for partial field offload7.1 Highkernel-defaultopenSUSEvhost: reset the vring metadata cache on vring reconfiguration8.8 Highkernel-defaultopenSUSEcrypto: algif_skcipher - force synchronous processing on trees without ctx->state7.1 Highkernel-defaultopenSUSEnet: mpls: initialize rtm_tos in mpls_getroute()4.8 Mediumkernel-defaultopenSUSEdmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open()7.8 Highkernel-defaultopenSUSEbtrfs: skip global block reserve accounting for rescue mountsNo scorekernel-defaultopenSUSEkeys: fix out-of-bounds read in keyring_get_key_chunk()7.1 Highkernel-defaultopenSUSEkeys: make keyring key-chunk byte order agree with keyring_diff_objects()6.9 Mediumkernel-defaultopenSUSEnetfilter: nf_tables: make nft_object rhltable per table7.8 Highkernel-defaultopenSUSEnetfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH7.1 Highkernel-defaultopenSUSErds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check()7.8 Highkernel-defaultopenSUSEscsi: libiscsi: Fix stale-data leak into the SCSI sense buffer7.5 Highkernel-defaultopenSUSEscsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer9.8 Criticalkernel-defaultopenSUSEscsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake raceNo scorekernel-defaultopenSUSEhwmon: (nct6775-core) Fix number of temperature registers for NCT6116No scorekernel-defaultopenSUSEhwmon: (lm90) Only report alarms if driver is readyNo scorekernel-defaultopenSUSEhwmon: (nzxt-smart2) DMA-align output buffer7.8 Highkernel-defaultopenSUSEnet: do not send ICMP/NDISC Redirects when peer allocation fails7.5 Highkernel-defaultopenSUSEhwmon: (nct6775-core) Prevent access to unsupported weight registers7.8 Highkernel-defaultopenSUSEforcedeth: fix UAF of txrx_stats in nv_remove7.8 Highkernel-defaultopenSUSEhwmon: (adt7470) Fix busy-loop and I2C flooding in update threadNo scorekernel-defaultopenSUSEhwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed readNo scorekernel-defaultopenSUSErtase: fix double free of multi-frag skb on DMA map failure9.8 Criticalkernel-defaultopenSUSEnet/sched: cls_u32: validate offshift to prevent shift-out-of-bounds7.8 Highkernel-defaultopenSUSEBluetooth: ISO: clear iso_data always when detaching conn from hcon8.8 Highkernel-defaultopenSUSEBluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp8.8 Highkernel-defaultopenSUSEBluetooth: ISO: lock sk in iso_connect_ind8.8 Highkernel-defaultopenSUSEBluetooth: ISO: hold sk properly in iso_conn_ready8.8 Highkernel-defaultopenSUSEBluetooth: ISO: fix leaking sk after socket release6.8 Mediumkernel-defaultopenSUSEBluetooth: ISO: avoid deadlocks in iso_sock_timeout8.8 Highkernel-defaultopenSUSEBluetooth: ISO: fix refcounting of iso_conn8.8 Highkernel-defaultopenSUSEBluetooth: ISO: fix race of kfree vs kref_get_unless_zero8.8 Highkernel-defaultopenSUSEBluetooth: btintel: Validate length before parsing diagnostics TLV2.4 Lowkernel-defaultopenSUSEBluetooth: hci_conn: hold conn reference in abort_conn_sync()8.8 Highkernel-defaultopenSUSEBluetooth: hci_sync: hold conn in hci_connect_big_sync() callback8.8 Highkernel-defaultopenSUSEBluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback7.8 Highkernel-defaultopenSUSEocteontx2-af: Block VFs from clobbering special CGX PKIND state8.8 Highkernel-defaultopenSUSEscsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit5.6 Mediumkernel-defaultopenSUSEqede: sync udp_tunnel ports outside qede_lock in the recovery path7.5 Highkernel-defaultopenSUSEpinctrl: devicetree: don't free uninitialized dev_name on error path7.8 Highkernel-defaultopenSUSEmm/hugetlb: fix list corruption in allocate_file_region_entries()7.8 Highkernel-defaultopenSUSEKVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs9.3 Criticalkernel-defaultopenSUSEKVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active8.2 Highkernel-defaultopenSUSEKVM: s390: pci: Reject adapter interrupt forwarding if already enabled8.8 Highkernel-defaultopenSUSEdibs: fix use-after-free of dmb_node in loopback attach/detach/unregister7.8 High- Show moreLoading…