opensuse/kernel-source&distro=openSUSE Tumbleweed

Vulnerabilities (3,335)

• CVE-2024-50043CriOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: nfsd: fix possible badness in FREE_STATEID When multiple FREE_STATEIDs are sent for the same delegation stateid, it can lead to a possible either use-after-free or counter refcount underflow errors. In nfsd4_f

• CVE-2024-50042HigOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: ice: Fix increasing MSI-X on VF Increasing MSI-X value on a VF leads to invalid memory operations. This is caused by not reallocating some arrays. Reproducer: modprobe ice echo 0 > /sys/bus/pci/devices/$PF

• CVE-2024-50041HigOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: i40e: Fix macvlan leak by synchronizing access to mac_filter_hash This patch addresses a macvlan leak issue in the i40e driver caused by concurrent access to vsi->mac_filter_hash. The leak occurs when multiple

• CVE-2024-50040MedOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: igb: Do not bring the device up after non-fatal error Commit 004d25060c78 ("igb: Fix igb_down hung on surprise removal") changed igb_io_error_detected() to ignore non-fatal pcie errors in order to avoid hung ta

• CVE-2024-50039HigOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: net/sched: accept TCA_STAB only for root qdisc Most qdiscs maintain their backlog using qdisc_pkt_len(skb) on the assumption it is invariant between the enqueue() and dequeue() handlers. Unfortunately syzbot c

• CVE-2024-50038MedOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: avoid NFPROTO_UNSPEC where needed syzbot managed to call xt_cluster match via ebtables: WARNING: CPU: 0 PID: 11 at net/netfilter/xt_cluster.c:72 xt_cluster_mt+0x196/0x780 [..] ebt_do_tab

• CVE-2024-50037MedOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: drm/fbdev-dma: Only cleanup deferred I/O if necessary Commit 5a498d4d06d6 ("drm/fbdev-dma: Only install deferred I/O if necessary") initializes deferred I/O only if it is used. drm_fbdev_dma_fb_destroy() howeve

• CVE-2024-50036HigOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: net: do not delay dst_entries_add() in dst_release() dst_entries_add() uses per-cpu data that might be freed at netns dismantle from ip6_route_net_exit() calling dst_entries_destroy() Before ip6_route_net_exit

• CVE-2024-50035HigOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: ppp: fix ppp_async_encode() illegal access syzbot reported an issue in ppp_async_encode() [1] In this case, pppoe_sendmsg() is called with a zero size. Then ppp_async_encode() is called with an empty skb. BUG

• CVE-2024-50034MedOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: net/smc: fix lacks of icsk_syn_mss with IPPROTO_SMC Eric report a panic on IPPROTO_SMC, and give the facts that when INET_PROTOSW_ICSK was set, icsk->icsk_sync_mss must be set too. Bug: Unable to handle kernel

• CVE-2024-50033CriOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: slip: make slhc_remember() more robust against malicious packets syzbot found that slhc_remember() was missing checks against malicious packets [1]. slhc_remember() only checked the size of the packet was at l

• CVE-2024-50031HigOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Stop the active perfmon before being destroyed When running `kmscube` with one or more performance monitors enabled via `GALLIUM_HUD`, the following kernel panic can occur: [ 55.008324] Unable to ha

• CVE-2024-50030HigOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: drm/xe/ct: prevent UAF in send_recv() Ensure we serialize with completion side to prevent UAF with fence going out of scope on the stack, since we have no clue if it will fire after the timeout before we can er

• CVE-2024-50029HigOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync This checks if the ACL connection remains valid as it could be destroyed while hci_enhanced_setup_sync is pending on cmd_sync leading to the following tra

• CVE-2024-50028HigOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: thermal: core: Reference count the zone in thermal_zone_get_by_id() There are places in the thermal netlink code where nothing prevents the thermal zone object from going away while being accessed after it has

• CVE-2024-50027HigOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: thermal: core: Free tzp copy along with the thermal zone The object pointed to by tz->tzp may still be accessed after being freed in thermal_zone_device_unregister(), so move the freeing of it to the point afte

• CVE-2024-50026MedOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: wd33c93: Don't use stale scsi_pointer value A regression was introduced with commit dbb2da557a6a ("scsi: wd33c93: Move the SCSI pointer to private command data") which results in an oops in wd33c93_intr()

• CVE-2024-50025MedOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: fnic: Move flush_work initialization out of if block After commit 379a58caa199 ("scsi: fnic: Move fnic_fnic_flush_tx() to a work queue"), it can happen that a work item is sent to an uninitialized work qu

• CVE-2024-50024HigOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: net: Fix an unsafe loop on the list The kernel may crash when deleting a genetlink family if there are still listeners for that family: Oops: Kernel access of bad area, sig: 11 [#1] ... NIP [c000000000c080

• CVE-2024-50023MedOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: net: phy: Remove LED entry from LEDs list on unregister Commit c938ab4da0eb ("net: phy: Manual remove LEDs to ensure correct ordering") correctly fixed a problem with using devm_ but missed removing the LED ent