opensuse/kernel-source&distro=openSUSE Tumbleweed

Vulnerabilities (1,862)

• CVE-2024-49964MedOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix memfd_pin_folios free_huge_pages leak memfd_pin_folios followed by unpin_folios fails to restore free_huge_pages if the pages were not already faulted in, because the folio refcount for pages cr

• CVE-2024-49963MedOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: mailbox: bcm2835: Fix timeout during suspend mode During noirq suspend phase the Raspberry Pi power driver suffer of firmware property timeouts. The reason is that the IRQ of the underlying BCM2835 mailbox is d

• CVE-2024-49962MedOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() ACPICA commit 4d4547cf13cca820ff7e0f859ba83e1a610b9fd0 ACPI_ALLOCATE_ZEROED() may fail, elements might be NULL and will cause

• CVE-2024-49961MedOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: media: i2c: ar0521: Use cansleep version of gpiod_set_value() If we use GPIO reset from I2C port expander, we must use *_cansleep() variant of GPIO functions. This was not done in ar0521_power_on()/ar0521_power

• CVE-2024-49960HigOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix timer use-after-free on failed mount Syzbot has found an ODEBUG bug in ext4_fill_super The del_timer_sync function cancels the s_err_report timer, which reminds about filesystem errors daily. We shou

• CVE-2024-49959MedOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error In __jbd2_log_wait_for_space(), we might call jbd2_cleanup_journal_tail() to recover some journal space. But if an error occurs while

• CVE-2024-49958HigOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: reserve space for inline xattr before attaching reflink tree One of our customers reported a crash and a corrupted ocfs2 filesystem. The crash was due to the detection of corruption. Upon troubleshooti

• CVE-2024-49957MedOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix null-ptr-deref when journal load failed. During the mounting process, if journal_reset() fails because of too short journal, then lead to jbd2_journal_load() fails with NULL j_sb_buffer. Subsequentl

• CVE-2024-49956HigOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: gfs2: fix double destroy_workqueue error When gfs2_fill_super() fails, destroy_workqueue() is called within gfs2_gl_hash_clear(), and the subsequent code path calls destroy_workqueue() on the same work queue ag

• CVE-2024-49955MedOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: ACPI: battery: Fix possible crash when unregistering a battery hook When a battery hook returns an error when adding a new battery, then the battery hook is automatically unregistered. However the battery hook

• CVE-2024-49954MedOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: static_call: Replace pointless WARN_ON() in static_call_module_notify() static_call_module_notify() triggers a WARN_ON(), when memory allocation fails in __static_call_add_module(). That's not really justified

• CVE-2024-49953MedOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice The km.state is not checked in driver's delayed work. When xfrm_state_check_expire() is called, the state can be reset to XFRM_STATE_EXPIRED, e

• CVE-2024-49952HigOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: prevent nf_skb_duplicated corruption syzbot found that nf_dup_ipv4() or nf_dup_ipv6() could write per-cpu variable nf_skb_duplicated in an unsafe way [1]. Disabling preemption as hinted b

• CVE-2024-49951HigOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed If mgmt_index_removed is called while there are commands queued on cmd_sync it could lead to crashes like the bellow trace: 0x0000053D: __list_del_entr

• CVE-2024-49950HigOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix uaf in l2cap_connect [Syzbot reported] BUG: KASAN: slab-use-after-free in l2cap_connect.constprop.0+0x10d8/0x1270 net/bluetooth/l2cap_core.c:3949 Read of size 8 at addr ffff8880241e9800 by

• CVE-2024-49949MedOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: net: avoid potential underflow in qdisc_pkt_len_init() with UFO After commit 7c6d2ecbda83 ("net: be more gentle about silly gso requests coming from user") virtio_net_hdr_to_skb() had sanity check to detect mal

• CVE-2024-49948MedOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: net: add more sanity checks to qdisc_pkt_len_init() One path takes care of SKB_GSO_DODGY, assuming skb->len is bigger than hdr_len. virtio_net_hdr_to_skb() does not fully dissect TCP headers, it only make sure

• CVE-2024-49947MedOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: net: test for not too small csum_start in virtio_net_hdr_to_skb() syzbot was able to trigger this warning [1], after injecting a malicious packet through af_packet, setting skb->csum_start and thus the transpor

• CVE-2024-49946MedOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: ppp: do not assume bh is held in ppp_channel_bridge_input() Networking receive path is usually handled from BH handler. However, some protocols need to acquire the socket lock, and packets might be stored in th

• CVE-2024-49945MedOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: net/ncsi: Disable the ncsi work before freeing the associated structure The work function can run after the ncsi device is freed, resulting in use-after-free bugs or kernel panic.