opensuse/kernel-source-longterm&distro=openSUSE Tumbleweed

Vulnerabilities (694)

• CVE-2024-50222Nov 9, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP generic/077 on x86_32 CONFIG_DEBUG_KMAP_LOCAL_FORCE_MAP=y with highmem, on huge=always tmpfs, issues a warning and then hangs (interruptibly):

• CVE-2024-50221Nov 9, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Vangogh: Fix kernel memory out of bounds write KASAN reports that the GPU metrics table allocated in vangogh_tables_init() is not large enough for the memset done in smu_cmn_init_soft_gpu_metrics().

• CVE-2024-50220Nov 9, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: fork: do not invoke uffd on fork if error occurs Patch series "fork: do not expose incomplete mm on fork". During fork we may place the virtual memory address space into an inconsistent state before the fork o

• CVE-2024-50218Nov 9, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow Syzbot reported a kernel BUG in ocfs2_truncate_inline. There are two reasons for this: first, the parameter value passed is greater than ocfs2_max_inline

• CVE-2024-50217Nov 9, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free of block device file in __btrfs_free_extra_devids() Mounting btrfs from two images (which have the same one fsid and two different dev_uuids) in certain executing order may trigger an

• CVE-2024-50216Nov 9, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: xfs: fix finding a last resort AG in xfs_filestream_pick_ag When the main loop in xfs_filestream_pick_ag fails to find a suitable AG it tries to just pick the online AG. But the loop for that uses args->pag as

• CVE-2024-50215Nov 9, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: assign dh_key to NULL after kfree_sensitive ctrl->dh_key might be used across multiple calls to nvmet_setup_dhgroup() for the same controller. So it's better to nullify it after release on error pat

• CVE-2024-50214Nov 9, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: drm/connector: hdmi: Fix memory leak in drm_display_mode_from_cea_vic() modprobe drm_connector_test and then rmmod drm_connector_test, the following memory leak occurs. The `mode` allocated in drm_mode_duplica

• CVE-2024-50213Nov 9, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: drm/tests: hdmi: Fix memory leaks in drm_display_mode_from_cea_vic() modprobe drm_hdmi_state_helper_test and then rmmod it, the following memory leak occurs. The `mode` allocated in drm_mode_duplicate() called

• CVE-2024-50212Nov 9, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: lib: alloc_tag_module_unload must wait for pending kfree_rcu calls Ben Greear reports following splat: ------------[ cut here ]------------ net/netfilter/nf_nat_core.c:1114 module nf_nat func:nf_nat_register_

• CVE-2024-50210MedNov 8, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() If get_clock_desc() succeeds, it calls fget() for the clockid's fd, and get the clk->rwsem read lock, so the error path should release the

• CVE-2024-50205MedNov 8, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() The step variable is initialized to zero. It is changed in the loop, but if it's not changed it will remain zero. Add a variable check be

• CVE-2024-50188MedNov 8, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83869: fix memory corruption when enabling fiber When configuring the fiber port, the DP83869 PHY driver incorrectly calls linkmode_set_bit() with a bit mask (1 << 10) rather than a bit number (10).

• CVE-2024-50211Nov 8, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: udf: refactor inode_bmap() to handle error Refactor inode_bmap() to handle error since udf_next_aext() can return error now. On situations like ftruncate, udf_extend_file() can now detect errors and bail out ea

• CVE-2024-50209Nov 8, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Add a check for memory allocation __alloc_pbl() can return error when memory allocation fails. Driver is not checking the status on one of the instances.

• CVE-2024-50208Nov 8, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages Avoid memory corruption while setting up Level-2 PBL pages for the non MR resources when num_pages > 256K. There will be a single PDE page address (co

• CVE-2024-50207Nov 8, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix reader locking when changing the sub buffer order The function ring_buffer_subbuf_order_set() updates each ring_buffer_per_cpu and installs new sub buffers that match the requested page order.

• CVE-2024-50206Nov 8, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init The loop responsible for allocating up to MTK_FQ_DMA_LENGTH buffers must only touch as many descriptors, otherwise it ends up corrupting unre

• CVE-2024-50201Nov 8, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix encoder->possible_clones Include the encoder itself in its possible_clones bitmask. In the past nothing validated that drivers were populating possible_clones correctly, but that changed in comm

• CVE-2024-50200Nov 8, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: maple_tree: correct tree corruption on spanning store Patch series "maple_tree: correct tree corruption on spanning store", v3. There has been a nasty yet subtle maple tree corruption bug that appears to have