suse/kernel-azure&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP5

Vulnerabilities (2,432)

• CVE-2024-26615MedMar 11, 2024
  affected < 5.14.21-150500.33.63.1fixed 5.14.21-150500.33.63.1

  In the Linux kernel, the following vulnerability has been resolved: net/smc: fix illegal rmb_desc access in SMC-D connection dump A crash was found when dumping SMC-D connections. It can be reproduced by following steps: - run nginx/wrk test: smc_run nginx smc_run wrk -t 1

• CVE-2024-26614HigMar 11, 2024
  affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

  In the Linux kernel, the following vulnerability has been resolved: tcp: make sure init the accept_queue's spinlocks once When I run syz's reproduction C program locally, it causes the following issue: pvqspinlock: lock 0xffff9d181cd5c660 has corrupted value 0x0! WARNING: CPU:

• CVE-2024-26612MedMar 11, 2024
  affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

  In the Linux kernel, the following vulnerability has been resolved: netfs, fscache: Prevent Oops in fscache_put_cache() This function dereferences "cache" and then checks if it's IS_ERR_OR_NULL(). Check first, then dereference.

• CVE-2024-26610HigMar 11, 2024
  affected < 5.14.21-150500.33.51.1fixed 5.14.21-150500.33.51.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix a memory corruption iwl_fw_ini_trigger_tlv::data is a pointer to a __le32, which means that if we copy to iwl_fw_ini_trigger_tlv::data + offset while offset is in bytes, we'll write past the

• CVE-2023-52498MedMar 11, 2024
  affected < 5.14.21-150500.33.66.1fixed 5.14.21-150500.33.66.1

  In the Linux kernel, the following vulnerability has been resolved: PM: sleep: Fix possible deadlocks in core system-wide PM code It is reported that in low-memory situations the system-wide resume core code deadlocks, because async_schedule_dev() executes its argument function

• CVE-2023-52494HigMar 11, 2024
  affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

  In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Add alignment check for event ring read pointer Though we do check the event ring read pointer by "is_valid_ring_ptr" to make sure it is in the buffer range, but there is another risk the pointe

• CVE-2023-52493MedMar 11, 2024
  affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

  In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Drop chan lock before queuing buffers Ensure read and write locks for the channel are not taken in succession by dropping the read lock from parse_xfer_event() such that a callback given to clie

• CVE-2023-52492MedMar 11, 2024
  affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

  In the Linux kernel, the following vulnerability has been resolved: dmaengine: fix NULL pointer in channel unregistration function __dma_async_device_channel_register() can fail. In case of failure, chan->local is freed (with free_percpu()), and chan->local is nullified. When d

• CVE-2023-52489MedMar 11, 2024
  affected < 5.14.21-150500.33.66.1fixed 5.14.21-150500.33.66.1

  In the Linux kernel, the following vulnerability has been resolved: mm/sparsemem: fix race in accessing memory_section->usage The below race is observed on a PFN which falls into the device memory region with the system memory configuration where PFN's are such that [ZONE_NORMA

• CVE-2023-52488MedMar 11, 2024
  affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

  In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO The SC16IS7XX IC supports a burst mode to access the FIFOs where the initial register address is sent ($00), followed by all the FIFO d

• CVE-2023-52486HigMar 11, 2024
  affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

  In the Linux kernel, the following vulnerability has been resolved: drm: Don't unref the same fb many times by mistake due to deadlock handling If we get a deadlock after the fb lookup in drm_mode_page_flip_ioctl() we proceed to unref the fb and then retry the whole thing from

• CVE-2024-26627MedMar 6, 2024
  affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler Inside scsi_eh_wakeup(), scsi_host_busy() is called & checked with host lock every time for deciding if error handler kthread needs to

• CVE-2024-26625HigMar 6, 2024
  affected < 5.14.21-150500.33.60.1fixed 5.14.21-150500.33.60.1

  In the Linux kernel, the following vulnerability has been resolved: llc: call sock_orphan() at release time syzbot reported an interesting trace [1] caused by a stale sk->sk_wq pointer in a closed llc socket. In commit ff7b11aa481f ("net: socket: set sock->sk to NULL after cal

• CVE-2023-52607MedMar 6, 2024
  affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

  In the Linux kernel, the following vulnerability has been resolved: powerpc/mm: Fix null-pointer dereference in pgtable_cache_add kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure. Ensure the allocation was successful by checking the p

• CVE-2023-52606HigMar 6, 2024
  affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

  In the Linux kernel, the following vulnerability has been resolved: powerpc/lib: Validate size for vector operations Some of the fp/vmx code in sstep.c assume a certain maximum size for the instructions being emulated. The size of those operations however is determined separate

• CVE-2023-52604HigMar 6, 2024
  affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

  In the Linux kernel, the following vulnerability has been resolved: FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree Syzkaller reported the following issue: UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dmap.c:2867:6 index 196694 is out of range for type 's8[1365]' (aka 's

• CVE-2023-52603HigMar 6, 2024
  affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

  In the Linux kernel, the following vulnerability has been resolved: UBSAN: array-index-out-of-bounds in dtSplitRoot Syzkaller reported the following issue: oop0: detected capacity change from 0 to 32768 UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dtree.c:1971:9 index -2 is

• CVE-2023-52602HigMar 6, 2024
  affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

  In the Linux kernel, the following vulnerability has been resolved: jfs: fix slab-out-of-bounds Read in dtSearch Currently while searching for current page in the sorted entry table of the page there is a out of bound access. Added a bound check to fix the error. Dave: Set ret

• CVE-2023-52601HigMar 6, 2024
  affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

  In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in dbAdjTree Currently there is a bound check missing in the dbAdjTree while accessing the dmt_stree. To add the required check added the bool is_ctl which is required to dete

• CVE-2023-52600HigMar 6, 2024
  affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

  In the Linux kernel, the following vulnerability has been resolved: jfs: fix uaf in jfs_evict_inode When the execution of diMount(ipimap) fails, the object ipimap that has been released may be accessed in diFreeSpecial(). Asynchronous ipimap release occurs when rcu_core() calls