VYPR

rpm package

suse/kernel-azure&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP5

pkg:rpm/suse/kernel-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP5

Vulnerabilities (2,432)

  • CVE-2023-52599HigMar 6, 2024
    affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

    In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in diNewExt [Syz report] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_imap.c:2360:2 index -878706688 is out of range for type 'struct iagctl[128]' CPU: 1 PID: 5065 Comm: syz

  • CVE-2023-52598HigMar 6, 2024
    affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

    In the Linux kernel, the following vulnerability has been resolved: s390/ptrace: handle setting of fpc register correctly If the content of the floating point control (fpc) register of a traced process is modified with the ptrace interface the new value is tested for validity b

  • CVE-2023-52597MedMar 6, 2024
    affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

    In the Linux kernel, the following vulnerability has been resolved: KVM: s390: fix setting of fpc register kvm_arch_vcpu_ioctl_set_fpu() allows to set the floating point control (fpc) register of a guest cpu. The new value is tested for validity by temporarily loading it into t

  • CVE-2023-52595MedMar 6, 2024
    affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

    In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: restart beacon queue when hardware reset When a hardware reset is triggered, all registers are reset, so all queues are forced to stop in hardware interface. However, mac80211 will not automatical

  • CVE-2023-52594HigMar 6, 2024
    affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

    In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() Fix an array-index-out-of-bounds read in ath9k_htc_txstatus(). The bug occurs when txs->cnt, data from a URB provided by a USB d

  • CVE-2023-52593MedMar 6, 2024
    affected < 5.14.21-150500.33.51.1fixed 5.14.21-150500.33.51.1

    In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap() Since 'ieee80211_beacon_get()' can return NULL, 'wfx_set_mfp_ap()' should check the return value before examining skb data. So convert the la

  • CVE-2023-52591HigMar 6, 2024
    affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

    In the Linux kernel, the following vulnerability has been resolved: reiserfs: Avoid touching renamed directory if parent does not change The VFS will not be locking moved directory if its parent does not change. Change reiserfs rename code to avoid touching renamed directory if

  • CVE-2023-52590HigMar 6, 2024
    affected < 5.14.21-150500.33.51.1fixed 5.14.21-150500.33.51.1

    In the Linux kernel, the following vulnerability has been resolved: ocfs2: Avoid touching renamed directory if parent does not change The VFS will not be locking moved directory if its parent does not change. Change ocfs2 rename code to avoid touching renamed directory if its p

  • CVE-2023-52589MedMar 6, 2024
    affected < 5.14.21-150500.33.51.1fixed 5.14.21-150500.33.51.1

    In the Linux kernel, the following vulnerability has been resolved: media: rkisp1: Fix IRQ disable race issue In rkisp1_isp_stop() and rkisp1_csi_disable() the driver masks the interrupts and then apparently assumes that the interrupt handler won't be running, and proceeds in t

  • CVE-2023-52587MedMar 6, 2024
    affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

    In the Linux kernel, the following vulnerability has been resolved: IB/ipoib: Fix mcast list locking Releasing the `priv->lock` while iterating the `priv->multicast_list` in `ipoib_mcast_join_task()` opens a window for `ipoib_mcast_dev_flush()` to remove the items while in the

  • CVE-2023-52586HigMar 6, 2024
    affected < 5.14.21-150500.33.57.1fixed 5.14.21-150500.33.57.1

    In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add mutex lock in control vblank irq Add a mutex lock to control vblank irq to synchronize vblank enable/disable operations happening from different threads to prevent race conditions while registe

  • CVE-2023-52585MedMar 6, 2024
    affected < 5.14.21-150500.33.51.1fixed 5.14.21-150500.33.51.1

    In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() Return invalid error code -EINVAL for invalid block id. Fixes the below: drivers/gpu/drm/amd/amdgpu/amdgpu_ras.c:1183 amdgpu

  • CVE-2023-52583MedMar 6, 2024
    affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

    In the Linux kernel, the following vulnerability has been resolved: ceph: fix deadlock or deadcode of misusing dget() The lock order is incorrect between denty and its parent, we should always make sure that the parent get the lock first. But since this deadcode is never used

  • CVE-2022-48630MedMar 5, 2024
    affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

    In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ The commit referenced in the Fixes tag removed the 'break' from the else branch in qcom_rng_read(), causing an infinite loop whenever 'ma

  • CVE-2022-48629HigMar 5, 2024
    affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

    In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - ensure buffer for generate is completely filled The generate function in struct rng_alg expects that the destination buffer is completely filled if the function returns 0. qcom_rng_read() can

  • CVE-2021-47108MedMar 4, 2024
    affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

    In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: hdmi: Perform NULL pointer check for mtk_hdmi_conf In commit 41ca9caaae0b ("drm/mediatek: hdmi: Add check for CEA modes only") a check for CEA modes was added to function mtk_hdmi_bridge_mode_vali

  • CVE-2021-47107CriMar 4, 2024
    affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

    In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix READDIR buffer overflow If a client sends a READDIR count argument that is too small (say, zero), then the buffer size calculation in the new init_dirlist helper functions results in an underflow, all

  • CVE-2021-47106HigMar 4, 2024
    affected < 5.14.21-150500.33.66.1fixed 5.14.21-150500.33.66.1

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy() We need to use list_for_each_entry_safe() iterator because we can not access @catchall after kfree_rcu() call. syzbot reported: BUG: KASA

  • CVE-2021-47105MedMar 4, 2024
    affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

    In the Linux kernel, the following vulnerability has been resolved: ice: xsk: return xsk buffers back to pool when cleaning the ring Currently we only NULL the xdp_buff pointer in the internal SW ring but we never give it back to the xsk buffer pool. This means that buffers can

  • CVE-2021-47104MedMar 4, 2024
    affected < 5.14.21-150500.33.48.1fixed 5.14.21-150500.33.48.1

    In the Linux kernel, the following vulnerability has been resolved: IB/qib: Fix memory leak in qib_user_sdma_queue_pkts() The wrong goto label was used for the error case and missed cleanup of the pkt allocation. Addresses-Coverity-ID: 1493352 ("Resource leak")

Page 105 of 122