suse/kernel-azure&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP5

Vulnerabilities (2,432)

• CVE-2024-38599HigJun 19, 2024
  affected < 5.14.21-150500.33.60.1fixed 5.14.21-150500.33.60.1

  In the Linux kernel, the following vulnerability has been resolved: jffs2: prevent xattr node from overflowing the eraseblock Add a check to make sure that the requested xattr node size is no larger than the eraseblock minus the cleanmarker. Unlike the usual inode nodes, the x

• CVE-2024-38598MedJun 19, 2024
  affected < 5.14.21-150500.33.63.1fixed 5.14.21-150500.33.63.1

  In the Linux kernel, the following vulnerability has been resolved: md: fix resync softlockup when bitmap size is less than array size Is is reported that for dm-raid10, lvextend + lvchange --syncaction will trigger following softlockup: kernel:watchdog: BUG: soft lockup - CPU

• CVE-2024-38597MedJun 19, 2024
  affected < 5.14.21-150500.33.60.1fixed 5.14.21-150500.33.60.1

  In the Linux kernel, the following vulnerability has been resolved: eth: sungem: remove .ndo_poll_controller to avoid deadlocks Erhard reports netpoll warnings from sungem: netpoll_send_skb_on_dev(): eth0 enabled interrupts in poll (gem_start_xmit+0x0/0x398) WARNING: CPU:

• CVE-2024-38596MedJun 19, 2024
  affected < 5.14.21-150500.33.69.1fixed 5.14.21-150500.33.69.1

  In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg A data-race condition has been identified in af_unix. In one data path, the write function unix_release_sock() atomically writes to sk->sk_shutdo

• CVE-2024-38594MedJun 19, 2024
  affected < 5.14.21-150500.33.60.1fixed 5.14.21-150500.33.60.1

  In the Linux kernel, the following vulnerability has been resolved: net: stmmac: move the EST lock to struct stmmac_priv Reinitialize the whole EST structure would also reset the mutex lock which is embedded in the EST structure, and then trigger the following warning. To addre

• CVE-2024-38591MedJun 19, 2024
  affected < 5.14.21-150500.33.60.1fixed 5.14.21-150500.33.60.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix deadlock on SRQ async events. xa_lock for SRQ table may be required in AEQ. Use xa_store_irq()/ xa_erase_irq() to avoid deadlock.

• CVE-2024-38590HigJun 19, 2024
  affected < 5.14.21-150500.33.60.1fixed 5.14.21-150500.33.60.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Modify the print level of CQE error Too much print may lead to a panic in kernel. Change ibdev_err() to ibdev_err_ratelimited(), and change the printing level of cqe dump to debug level.

• CVE-2024-38589MedJun 19, 2024
  affected < 5.14.21-150500.33.75.1fixed 5.14.21-150500.33.75.1

  In the Linux kernel, the following vulnerability has been resolved: netrom: fix possible dead-lock in nr_rt_ioctl() syzbot loves netrom, and found a possible deadlock in nr_rt_ioctl [1] Make sure we always acquire nr_node_list_lock before nr_node_lock(nr_node) [1] WARNING: po

• CVE-2024-38588HigJun 19, 2024
  affected < 5.14.21-150500.33.63.1fixed 5.14.21-150500.33.63.1

  In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix possible use-after-free issue in ftrace_location() KASAN reports a bug: BUG: KASAN: use-after-free in ftrace_location+0x90/0x120 Read of size 8 at addr ffff888141d40010 by task insmod/424 CPU

• CVE-2024-38587HigJun 19, 2024
  affected < 5.14.21-150500.33.60.1fixed 5.14.21-150500.33.60.1

  In the Linux kernel, the following vulnerability has been resolved: speakup: Fix sizeof() vs ARRAY_SIZE() bug The "buf" pointer is an array of u16 values. This code should be using ARRAY_SIZE() (which is 256) instead of sizeof() (which is 512), otherwise it can the still got o

• CVE-2024-38586HigJun 19, 2024
  affected < 5.14.21-150500.33.63.1fixed 5.14.21-150500.33.63.1

  In the Linux kernel, the following vulnerability has been resolved: r8169: Fix possible ring buffer corruption on fragmented Tx packets. An issue was found on the RTL8125b when transmitting small fragmented packets, whereby invalid entries were inserted into the transmit ring b

• CVE-2024-38583HigJun 19, 2024
  affected < 5.14.21-150500.33.60.1fixed 5.14.21-150500.33.60.1

  In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix use-after-free of timer for log writer thread Patch series "nilfs2: fix log writer related issues". This bug fix series covers three nilfs2 log writer-related issues, including a timer use-after-fr

• CVE-2024-38582MedJun 19, 2024
  affected < 5.14.21-150500.33.60.1fixed 5.14.21-150500.33.60.1

  In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential hang in nilfs_detach_log_writer() Syzbot has reported a potential hang in nilfs_detach_log_writer() called during nilfs2 unmount. Analysis revealed that this is because nilfs_segctor_sync

• CVE-2024-38581HigJun 19, 2024
  affected < 5.14.21-150500.33.60.1fixed 5.14.21-150500.33.60.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/mes: fix use-after-free issue Delete fence fallback timer to fix the ramdom use-after-free issue. v2: move to amdgpu_mes.c

• CVE-2024-38580HigJun 19, 2024
  affected < 5.14.21-150500.33.60.1fixed 5.14.21-150500.33.60.1

  In the Linux kernel, the following vulnerability has been resolved: epoll: be better about file lifetimes epoll can call out to vfs_poll() with a file pointer that may race with the last 'fput()'. That would make f_count go down to zero, and while the ep->mtx locking means that

• CVE-2024-38579MedJun 19, 2024
  affected < 5.14.21-150500.33.60.1fixed 5.14.21-150500.33.60.1

  In the Linux kernel, the following vulnerability has been resolved: crypto: bcm - Fix pointer arithmetic In spu2_dump_omd() value of ptr is increased by ciph_key_len instead of hash_iv_len which could lead to going beyond the buffer boundaries. Fix this bug by changing ciph_key

• CVE-2024-38578HigJun 19, 2024
  affected < 5.14.21-150500.33.60.1fixed 5.14.21-150500.33.60.1

  In the Linux kernel, the following vulnerability has been resolved: ecryptfs: Fix buffer size for tag 66 packet The 'TAG 66 Packet Format' description is missing the cipher code and checksum fields that are packed into the message packet. As a result, the buffer allocated for t

• CVE-2024-38577HigJun 19, 2024
  affected < 5.14.21-150500.33.75.1fixed 5.14.21-150500.33.75.1

  In the Linux kernel, the following vulnerability has been resolved: rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow There is a possibility of buffer overflow in show_rcu_tasks_trace_gp_kthread() if counters, passed to sprintf() are huge. Counter numbers, needed f

• CVE-2024-38573HigJun 19, 2024
  affected < 5.14.21-150500.33.60.1fixed 5.14.21-150500.33.60.1

  In the Linux kernel, the following vulnerability has been resolved: cppc_cpufreq: Fix possible null pointer dereference cppc_cpufreq_get_rate() and hisi_cppc_cpufreq_get_rate() can be called from different places with various parameters. So cpufreq_cpu_get() can return null as

• CVE-2024-38571MedJun 19, 2024
  affected < 5.14.21-150500.33.60.1fixed 5.14.21-150500.33.60.1

  In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/tsens: Fix null pointer dereference compute_intercept_slope() is called from calibrate_8960() (in tsens-8960.c) as compute_intercept_slope(priv, p1, NULL, ONE_PT_CALIB) which lead to null pointe