suse/kernel-azure&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP6

Vulnerabilities (3,769)

• CVE-2024-27026HigMay 1, 2024
  affected < 6.4.0-150600.8.17.2fixed 6.4.0-150600.8.17.2

  In the Linux kernel, the following vulnerability has been resolved: vmxnet3: Fix missing reserved tailroom Use rbi->len instead of rcd->len for non-dataring packet. Found issue: XDP_WARN: xdp_update_frame_from_buff(line:278): Driver BUG: missing reserved tailroom WARNING:

• CVE-2024-27025MedMay 1, 2024
  affected < 6.4.0-150600.8.8.2fixed 6.4.0-150600.8.8.2

  In the Linux kernel, the following vulnerability has been resolved: nbd: null check for nla_nest_start nla_nest_start() may fail and return NULL. Insert a check and set errno based on other call sites within the same source code.

• CVE-2024-27024HigMay 1, 2024
  affected < 6.4.0-150600.8.11.1fixed 6.4.0-150600.8.11.1

  In the Linux kernel, the following vulnerability has been resolved: net/rds: fix WARNING in rds_conn_connect_if_down If connection isn't established yet, get_mr() will fail, trigger connection after get_mr().

• CVE-2023-52653MedMay 1, 2024
  affected < 6.4.0-150600.8.5.4fixed 6.4.0-150600.8.5.4

  In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix a memleak in gss_import_v2_context The ctx->mech_used.data allocated by kmemdup is not freed in neither gss_import_v2_context nor it only caller gss_krb5_import_sec_context, which frees ctx on error

• CVE-2023-52652MedMay 1, 2024
  affected < 6.4.0-150600.8.5.4fixed 6.4.0-150600.8.5.4

  In the Linux kernel, the following vulnerability has been resolved: NTB: fix possible name leak in ntb_register_device() If device_register() fails in ntb_register_device(), the device name allocated by dev_set_name() should be freed. As per the comment in device_register(), ca

• CVE-2024-27022HigMay 1, 2024
  affected < 6.4.0-150600.8.5.4fixed 6.4.0-150600.8.5.4

  In the Linux kernel, the following vulnerability has been resolved: fork: defer linking file vma until vma is fully initialized Thorvald reported a WARNING [1]. And the root cause is below race: CPU 1 CPU 2 fork hugetlbfs_fallocate dup_mmap hugetlbfs_punch_hole

• CVE-2024-27020HigMay 1, 2024
  affected < 6.4.0-150600.8.8.2fixed 6.4.0-150600.8.8.2

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() nft_unregister_expr() can concurrent with __nft_expr_type_get(), and there is not any protection when iterate over nf_tables_expressions li

• CVE-2024-27019HigMay 1, 2024
  affected < 6.4.0-150600.8.8.2fixed 6.4.0-150600.8.8.2

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() nft_unregister_obj() can concurrent with __nft_obj_type_get(), and there is not any protection when iterate over nf_tables_objects list in _

• CVE-2024-27018HigMay 1, 2024
  affected < 6.4.0-150600.8.37.1fixed 6.4.0-150600.8.37.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: br_netfilter: skip conntrack input hook for promisc packets For historical reasons, when bridge device is in promisc mode, packets that are directed to the taps follow bridge input hook path. This pa

• CVE-2024-27017HigMay 1, 2024
  affected < 6.4.0-150600.8.20.1fixed 6.4.0-150600.8.20.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: walk over current view on netlink dump The generation mask can be updated while netlink dump is in progress. The pipapo set backend walk iterator cannot rely on it to infer what view

• CVE-2024-27016HigMay 1, 2024
  affected < 6.4.0-150600.8.8.2fixed 6.4.0-150600.8.8.2

  In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: validate pppoe header Ensure there is sufficient room to access the protocol field of the PPPoe header. Validate it once before the flowtable lookup, then use a helper function to access p

• CVE-2024-27015MedMay 1, 2024
  affected < 6.4.0-150600.8.8.2fixed 6.4.0-150600.8.8.2

  In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: incorrect pppoe tuple pppoe traffic reaching ingress path does not match the flowtable entry because the pppoe header is expected to be at the network header offset. This bug causes a mism

• CVE-2024-27014MedMay 1, 2024
  affected < 6.4.0-150600.8.5.4fixed 6.4.0-150600.8.5.4

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent deadlock while disabling aRFS When disabling aRFS under the `priv->state_lock`, any scheduled aRFS works are canceled using the `cancel_work_sync` function, which waits for the work to end if

• CVE-2024-27013MedMay 1, 2024
  affected < 6.4.0-150600.8.5.4fixed 6.4.0-150600.8.5.4

  In the Linux kernel, the following vulnerability has been resolved: tun: limit printing rate when illegal packet received by tun dev vhost_worker will call tun call backs to receive packets. If too many illegal packets arrives, tun_do_read will keep dumping packet contents. Whe

• CVE-2024-27012HigMay 1, 2024
  affected < 6.4.0-150600.8.8.2fixed 6.4.0-150600.8.8.2

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: restore set elements when delete set fails From abort path, nft_mapelem_activate() needs to restore refcounters to the original state. Currently, it uses the set->ops->walk() to iterate ov

• CVE-2024-27011MedMay 1, 2024
  affected < 6.4.0-150600.8.11.1fixed 6.4.0-150600.8.11.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix memleak in map from abort path The delete set command does not rely on the transaction object for element removal, therefore, a combination of delete element + delete set from the abor

• CVE-2024-27010MedMay 1, 2024
  affected < 6.4.0-150600.8.11.1fixed 6.4.0-150600.8.11.1

  In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix mirred deadlock on device recursion When the mirred action is used on a classful egress qdisc and a packet is mirrored or redirected to self we hit a qdisc lock deadlock. See trace below. [.....

• CVE-2024-27008HigMay 1, 2024
  affected < 6.4.0-150600.8.5.4fixed 6.4.0-150600.8.5.4

  In the Linux kernel, the following vulnerability has been resolved: drm: nv04: Fix out of bounds access When Output Resource (dcb->or) value is assigned in fabricate_dcb_output(), there may be out of bounds access to dac_users array in case dcb->or is zero because ffs(dcb->or)

• CVE-2024-27004MedMay 1, 2024
  affected < 6.4.0-150600.8.5.4fixed 6.4.0-150600.8.5.4

  In the Linux kernel, the following vulnerability has been resolved: clk: Get runtime PM before walking tree during disable_unused Doug reported [1] the following hung task: INFO: task swapper/0:1 blocked for more than 122 seconds. Not tainted 5.15.149-21875-gf795ebc40e

• CVE-2024-27003MedMay 1, 2024
  affected < 6.4.0-150600.8.5.4fixed 6.4.0-150600.8.5.4

  In the Linux kernel, the following vulnerability has been resolved: clk: Get runtime PM before walking tree for clk_summary Similar to the previous commit, we should make sure that all devices are runtime resumed before printing the clk_summary through debugfs. Failure to do so