suse/kernel-azure&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP6

Vulnerabilities (3,769)

• CVE-2023-53304Sep 16, 2025
  affected < 6.4.0-150600.8.52.1fixed 6.4.0-150600.8.52.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: fix overlap expiration walk The lazy gc on insert that should remove timed-out entries fails to release the other half of the interval, if any. Can be reproduced with tests/shell/tes

• CVE-2025-39835HigSep 16, 2025
  affected < 6.4.0-150600.8.52.1fixed 6.4.0-150600.8.52.1

  In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code ENODATA (aka ENOATTR) has a very specific meaning in the xfs xattr code; namely, that the requested attribute name could not be found. However, a mediu

• CVE-2025-39828HigSep 16, 2025
  affected < 6.4.0-150600.8.52.1fixed 6.4.0-150600.8.52.1

  In the Linux kernel, the following vulnerability has been resolved: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). syzbot reported the splat below. [0] When atmtcp_v_open() or atmtcp_v_close() is called via connect() or close(), atmtcp_send_control() is called

• CVE-2025-39827MedSep 16, 2025
  affected < 6.4.0-150600.8.52.1fixed 6.4.0-150600.8.52.1

  In the Linux kernel, the following vulnerability has been resolved: net: rose: include node references in rose_neigh refcount Current implementation maintains two separate reference counting mechanisms: the 'count' field in struct rose_neigh tracks references from rose_node str

• CVE-2025-39826HigSep 16, 2025
  affected < 6.4.0-150600.8.52.1fixed 6.4.0-150600.8.52.1

  In the Linux kernel, the following vulnerability has been resolved: net: rose: convert 'use' field to refcount_t The 'use' field in struct rose_neigh is used as a reference counter but lacks atomicity. This can lead to race conditions where a rose_neigh structure is freed while

• CVE-2025-39825MedSep 16, 2025
  affected < 6.4.0-150600.8.52.1fixed 6.4.0-150600.8.52.1

  In the Linux kernel, the following vulnerability has been resolved: smb: client: fix race with concurrent opens in rename(2) Besides sending the rename request to the server, the rename process also involves closing any deferred close, waiting for outstanding I/O to complete as

• CVE-2025-39824HigSep 16, 2025
  affected < 6.4.0-150600.8.52.1fixed 6.4.0-150600.8.52.1

  In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix UAF via HID_CLAIMED_INPUT validation After hid_hw_start() is called hidinput_connect() will eventually be called to set up the device with the input layer since the HID_CONNECT_DEFAULT connect ma

• CVE-2025-39823HigSep 16, 2025
  affected < 6.4.0-150600.8.52.1fixed 6.4.0-150600.8.52.1

  In the Linux kernel, the following vulnerability has been resolved: KVM: x86: use array_index_nospec with indices that come from guest min and dest_id are guest-controlled indices. Using array_index_nospec() after the bounds checks clamps these values to mitigate speculative ex

• CVE-2025-39819MedSep 16, 2025
  affected < 6.4.0-150600.8.58.1fixed 6.4.0-150600.8.58.1

  In the Linux kernel, the following vulnerability has been resolved: fs/smb: Fix inconsistent refcnt update A possible inconsistent update of refcount was identified in `smb2_compound_op`. Such inconsistent update could lead to possible resource leaks. Why it is a possible bug:

• CVE-2025-39813MedSep 16, 2025
  affected < 6.4.0-150600.8.55.1fixed 6.4.0-150600.8.55.1

  In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump When calling ftrace_dump_one() concurrently with reading trace_pipe, a WARN_ON_ONCE() in trace_printk_seq() can be triggered due to a race co

• CVE-2025-39812MedSep 16, 2025
  affected < 6.4.0-150600.8.55.1fixed 6.4.0-150600.8.55.1

  In the Linux kernel, the following vulnerability has been resolved: sctp: initialize more fields in sctp_v6_from_sk() syzbot found that sin6_scope_id was not properly initialized, leading to undefined behavior. Clear sin6_scope_id and sin6_flowinfo. BUG: KMSAN: uninit-value i

• CVE-2025-39808MedSep 16, 2025
  affected < 6.4.0-150600.8.52.1fixed 6.4.0-150600.8.52.1

  In the Linux kernel, the following vulnerability has been resolved: HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() in ntrig_report_version(), hdev parameter passed from hid_probe(). sending descriptor to /dev/uhid can make hdev->dev.parent->parent to

• CVE-2025-39806HigSep 16, 2025
  affected < 6.4.0-150600.8.52.1fixed 6.4.0-150600.8.52.1

  In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() A malicious HID device can trigger a slab out-of-bounds during mt_report_fixup() by passing in report descriptor smaller than 607 bytes. mt_re

• CVE-2025-39833Sep 16, 2025
  affected < 6.4.0-150600.8.52.1fixed 6.4.0-150600.8.52.1

  In the Linux kernel, the following vulnerability has been resolved: mISDN: hfcpci: Fix warning when deleting uninitialized timer With CONFIG_DEBUG_OBJECTS_TIMERS unloading hfcpci module leads to the following splat: [ 250.215892] ODEBUG: assert_init not available (active stat

• CVE-2025-39832Sep 16, 2025
  affected < 6.4.0-150600.8.52.1fixed 6.4.0-150600.8.52.1

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix lockdep assertion on sync reset unload event Fix lockdep assertion triggered during sync reset unload event. When the sync reset flow is initiated using the devlink reload fw_activate option, the

• CVE-2025-39810Sep 16, 2025
  affected < 6.4.0-150600.8.52.1fixed 6.4.0-150600.8.52.1

  In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix memory corruption when FW resources change during ifdown bnxt_set_dflt_rings() assumes that it is always called before any TC has been created. So it doesn't take bp->num_tc into account and assum

• CVE-2025-39805Sep 16, 2025
  affected < 6.4.0-150600.8.58.1fixed 6.4.0-150600.8.58.1

  In the Linux kernel, the following vulnerability has been resolved: net: macb: fix unregister_netdev call order in macb_remove() When removing a macb device, the driver calls phy_exit() before unregister_netdev(). This leads to a WARN from kernfs: ------------[ cut here ]---

• CVE-2023-53292MedSep 16, 2025
  affected < 6.4.0-150600.8.52.1fixed 6.4.0-150600.8.52.1

  In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none After grabbing q->sysfs_lock, q->elevator may become NULL because of elevator switch. Fix the NULL dereference on q->elevator by checking i

• CVE-2023-53303Sep 16, 2025
  affected < 6.4.0-150600.8.52.1fixed 6.4.0-150600.8.52.1

  In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap api: Fix possible memory leak for vcap_dup_rule() Inject fault When select CONFIG_VCAP_KUNIT_TEST, the below memory leak occurs. If kzalloc() for duprule succeeds, but the following kmemdup

• CVE-2023-53291Sep 16, 2025
  affected < 6.4.0-150600.8.52.1fixed 6.4.0-150600.8.52.1

  In the Linux kernel, the following vulnerability has been resolved: rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale Running the 'kfree_rcu_test' test case [1] results in a splat [2]. The root cause is the kfree_scale_thread thread(s) continue running af