suse/kernel-azure&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5

Vulnerabilities (1,481)

• CVE-2021-47506May 24, 2024
  affected < 4.12.14-16.188.1fixed 4.12.14-16.188.1

  In the Linux kernel, the following vulnerability has been resolved: nfsd: fix use-after-free due to delegation race A delegation break could arrive as soon as we've called vfs_setlease. A delegation break runs a callback which immediately (in nfsd4_cb_recall_prepare) adds the

• CVE-2021-47501May 24, 2024
  affected < 4.12.14-16.194.1fixed 4.12.14-16.194.1

  In the Linux kernel, the following vulnerability has been resolved: i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc When trying to dump VFs VSI RX/TX descriptors using debugfs there was a crash due to NULL pointer dereference in i40e_dbg_dump_desc. Added a check to i40

• CVE-2021-47500May 24, 2024
  affected < 4.12.14-16.188.1fixed 4.12.14-16.188.1

  In the Linux kernel, the following vulnerability has been resolved: iio: mma8452: Fix trigger reference couting The mma8452 driver directly assigns a trigger to the struct iio_dev. The IIO core when done using this trigger will call `iio_trigger_put()` to drop the reference cou

• CVE-2024-36013May 23, 2024
  affected < 4.12.14-16.197.1fixed 4.12.14-16.197.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() Extend a critical section to prevent chan from early freeing. Also make the l2cap_connect() return type void. Nothing is using the returned value but

• CVE-2021-47498May 22, 2024
  affected < 4.12.14-16.194.1fixed 4.12.14-16.194.1

  In the Linux kernel, the following vulnerability has been resolved: dm rq: don't queue request to blk-mq during DM suspend DM uses blk-mq's quiesce/unquiesce to stop/start device mapper queue. But blk-mq's unquiesce may come from outside events, such as elevator switch, updati

• CVE-2021-47497May 22, 2024
  affected < 4.12.14-16.188.1fixed 4.12.14-16.188.1

  In the Linux kernel, the following vulnerability has been resolved: nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells If a cell has 'nbits' equal to a multiple of BITS_PER_BYTE the logic *p &= GENMASK((cell->nbits%BITS_PER_BYTE) - 1, 0); will become undefined behavi

• CVE-2021-47496May 22, 2024
  affected < 4.12.14-16.188.1fixed 4.12.14-16.188.1

  In the Linux kernel, the following vulnerability has been resolved: net/tls: Fix flipped sign in tls_err_abort() calls sk->sk_err appears to expect a positive value, a convention that ktls doesn't always follow and that leads to memory corruption in other code. For instance,

• CVE-2021-47495May 22, 2024
  affected < 4.12.14-16.188.1fixed 4.12.14-16.188.1

  In the Linux kernel, the following vulnerability has been resolved: usbnet: sanity check for maxpacket maxpacket of 0 makes no sense and oopses as we need to divide by it. Give up. V2: fixed typo in log and stylistic issues

• CVE-2021-47485May 22, 2024
  affected < 4.12.14-16.188.1fixed 4.12.14-16.188.1

  In the Linux kernel, the following vulnerability has been resolved: IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields Overflowing either addrlimit or bytes_togo can allow userspace to trigger a buffer overflow of kernel memory. Check for overflows in all t

• CVE-2021-47483May 22, 2024
  affected < 4.12.14-16.188.1fixed 4.12.14-16.188.1

  In the Linux kernel, the following vulnerability has been resolved: regmap: Fix possible double-free in regcache_rbtree_exit() In regcache_rbtree_insert_to_block(), when 'present' realloc failed, the 'blk' which is supposed to assign to 'rbnode->block' will be freed, so 'rbnode

• CVE-2021-47480May 22, 2024
  affected < 4.12.14-16.188.1fixed 4.12.14-16.188.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: core: Put LLD module refcnt after SCSI device is released SCSI host release is triggered when SCSI device is freed. We have to make sure that the low-level device driver module won't be unloaded before SC

• CVE-2021-47478May 22, 2024
  affected < 4.12.14-16.188.1fixed 4.12.14-16.188.1

  In the Linux kernel, the following vulnerability has been resolved: isofs: Fix out of bound access for corrupted isofs image When isofs image is suitably corrupted isofs_read_inode() can read data beyond the end of buffer. Sanity-check the directory entry length before using it

• CVE-2021-47473May 22, 2024
  affected < 4.12.14-16.188.1fixed 4.12.14-16.188.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els() Commit 8c0eb596baa5 ("[SCSI] qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()"), intended to change: bsg_j

• CVE-2021-47468May 22, 2024
  affected < 4.12.14-16.194.1fixed 4.12.14-16.194.1

  In the Linux kernel, the following vulnerability has been resolved: isdn: mISDN: Fix sleeping function called from invalid context The driver can call card->isac.release() function from an atomic context. Fix this by calling this function after releasing the lock. The followi

• CVE-2021-47460May 22, 2024
  affected < 4.12.14-16.188.1fixed 4.12.14-16.188.1

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix data corruption after conversion from inline format Commit 6dbf7bb55598 ("fs: Don't invalidate page buffers in block_write_full_page()") uncovered a latent bug in ocfs2 conversion from inline inode f

• CVE-2021-47458May 22, 2024
  affected < 4.12.14-16.188.1fixed 4.12.14-16.188.1

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: mount fails with buffer overflow in strlen Starting with kernel 5.11 built with CONFIG_FORTIFY_SOURCE mouting an ocfs2 filesystem with either o2cb or pcmk cluster stack fails with the trace below. Probl

• CVE-2021-47456May 22, 2024
  affected < 4.12.14-16.188.1fixed 4.12.14-16.188.1

  In the Linux kernel, the following vulnerability has been resolved: can: peak_pci: peak_pci_remove(): fix UAF When remove the module peek_pci, referencing 'chan' again after releasing 'dev' will cause UAF. Fix this by releasing 'dev' later. The following log reveals it: [

• CVE-2021-47445May 22, 2024
  affected < 4.12.14-16.191.1fixed 4.12.14-16.191.1

  In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix null pointer dereference on pointer edp The initialization of pointer dev dereferences pointer edp before edp is null checked, so there is a potential null pointer deference issue. Fix this by only

• CVE-2021-47441May 22, 2024
  affected < 4.12.14-16.194.1fixed 4.12.14-16.194.1

  In the Linux kernel, the following vulnerability has been resolved: mlxsw: thermal: Fix out-of-bounds memory accesses Currently, mlxsw allows cooling states to be set above the maximum cooling state supported by the driver: # cat /sys/class/thermal/thermal_zone2/cdev0/type m

• CVE-2021-47438May 22, 2024
  affected < 4.12.14-16.194.1fixed 4.12.14-16.194.1

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path Prior to this patch in case mlx5_core_destroy_cq() failed it returns without completing all destroy operations and that leads to memory leak. Inst