suse/kernel-default&distro=SUSE Linux Enterprise High Availability Extension 15 SP6

Vulnerabilities (4,170)

• CVE-2024-56584MedDec 27, 2024
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: io_uring/tctx: work around xa_store() allocation error issue syzbot triggered the following WARN_ON: WARNING: CPU: 0 PID: 16 at io_uring/tctx.c:51 __io_uring_free+0xfa/0x140 io_uring/tctx.c:51 which is the W

• CVE-2024-56557MedDec 27, 2024
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer The AD7923 was updated to support devices with 8 channels, but the size of tx_buf and ring_xfer was not increased accordingly, leading to a potenti

• CVE-2024-56675Dec 27, 2024
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors Uprobes always use bpf_prog_run_array_uprobe() under tasks-trace-RCU protection. But it is possible to attach a non-sleepable BPF program to a uprobe

• CVE-2024-56670Dec 27, 2024
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer Considering that in some extreme cases, when u_serial driver is accessed by multiple threads, Thread A is executing th

• CVE-2024-56667Dec 27, 2024
  affected < 6.4.0-150600.23.33.1fixed 6.4.0-150600.23.33.1

  In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix NULL pointer dereference in capture_engine When the intel_context structure contains NULL, it raises a NULL pointer dereference error in drm_info(). (cherry picked from commit 754302a5bc1bd8fd3b7

• CVE-2024-56665Dec 27, 2024
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog Syzbot reported [1] crash that happens for following tracing scenario: - create tracepoint perf event with attr.inherit=1, attach it to t

• CVE-2024-56664Dec 27, 2024
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix race between element replace and close() Element replace (with a socket different from the one stored) may race with socket's close() link popping & unlinking. __sock_map_delete() unconditiona

• CVE-2024-56663Dec 27, 2024
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one Since the netlink attribute range validation provides inclusive checking, the *max* of attribute NL80211_ATTR_MLO_LINK_ID should be IEEE80211_MLD_MAX_NUM_L

• CVE-2024-56662Dec 27, 2024
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl Fix an issue detected by syzbot with KASAN: BUG: KASAN: vmalloc-out-of-bounds in cmd_to_func drivers/acpi/nfit/ core.c:416 [inline] BUG: KASAN: vmalloc-o

• CVE-2024-56661Dec 27, 2024
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL deref in cleanup_bearer() syzbot found [1] that after blamed commit, ub->ubsock->sk was NULL when attempting the atomic_dec() : atomic_dec(&tipc_net(sock_net(ub->ubsock->sk))->wq_count); Fix th

• CVE-2024-56660Dec 27, 2024
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, prevent potential error pointer dereference The dr_domain_add_vport_cap() function generally returns NULL on error but sometimes we want it to return ERR_PTR(-EBUSY) so the caller can retry. The

• CVE-2024-56659Dec 27, 2024
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: net: lapb: increase LAPB_HEADER_LEN It is unclear if net/lapb code is supposed to be ready for 8021q. We can at least avoid crashes like the following : skbuff: skb_under_panic: text:ffffffff8aabe1f6 len:24 p

• CVE-2024-56658Dec 27, 2024
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: net: defer final 'struct net' free in netns dismantle Ilya reported a slab-use-after-free in dst_destroy [1] Issue is in xfrm6_net_init() and xfrm4_net_init() : They copy xfrm[46]_dst_ops_template into net->x

• CVE-2024-56656Dec 27, 2024
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips The 5760X (P7) chip's HW GRO/LRO interface is very similar to that of the previous generation (5750X or P5). However, the aggregation ID fields i

• CVE-2024-56654Dec 27, 2024
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating The usage of rcu_read_(un)lock while inside list_for_each_entry_rcu is not safe since for the most part entries fetched this way shall be treate

• CVE-2024-56651Dec 27, 2024
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: can: hi311x: hi3110_can_ist(): fix potential use-after-free The commit a22bd630cfff ("can: hi311x: do not report txerr and rxerr during bus-off") removed the reporting of rxerr and txerr even in case of correct

• CVE-2024-56650Dec 27, 2024
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: fix LED ID check in led_tg_check() Syzbot has reported the following BUG detected by KASAN: BUG: KASAN: slab-out-of-bounds in strlen+0x58/0x70 Read of size 1 at addr ffff8881022da0c8 by ta

• CVE-2024-56649Dec 27, 2024
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: net: enetc: Do not configure preemptible TCs if SIs do not support Both ENETC PF and VF drivers share enetc_setup_tc_mqprio() to configure MQPRIO. And enetc_setup_tc_mqprio() calls enetc_change_preemptible_tcs(

• CVE-2024-56648Dec 27, 2024
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: net: hsr: avoid potential out-of-bound access in fill_frame_info() syzbot is able to feed a packet with 14 bytes, pretending it is a vlan one. Since fill_frame_info() is relying on skb->mac_len already, extend

• CVE-2024-56645Dec 27, 2024
  affected < 6.4.0-150600.23.33.1fixed 6.4.0-150600.23.33.1

  In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939_session_new(): fix skb reference counting Since j1939_session_skb_queue() does an extra skb_get() for each new skb, do the same for the initial one in j1939_session_new() to avoid refcount und