suse/kernel-default&distro=SUSE Linux Enterprise High Availability Extension 15 SP6

Vulnerabilities (4,170)

• CVE-2024-40936Jul 12, 2024
  affected < 6.4.0-150600.23.22.1fixed 6.4.0-150600.23.22.1

  In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix memregion leaks in devm_cxl_add_region() Move the mode verification to __create_region() before allocating the memregion to avoid the memregion leaks.

• CVE-2024-40935Jul 12, 2024
  affected < 6.4.0-150600.23.17.1fixed 6.4.0-150600.23.17.1

  In the Linux kernel, the following vulnerability has been resolved: cachefiles: flush all requests after setting CACHEFILES_DEAD In ondemand mode, when the daemon is processing an open request, if the kernel flags the cache as CACHEFILES_DEAD, the cachefiles_daemon_write() will

• CVE-2024-40932Jul 12, 2024
  affected < 6.4.0-150600.23.22.1fixed 6.4.0-150600.23.22.1

  In the Linux kernel, the following vulnerability has been resolved: drm/exynos/vidi: fix memory leak in .get_modes() The duplicated EDID is never freed. Fix it.

• CVE-2024-40931Jul 12, 2024
  affected < 6.4.0-150600.23.17.1fixed 6.4.0-150600.23.17.1

  In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure snd_una is properly initialized on connect This is strictly related to commit fb7a0d334894 ("mptcp: ensure snd_nxt is properly initialized on connect"). It turns out that syzkaller can trigger the

• CVE-2024-40930Jul 12, 2024
  affected < 6.4.0-150600.23.22.1fixed 6.4.0-150600.23.22.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate HE operation element parsing Validate that the HE operation element has the correct length before parsing it.

• CVE-2024-40929Jul 12, 2024
  affected < 6.4.0-150600.23.22.1fixed 6.4.0-150600.23.22.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids In some versions of cfg80211, the ssids poinet might be a valid one even though n_ssids is 0. Accessing the pointer in this case will cuase an out-of

• CVE-2024-40928Jul 12, 2024
  affected < 6.4.0-150600.23.17.1fixed 6.4.0-150600.23.17.1

  In the Linux kernel, the following vulnerability has been resolved: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() Clang static checker (scan-build) warning: net/ethtool/ioctl.c:line 2233, column 2 Called function pointer is null (null dereference). R

• CVE-2024-40927Jul 12, 2024
  affected < 6.4.0-150600.23.22.1fixed 6.4.0-150600.23.22.1

  In the Linux kernel, the following vulnerability has been resolved: xhci: Handle TD clearing for multiple streams case When multiple streams are in use, multiple TDs might be in flight when an endpoint is stopped. We need to issue a Set TR Dequeue Pointer for each, to ensure ev

• CVE-2024-40926Jul 12, 2024
  affected < 6.4.0-150600.23.22.1fixed 6.4.0-150600.23.22.1

  In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: don't attempt to schedule hpd_work on headless cards If the card doesn't have display hardware, hpd_work and hpd_lock are left uninitialized which causes BUG when attempting to schedule hpd_work on

• CVE-2024-40925Jul 12, 2024
  affected < 6.4.0-150600.23.17.1fixed 6.4.0-150600.23.17.1

  In the Linux kernel, the following vulnerability has been resolved: block: fix request.queuelist usage in flush Friedrich Weber reported a kernel crash problem and bisected to commit 81ada09cc25e ("blk-flush: reuse rq queuelist in flush state machine"). The root cause is that

• CVE-2024-40924Jul 12, 2024
  affected < 6.4.0-150600.23.22.1fixed 6.4.0-150600.23.22.1

  In the Linux kernel, the following vulnerability has been resolved: drm/i915/dpt: Make DPT object unshrinkable In some scenarios, the DPT object gets shrunk but the actual framebuffer did not and thus its still there on the DPT's vm->bound_list. Then it tries to rewrite the PTE

• CVE-2024-40923Jul 12, 2024
  affected < 6.4.0-150600.23.17.1fixed 6.4.0-150600.23.17.1

  In the Linux kernel, the following vulnerability has been resolved: vmxnet3: disable rx data ring on dma allocation failure When vmxnet3_rq_create() fails to allocate memory for rq->data_ring.base, the subsequent call to vmxnet3_rq_destroy_all_rxdataring does not reset rq->data

• CVE-2024-40922Jul 12, 2024
  affected < 6.4.0-150600.23.22.1fixed 6.4.0-150600.23.22.1

  In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: don't lock while !TASK_RUNNING There is a report of io_rsrc_ref_quiesce() locking a mutex while not TASK_RUNNING, which is due to forgetting restoring the state back after io_run_task_work_sig()

• CVE-2024-40921Jul 12, 2024
  affected < 6.4.0-150600.23.22.1fixed 6.4.0-150600.23.22.1

  In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state Pass the already obtained vlan group pointer to br_mst_vlan_set_state() instead of dereferencing it again. Each caller has already correctly d

• CVE-2024-40920Jul 12, 2024
  affected < 6.4.0-150600.23.22.1fixed 6.4.0-150600.23.22.1

  In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state I converted br_mst_set_state to RCU to avoid a vlan use-after-free but forgot to change the vlan group dereference helper. Switch to vlan group RCU

• CVE-2024-40919Jul 12, 2024
  affected < 6.4.0-150600.23.17.1fixed 6.4.0-150600.23.17.1

  In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() In case of token is released due to token->state == BNXT_HWRM_DEFERRED, released token (set to NULL) is used in log messag

• CVE-2024-40914Jul 12, 2024
  affected < 6.4.0-150600.23.30.1fixed 6.4.0-150600.23.30.1

  In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: don't unpoison huge_zero_folio When I did memory failure tests recently, below panic occurs: kernel BUG at include/linux/mm.h:1135! invalid opcode: 0000 [#1] PREEMPT SMP NOPTI CPU: 9 PID: 13

• CVE-2024-40913Jul 12, 2024
  affected < 6.4.0-150600.23.22.1fixed 6.4.0-150600.23.22.1

  In the Linux kernel, the following vulnerability has been resolved: cachefiles: defer exposing anon_fd until after copy_to_user() succeeds After installing the anonymous fd, we can now see it in userland and close it. However, at this point we may not have gotten the reference

• CVE-2024-40911Jul 12, 2024
  affected < 6.4.0-150600.23.22.1fixed 6.4.0-150600.23.22.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Lock wiphy in cfg80211_get_station Wiphy should be locked before calling rdev_get_station() (see lockdep assert in ieee80211_get_station()). This fixes the following kernel NULL dereference:

• CVE-2024-40910Jul 12, 2024
  affected < 6.4.0-150600.23.22.1fixed 6.4.0-150600.23.22.1

  In the Linux kernel, the following vulnerability has been resolved: ax25: Fix refcount imbalance on inbound connections When releasing a socket in ax25_release(), we call netdev_put() to decrease the refcount on the associated ax.25 device. However, the execution path for accep