suse/kernel-default&distro=SUSE Linux Enterprise High Availability Extension 15 SP6

Vulnerabilities (4,170)

• CVE-2024-57795Jan 15, 2025
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Remove the direct link to net_device The similar patch in siw is in the link: https://git.kernel.org/rdma/rdma/c/16b87037b48889 This problem also occurred in RXE. The following analyze this problem.

• CVE-2024-39282Jan 15, 2025
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: Fix FSM command timeout issue When driver processes the internal state change command, it use an asynchronous thread to process the command operation. If the main thread detects that the task h

• CVE-2024-36476Jan 15, 2025
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Ensure 'ib_sge list' is accessible Move the declaration of the 'ib_sge list' variable outside the 'always_invalidate' block to ensure it remains accessible for use throughout the function. Previousl

• CVE-2025-21629Jan 15, 2025
  affected < 6.4.0-150600.23.53.1fixed 6.4.0-150600.23.53.1

  In the Linux kernel, the following vulnerability has been resolved: net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets The blamed commit disabled hardware offoad of IPv6 packets with extension headers on devices that advertise NETIF_F_IPV6_CSUM, based on the definition

• CVE-2024-57903Jan 15, 2025
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: net: restrict SO_REUSEPORT to inet sockets After blamed commit, crypto sockets could accidentally be destroyed from RCU call back, as spotted by zyzbot [1]. Trying to acquire a mutex in RCU callback is not all

• CVE-2024-57900Jan 15, 2025
  affected < 6.4.0-150600.23.47.2fixed 6.4.0-150600.23.47.2

  In the Linux kernel, the following vulnerability has been resolved: ila: serialize calls to nf_register_net_hooks() syzbot found a race in ila_add_mapping() [1] commit 031ae72825ce ("ila: call nf_unregister_net_hooks() sooner") attempted to fix a similar issue. Looking at the

• CVE-2024-57899Jan 15, 2025
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix mbss changed flags corruption on 32 bit systems On 32-bit systems, the size of an unsigned long is 4 bytes, while a u64 is 8 bytes. Therefore, when using or_each_set_bit(bit, &bits, sizeof(c

• CVE-2024-57897Jan 15, 2025
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Correct the migration DMA map direction The SVM DMA device map direction should be set the same as the DMA unmap setting, otherwise the DMA core will report the following warning. Before finialize

• CVE-2024-57896Jan 15, 2025
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount During the unmount path, at close_ctree(), we first stop the cleaner kthread, using kthread_stop() which frees the associated t

• CVE-2024-57893Jan 15, 2025
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Fix races at processing SysEx messages OSS sequencer handles the SysEx messages split in 6 bytes packets, and ALSA sequencer OSS layer tries to combine those. It stores the data in the internal

• CVE-2024-57892Jan 15, 2025
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv When mounting ocfs2 and then remounting it as read-only, a slab-use-after-free occurs after the user uses a syscall to quota_getnextquota. Specif

• CVE-2024-57890Jan 15, 2025
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Prevent integer overflow issue In the expression "cmd.wqe_size * cmd.wr_count", both variables are u32 values that come from the user so the multiplication can lead to integer wrapping. Then we pa

• CVE-2024-57889Jan 15, 2025
  affected < 6.4.0-150600.23.42.2fixed 6.4.0-150600.23.42.2

  In the Linux kernel, the following vulnerability has been resolved: pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking If a device uses MCP23xxx IO expander to receive IRQs, the following bug can happen: BUG: sleeping function called from invalid context

• CVE-2024-57888Jan 15, 2025
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker After commit 746ae46c1113 ("drm/sched: Mark scheduler work queues with WQ_MEM_RECLAIM") amdgpu started seeing the following

• CVE-2024-57887Jan 15, 2025
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: drm: adv7511: Fix use-after-free in adv7533_attach_dsi() The host_node pointer was assigned and freed in adv7533_parse_dt(), and later, adv7533_attach_dsi() uses the same. Fix this use-after-free issue by dropp

• CVE-2024-57884Jan 15, 2025
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() The task sometimes continues looping in throttle_direct_reclaim() because allow_direct_reclaim(pgdat) keeps returning fal

• CVE-2024-57882Jan 15, 2025
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: mptcp: fix TCP options overflow. Syzbot reported the following splat: Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-dere

• CVE-2024-57876Jan 11, 2025
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Fix resetting msg rx state after topology removal If the MST topology is removed during the reception of an MST down reply or MST up request sideband message, the drm_dp_mst_topology_mgr::up_req_rec

• CVE-2024-57874Jan 11, 2025
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL Currently tagged_addr_ctrl_set() doesn't initialize the temporary 'ctrl' variable, and a SETREGSET call with a length of zero will leave this uni

• CVE-2024-57850Jan 11, 2025
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: jffs2: Prevent rtime decompress memory corruption The rtime decompression routine does not fully check bounds during the entirety of the decompression pass and can corrupt memory outside the decompression buffe