suse/kernel-default&distro=SUSE Linux Enterprise Live Patching 12 SP5

Vulnerabilities (3,305)

• CVE-2024-36903MedMay 30, 2024
  affected < 4.12.14-122.293.1fixed 4.12.14-122.293.1

  In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix potential uninit-value access in __ip6_make_skb() As it was done in commit fc1092f51567 ("ipv4: Fix uninit-value access in __ip_make_skb()") for IPv4, check FLOWI_FLAG_KNOWN_NH on fl6->flowi6_flags in

• CVE-2024-36902MedMay 30, 2024
  affected < 4.12.14-122.225.1fixed 4.12.14-122.225.1

  In the Linux kernel, the following vulnerability has been resolved: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() syzbot is able to trigger the following crash [1], caused by unsafe ip6_dst_idev() use. Indeed ip6_dst_idev() can return NULL, and must a

• CVE-2024-36901MedMay 30, 2024
  affected < 4.12.14-122.225.1fixed 4.12.14-122.225.1

  In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent NULL dereference in ip6_output() According to syzbot, there is a chance that ip6_dst_idev() returns NULL in ip6_output(). Most places in IPv6 stack deal with a NULL idev just fine, but not here.

• CVE-2024-36894HigMay 30, 2024
  affected < 4.12.14-122.222.1fixed 4.12.14-122.222.1

  In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete FFS based applications can utilize the aio_cancel() callback to dequeue pending USB requests submitted to the UDC. There is a scenario

• CVE-2024-36886CriMay 30, 2024
  affected < 4.12.14-122.237.1fixed 4.12.14-122.237.1

  In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in error path Sam Page (sam4k) working with Trend Micro Zero Day Initiative reported a UAF in the tipc_buf_append() error path: BUG: KASAN: slab-use-after-free in kfree_skb_list_reason+0x47e/0x4c

• CVE-2024-36883HigMay 30, 2024
  affected < 4.12.14-122.244.1fixed 4.12.14-122.244.1

  In the Linux kernel, the following vulnerability has been resolved: net: fix out-of-bounds access in ops_init net_alloc_generic is called by net_alloc, which is called without any locking. It reads max_gen_ptrs, which is changed under pernet_ops_rwsem. It is read twice, first t

• CVE-2024-36880HigMay 30, 2024
  affected < 4.12.14-122.222.1fixed 4.12.14-122.222.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: add missing firmware sanity checks Add the missing sanity checks when parsing the firmware files before downloading them to avoid accessing and corrupting memory beyond the vmalloced buffer.

• CVE-2024-36029MedMay 30, 2024
  affected < 4.12.14-122.219.1fixed 4.12.14-122.219.1

  In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-msm: pervent access to suspended controller Generic sdhci code registers LED device and uses host->runtime_suspended flag to protect access to it. The sdhci-msm driver doesn't set this flag, which ca

• CVE-2024-36025MedMay 30, 2024
  affected < 4.12.14-122.222.1fixed 4.12.14-122.222.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() The app_reply->elem[] array is allocated earlier in this function and it has app_req.num_ports elements. Thus this > comparison needs to be >= to preven

• CVE-2024-36017MedMay 30, 2024
  affected < 4.12.14-122.222.1fixed 4.12.14-122.222.1

  In the Linux kernel, the following vulnerability has been resolved: rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation Each attribute inside a nested IFLA_VF_VLAN_LIST is assumed to be a struct ifla_vf_vlan_info so the size of such attribute needs to be at least o

• CVE-2024-36016HigMay 29, 2024
  affected < 4.12.14-122.222.1fixed 4.12.14-122.222.1

  In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix possible out-of-bounds in gsm0_receive() Assuming the following: - side A configures the n_gsm in basic option mode - side B sends the header of a basic option mode frame with data length 1 - si

• CVE-2023-52881CriMay 29, 2024
  affected < 4.12.14-122.222.1fixed 4.12.14-122.222.1

  In the Linux kernel, the following vulnerability has been resolved: tcp: do not accept ACK of bytes we never sent This patch is based on a detailed report and ideas from Yepeng Pan and Christian Rossow. ACK seq validation is currently following RFC 5961 5.2 guidelines: The

• CVE-2024-36015HigMay 29, 2024
  affected < 4.12.14-122.219.1fixed 4.12.14-122.219.1

  In the Linux kernel, the following vulnerability has been resolved: ppdev: Add an error check in register_device In register_device, the return value of ida_simple_get is unchecked, in witch ida_simple_get will use an invalid index value. To address this issue, index should be

• CVE-2024-36014MedMay 29, 2024
  affected < 4.12.14-122.222.1fixed 4.12.14-122.222.1

  In the Linux kernel, the following vulnerability has been resolved: drm/arm/malidp: fix a possible null pointer dereference In malidp_mw_connector_reset, new memory is allocated with kzalloc, but no check is performed. In order to prevent null pointer dereferencing, ensure that

• CVE-2023-52880HigMay 24, 2024
  affected < 4.12.14-122.219.1fixed 4.12.14-122.219.1

  In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc Any unprivileged user can attach N_GSM0710 ldisc, but it requires CAP_NET_ADMIN to create a GSM network anyway. Require initial namespace CAP_NET_ADM

• CVE-2021-47571HigMay 24, 2024
  affected < 4.12.14-122.222.1fixed 4.12.14-122.222.1

  In the Linux kernel, the following vulnerability has been resolved: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() The free_rtllib() function frees the "dev" pointer so there is use after free on the next line. Re-arrange things to avoid that.

• CVE-2021-47566HigMay 24, 2024
  affected < 4.12.14-122.222.1fixed 4.12.14-122.222.1

  In the Linux kernel, the following vulnerability has been resolved: proc/vmcore: fix clearing user buffer by properly using clear_user() To clear a user buffer we cannot simply use memset, we have to use clear_user(). With a virtio-mem device that registers a vmcore_cb and has

• CVE-2021-47565HigMay 24, 2024
  affected < 4.12.14-122.219.1fixed 4.12.14-122.219.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix kernel panic during drive powercycle test While looping over shost's sdev list it is possible that one of the drives is getting removed and its sas_target object is freed but its sdev object

• CVE-2021-47559HigMay 24, 2024
  affected < 4.12.14-122.225.1fixed 4.12.14-122.225.1

  In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk() Coverity reports a possible NULL dereferencing problem: in smc_vlan_by_tcpsk(): 6. returned_null: netdev_lower_get_next returns NULL (checked 29 o

• CVE-2021-47549HigMay 24, 2024
  affected < 4.12.14-122.228.1fixed 4.12.14-122.228.1

  In the Linux kernel, the following vulnerability has been resolved: sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl When the `rmmod sata_fsl.ko` command is executed in the PPC64 GNU/Linux, a bug is reported: =========================================================