suse/kernel-default&distro=SUSE Linux Enterprise Live Patching 15 SP4

Vulnerabilities (2,888)

• CVE-2022-49162MedFeb 26, 2025
  affected < 5.14.21-150400.24.158.1fixed 5.14.21-150400.24.158.1

  In the Linux kernel, the following vulnerability has been resolved: video: fbdev: sm712fb: Fix crash in smtcfb_write() When the sm712fb driver writes three bytes to the framebuffer, the driver will crash: BUG: unable to handle page fault for address: ffffc90001ffffff R

• CVE-2022-49160MedFeb 26, 2025
  affected < 5.14.21-150400.24.158.1fixed 5.14.21-150400.24.158.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix crash during module load unload test During purex packet handling the driver was incorrectly freeing a pre-allocated structure. Fix this by skipping that entry. System crashed with the follo

• CVE-2022-49159MedFeb 26, 2025
  affected < 5.14.21-150400.24.158.1fixed 5.14.21-150400.24.158.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Implement ref count for SRB The timeout handler and the done function are racing. When qla2x00_async_iocb_timeout() starts to run it can be preempted by the normal response path (via the firmware

• CVE-2022-49158MedFeb 26, 2025
  affected < 5.14.21-150400.24.158.1fixed 5.14.21-150400.24.158.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix warning message due to adisc being flushed Fix warning message due to adisc being flushed. Linux kernel triggered a warning message where a different error code type is not matching up with

• CVE-2022-49157MedFeb 26, 2025
  affected < 5.14.21-150400.24.158.1fixed 5.14.21-150400.24.158.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix premature hw access after PCI error After a recoverable PCI error has been detected and recovered, qla driver needs to check to see if the error condition still persist and/or wait for the OS

• CVE-2022-49156MedFeb 26, 2025
  affected < 5.14.21-150400.24.158.1fixed 5.14.21-150400.24.158.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix scheduling while atomic The driver makes a call into midlayer (fc_remote_port_delete) which can put the thread to sleep. The thread that originates the call is in interrupt context. The combi

• CVE-2022-49155MedFeb 26, 2025
  affected < 5.14.21-150400.24.158.1fixed 5.14.21-150400.24.158.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() [ 12.323788] BUG: using smp_processor_id() in preemptible [00000000] code: systemd-udevd/1020 [ 12.332297] caller is qla2xxx_create_qpair+0x3

• CVE-2022-49154MedFeb 26, 2025
  affected < 5.14.21-150400.24.158.1fixed 5.14.21-150400.24.158.1

  In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: fix panic on out-of-bounds guest IRQ As guest_irq is coming from KVM_IRQFD API call, it may trigger crash in svm_update_pi_irte() due to out-of-bounds: crash> bt PID: 22218 TASK: ffff951a6ad74980 C

• CVE-2022-49153MedFeb 26, 2025
  affected < 5.14.21-150400.24.158.1fixed 5.14.21-150400.24.158.1

  In the Linux kernel, the following vulnerability has been resolved: wireguard: socket: free skb in send6 when ipv6 is disabled I got a memory leak report: unreferenced object 0xffff8881191fc040 (size 232): comm "kworker/u17:0", pid 23193, jiffies 4295238848 (age 3464.870s)

• CVE-2022-49151MedFeb 26, 2025
  affected < 5.14.21-150400.24.158.1fixed 5.14.21-150400.24.158.1

  In the Linux kernel, the following vulnerability has been resolved: can: mcba_usb: properly check endpoint type Syzbot reported warning in usb_submit_urb() which is caused by wrong endpoint type. We should check that in endpoint is actually present to prevent this warning. Fou

• CVE-2022-49148MedFeb 26, 2025
  affected < 5.14.21-150400.24.158.1fixed 5.14.21-150400.24.158.1

  In the Linux kernel, the following vulnerability has been resolved: watch_queue: Free the page array when watch_queue is dismantled Commit 7ea1a0124b6d ("watch_queue: Free the alloc bitmap when the watch_queue is torn down") took care of the bitmap, but not the page array. B

• CVE-2022-49147MedFeb 26, 2025
  affected < 5.14.21-150400.24.158.1fixed 5.14.21-150400.24.158.1

  In the Linux kernel, the following vulnerability has been resolved: block: Fix the maximum minor value is blk_alloc_ext_minor() ida_alloc_range(..., min, max, ...) returns values from min to max, inclusive. So, NR_EXT_DEVT is a valid idx returned by blk_alloc_ext_minor(). Thi

• CVE-2022-49145HigFeb 26, 2025
  affected < 5.14.21-150400.24.158.1fixed 5.14.21-150400.24.158.1

  In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Avoid out of bounds access when parsing _CPC data If the NumEntries field in the _CPC return package is less than 2, do not attempt to access the "Revision" element of that package, because it may n

• CVE-2022-49139MedFeb 26, 2025
  affected < 5.14.21-150400.24.167.1fixed 5.14.21-150400.24.167.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt This event is just specified for SCO and eSCO link types. On the reception of a HCI_Synchronous_Connection_Complete for a BDADDR of an existing LE con

• CVE-2022-49138MedFeb 26, 2025
  affected < 5.14.21-150400.24.173.1fixed 5.14.21-150400.24.173.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Ignore multiple conn complete events When one of the three connection complete events is received multiple times for the same handle, the device is registered multiple times which leads to

• CVE-2022-49137MedFeb 26, 2025
  affected < 5.14.21-150400.24.158.1fixed 5.14.21-150400.24.158.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj This issue takes place in an error path in amdgpu_cs_fence_to_handle_ioctl(). When `info->in.what` falls into default case, the function simply ret

• CVE-2022-49135MedFeb 26, 2025
  affected < 5.14.21-150400.24.158.1fixed 5.14.21-150400.24.158.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix memory leak [why] Resource release is needed on the error handling path to prevent memory leak. [how] Fix this by adding kfree on the error handling path.

• CVE-2022-49132MedFeb 26, 2025
  affected < 5.14.21-150400.24.158.1fixed 5.14.21-150400.24.158.1

  In the Linux kernel, the following vulnerability has been resolved: ath11k: pci: fix crash on suspend if board file is not found Mario reported that the kernel was crashing on suspend if ath11k was not able to find a board file: [ 473.693286] PM: Suspending system (s2idle) [

• CVE-2022-49131MedFeb 26, 2025
  affected < 5.14.21-150400.24.158.1fixed 5.14.21-150400.24.158.1

  In the Linux kernel, the following vulnerability has been resolved: ath11k: fix kernel panic during unload/load ath11k modules Call netif_napi_del() from ath11k_ahb_free_ext_irq() to fix the following kernel panic when unload/load ath11k modules for few iterations. [ 971.2013

• CVE-2022-49130MedFeb 26, 2025
  affected < 5.14.21-150400.24.158.1fixed 5.14.21-150400.24.158.1

  In the Linux kernel, the following vulnerability has been resolved: ath11k: mhi: use mhi_sync_power_up() If amss.bin was missing ath11k would crash during 'rmmod ath11k_pci'. The reason for that was that we were using mhi_async_power_up() which does not check any errors. But mh