suse/kernel-default&distro=SUSE Linux Enterprise Live Patching 15 SP5

Vulnerabilities (4,709)

• CVE-2024-49963MedOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: mailbox: bcm2835: Fix timeout during suspend mode During noirq suspend phase the Raspberry Pi power driver suffer of firmware property timeouts. The reason is that the IRQ of the underlying BCM2835 mailbox is d

• CVE-2024-49962MedOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() ACPICA commit 4d4547cf13cca820ff7e0f859ba83e1a610b9fd0 ACPI_ALLOCATE_ZEROED() may fail, elements might be NULL and will cause

• CVE-2024-49960HigOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix timer use-after-free on failed mount Syzbot has found an ODEBUG bug in ext4_fill_super The del_timer_sync function cancels the s_err_report timer, which reminds about filesystem errors daily. We shou

• CVE-2024-49959MedOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error In __jbd2_log_wait_for_space(), we might call jbd2_cleanup_journal_tail() to recover some journal space. But if an error occurs while

• CVE-2024-49958MedOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: reserve space for inline xattr before attaching reflink tree One of our customers reported a crash and a corrupted ocfs2 filesystem. The crash was due to the detection of corruption. Upon troubleshooti

• CVE-2024-49957MedOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix null-ptr-deref when journal load failed. During the mounting process, if journal_reset() fails because of too short journal, then lead to jbd2_journal_load() fails with NULL j_sb_buffer. Subsequentl

• CVE-2024-49955MedOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: ACPI: battery: Fix possible crash when unregistering a battery hook When a battery hook returns an error when adding a new battery, then the battery hook is automatically unregistered. However the battery hook

• CVE-2024-49954MedOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: static_call: Replace pointless WARN_ON() in static_call_module_notify() static_call_module_notify() triggers a WARN_ON(), when memory allocation fails in __static_call_add_module(). That's not really justified

• CVE-2024-49952MedOct 21, 2024
  affected < 5.14.21-150500.55.91.1fixed 5.14.21-150500.55.91.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: prevent nf_skb_duplicated corruption syzbot found that nf_dup_ipv4() or nf_dup_ipv6() could write per-cpu variable nf_skb_duplicated in an unsafe way [1]. Disabling preemption as hinted b

• CVE-2024-49950HigOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix uaf in l2cap_connect [Syzbot reported] BUG: KASAN: slab-use-after-free in l2cap_connect.constprop.0+0x10d8/0x1270 net/bluetooth/l2cap_core.c:3949 Read of size 8 at addr ffff8880241e9800 by

• CVE-2024-49949MedOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: net: avoid potential underflow in qdisc_pkt_len_init() with UFO After commit 7c6d2ecbda83 ("net: be more gentle about silly gso requests coming from user") virtio_net_hdr_to_skb() had sanity check to detect mal

• CVE-2024-49947MedOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: net: test for not too small csum_start in virtio_net_hdr_to_skb() syzbot was able to trigger this warning [1], after injecting a malicious packet through af_packet, setting skb->csum_start and thus the transpor

• CVE-2024-49946MedOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: ppp: do not assume bh is held in ppp_channel_bridge_input() Networking receive path is usually handled from BH handler. However, some protocols need to acquire the socket lock, and packets might be stored in th

• CVE-2024-49945MedOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: net/ncsi: Disable the ncsi work before freeing the associated structure The work function can run after the ncsi device is freed, resulting in use-after-free bugs or kernel panic.

• CVE-2024-49944MedOct 21, 2024
  affected < 5.14.21-150500.55.91.1fixed 5.14.21-150500.55.91.1

  In the Linux kernel, the following vulnerability has been resolved: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start In sctp_listen_start() invoked by sctp_inet_listen(), it should set the sk_state back to CLOSED if sctp_autobind() fails due to whatever

• CVE-2024-49939MedOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: avoid to add interface to list twice when SER If SER L2 occurs during the WoWLAN resume flow, the add interface flow is triggered by ieee80211_reconfig(). However, due to rtw89_wow_resume() return

• CVE-2024-49938MedOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit Syzbot points out that skb_trim() has a sanity check on the existing length of the skb, which can be uninitialised in some error paths.

• CVE-2024-49936HigOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: net/xen-netback: prevent UAF in xenvif_flush_hash() During the list_for_each_entry_rcu iteration call of xenvif_flush_hash, kfree_rcu does not exist inside the rcu read critical section, so if kfree_rcu is call

• CVE-2024-49935MedOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: ACPI: PAD: fix crash in exit_round_robin() The kernel occasionally crashes in cpumask_clear_cpu(), which is called within exit_round_robin(), because when executing clear_bit(nr, addr) with nr set to 0xffffffff

• CVE-2024-49934MedOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name It's observed that a crash occurs during hot-remove a memory device, in which user is accessing the hugetlb. See calltrace as following: --