suse/kernel-default&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (4,170)

• CVE-2023-53309Sep 16, 2025
  affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

  In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix integer overflow in radeon_cs_parser_init The type of size is unsigned, if size is 0x40000000, there will be an integer overflow, size will be zero after size *= sizeof(uint32_t), will cause uni

• CVE-2023-53305Sep 16, 2025
  affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free Fix potential use-after-free in l2cap_le_command_rej.

• CVE-2023-53304Sep 16, 2025
  affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: fix overlap expiration walk The lazy gc on insert that should remove timed-out entries fails to release the other half of the interval, if any. Can be reproduced with tests/shell/tes

• CVE-2025-39835HigSep 16, 2025
  affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

  In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code ENODATA (aka ENOATTR) has a very specific meaning in the xfs xattr code; namely, that the requested attribute name could not be found. However, a mediu

• CVE-2025-39828HigSep 16, 2025
  affected < 6.4.0-150600.23.78.1fixed 6.4.0-150600.23.78.1

  In the Linux kernel, the following vulnerability has been resolved: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). syzbot reported the splat below. [0] When atmtcp_v_open() or atmtcp_v_close() is called via connect() or close(), atmtcp_send_control() is called

• CVE-2025-39827MedSep 16, 2025
  affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

  In the Linux kernel, the following vulnerability has been resolved: net: rose: include node references in rose_neigh refcount Current implementation maintains two separate reference counting mechanisms: the 'count' field in struct rose_neigh tracks references from rose_node str

• CVE-2025-39826HigSep 16, 2025
  affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

  In the Linux kernel, the following vulnerability has been resolved: net: rose: convert 'use' field to refcount_t The 'use' field in struct rose_neigh is used as a reference counter but lacks atomicity. This can lead to race conditions where a rose_neigh structure is freed while

• CVE-2025-39825MedSep 16, 2025
  affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

  In the Linux kernel, the following vulnerability has been resolved: smb: client: fix race with concurrent opens in rename(2) Besides sending the rename request to the server, the rename process also involves closing any deferred close, waiting for outstanding I/O to complete as

• CVE-2025-39824HigSep 16, 2025
  affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

  In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix UAF via HID_CLAIMED_INPUT validation After hid_hw_start() is called hidinput_connect() will eventually be called to set up the device with the input layer since the HID_CONNECT_DEFAULT connect ma

• CVE-2025-39823HigSep 16, 2025
  affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

  In the Linux kernel, the following vulnerability has been resolved: KVM: x86: use array_index_nospec with indices that come from guest min and dest_id are guest-controlled indices. Using array_index_nospec() after the bounds checks clamps these values to mitigate speculative ex

• CVE-2025-39819MedSep 16, 2025
  affected < 6.4.0-150600.23.81.3fixed 6.4.0-150600.23.81.3

  In the Linux kernel, the following vulnerability has been resolved: fs/smb: Fix inconsistent refcnt update A possible inconsistent update of refcount was identified in `smb2_compound_op`. Such inconsistent update could lead to possible resource leaks. Why it is a possible bug:

• CVE-2025-39817HigSep 16, 2025
  affected < 6.4.0-150600.23.92.1fixed 6.4.0-150600.23.92.1

  In the Linux kernel, the following vulnerability has been resolved: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare Observed on kernel 6.6 (present on master as well): BUG: KASAN: slab-out-of-bounds in memcmp+0x98/0xd0 Call trace: kasan_check_range+0xe8/0x190

• CVE-2025-39813MedSep 16, 2025
  affected < 6.4.0-150600.23.78.1fixed 6.4.0-150600.23.78.1

  In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump When calling ftrace_dump_one() concurrently with reading trace_pipe, a WARN_ON_ONCE() in trace_printk_seq() can be triggered due to a race co

• CVE-2025-39812MedSep 16, 2025
  affected < 6.4.0-150600.23.78.1fixed 6.4.0-150600.23.78.1

  In the Linux kernel, the following vulnerability has been resolved: sctp: initialize more fields in sctp_v6_from_sk() syzbot found that sin6_scope_id was not properly initialized, leading to undefined behavior. Clear sin6_scope_id and sin6_flowinfo. BUG: KMSAN: uninit-value i

• CVE-2025-39808MedSep 16, 2025
  affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

  In the Linux kernel, the following vulnerability has been resolved: HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() in ntrig_report_version(), hdev parameter passed from hid_probe(). sending descriptor to /dev/uhid can make hdev->dev.parent->parent to

• CVE-2025-39806HigSep 16, 2025
  affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

  In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() A malicious HID device can trigger a slab out-of-bounds during mt_report_fixup() by passing in report descriptor smaller than 607 bytes. mt_re

• CVE-2025-39833Sep 16, 2025
  affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

  In the Linux kernel, the following vulnerability has been resolved: mISDN: hfcpci: Fix warning when deleting uninitialized timer With CONFIG_DEBUG_OBJECTS_TIMERS unloading hfcpci module leads to the following splat: [ 250.215892] ODEBUG: assert_init not available (active stat

• CVE-2025-39832Sep 16, 2025
  affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix lockdep assertion on sync reset unload event Fix lockdep assertion triggered during sync reset unload event. When the sync reset flow is initiated using the devlink reload fw_activate option, the

• CVE-2025-39829Sep 16, 2025
  affected < 6.4.0-150600.23.87.1fixed 6.4.0-150600.23.87.1

  In the Linux kernel, the following vulnerability has been resolved: trace/fgraph: Fix the warning caused by missing unregister notifier This warning was triggered during testing on v6.16: notifier callback ftrace_suspend_notifier_call already registered WARNING: CPU: 2 PID: 86

• CVE-2025-39810Sep 16, 2025
  affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

  In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix memory corruption when FW resources change during ifdown bnxt_set_dflt_rings() assumes that it is always called before any TC has been created. So it doesn't take bp->num_tc into account and assum