suse/kernel-default&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (4,170)

• CVE-2025-38322MedJul 10, 2025
  affected < 6.4.0-150600.23.87.1fixed 6.4.0-150600.23.87.1

  In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix crash in icl_update_topdown_event() The perf_fuzzer found a hard-lockup crash on a RaptorLake machine: Oops: general protection fault, maybe for address 0xffff89aeceab400: 0000 CPU: 23

• CVE-2025-38321HigJul 10, 2025
  affected < 6.4.0-150600.23.84.1fixed 6.4.0-150600.23.84.1

  In the Linux kernel, the following vulnerability has been resolved: smb: Log an error when close_all_cached_dirs fails Under low-memory conditions, close_all_cached_dirs() can't move the dentries to a separate list to dput() them once the locks are dropped. This will result in

• CVE-2025-38319MedJul 10, 2025
  affected < 6.4.0-150600.23.65.1fixed 6.4.0-150600.23.65.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table The function atomctrl_initialize_mc_reg_table() and atomctrl_initialize_mc_reg_table_v2_2() does not check the return value

• CVE-2025-38313HigJul 10, 2025
  affected < 6.4.0-150600.23.65.1fixed 6.4.0-150600.23.65.1

  In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: fix double-free on mc_dev The blamed commit tried to simplify how the deallocations are done but, in the process, introduced a double-free on the mc_dev variable. In case the MC device is a DPRC,

• CVE-2025-38312MedJul 10, 2025
  affected < 6.4.0-150600.23.65.1fixed 6.4.0-150600.23.65.1

  In the Linux kernel, the following vulnerability has been resolved: fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() In fb_find_mode_cvt(), iff mode->refresh somehow happens to be 0x80000000, cvt.f_refresh will become 0 when multiplying it by 2 due to overflow. It's

• CVE-2025-38310MedJul 10, 2025
  affected < 6.4.0-150600.23.65.1fixed 6.4.0-150600.23.65.1

  In the Linux kernel, the following vulnerability has been resolved: seg6: Fix validation of nexthop addresses The kernel currently validates that the length of the provided nexthop address does not exceed the specified length. This can lead to the kernel reading uninitialized m

• CVE-2025-38307MedJul 10, 2025
  affected < 6.4.0-150600.23.65.1fixed 6.4.0-150600.23.65.1

  In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Verify content returned by parse_int_array() The first element of the returned array stores its length. If it is 0, any manipulation beyond the element at index 0 ends with null-ptr-deref.

• CVE-2025-38305MedJul 10, 2025
  affected < 6.4.0-150600.23.65.1fixed 6.4.0-150600.23.65.1

  In the Linux kernel, the following vulnerability has been resolved: ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() There is no disagreement that we should check both ptp->is_virtual_clock and ptp->n_vclocks to check if the ptp virtual clock is in use. However, w

• CVE-2025-38304MedJul 10, 2025
  affected < 6.4.0-150600.23.65.1fixed 6.4.0-150600.23.65.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix NULL pointer deference on eir_get_service_data The len parameter is considered optional so it can be NULL so it cannot be used for skipping to next entry of EIR_SERVICE_DATA.

• CVE-2025-38303HigJul 10, 2025
  affected < 6.4.0-150600.23.65.1fixed 6.4.0-150600.23.65.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix possible crashes on eir_create_adv_data eir_create_adv_data may attempt to add EIR_FLAGS and EIR_TX_POWER without checking if that would fit.

• CVE-2025-38300MedJul 10, 2025
  affected < 6.4.0-150600.23.65.1fixed 6.4.0-150600.23.65.1

  In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare() Fix two DMA cleanup issues on the error path in sun8i_ce_cipher_prepare(): 1] If dma_map_sg() fails for areq->dst, the device driver wo

• CVE-2025-38293HigJul 10, 2025
  affected < 6.4.0-150600.23.65.1fixed 6.4.0-150600.23.65.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix node corruption in ar->arvifs list In current WLAN recovery code flow, ath11k_core_halt() only reinitializes the "arvifs" list head. This will cause the list node immediately following the lis

• CVE-2025-38292HigJul 10, 2025
  affected < 6.4.0-150600.23.65.1fixed 6.4.0-150600.23.65.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix invalid access to memory In ath12k_dp_rx_msdu_coalesce(), rxcb is fetched from skb and boolean is_continuation is part of rxcb. Currently, after freeing the skb, the rxcb->is_continuation acce

• CVE-2025-38290HigJul 10, 2025
  affected < 6.4.0-150600.23.65.1fixed 6.4.0-150600.23.65.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix node corruption in ar->arvifs list In current WLAN recovery code flow, ath12k_core_halt() only reinitializes the "arvifs" list head. This will cause the list node immediately following the lis

• CVE-2025-38289HigJul 10, 2025
  affected < 6.4.0-150600.23.65.1fixed 6.4.0-150600.23.65.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk Smatch detected a potential use-after-free of an ndlp oject in dev_loss_tmo_callbk during driver unload or fatal error handling. Fix by re

• CVE-2025-38286HigJul 10, 2025
  affected < 6.4.0-150600.23.65.1fixed 6.4.0-150600.23.65.1

  In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91: Fix possible out-of-boundary access at91_gpio_probe() doesn't check that given OF alias is not available or something went wrong when trying to get it. This might have consequences when accessing

• CVE-2025-38283HigJul 10, 2025
  affected < 6.4.0-150600.23.65.1fixed 6.4.0-150600.23.65.1

  In the Linux kernel, the following vulnerability has been resolved: hisi_acc_vfio_pci: bugfix live migration function without VF device driver If the VF device driver is not loaded in the Guest OS and we attempt to perform device data migration, the address of the migrated data

• CVE-2025-38279HigJul 10, 2025
  affected < 6.4.0-150600.23.65.1fixed 6.4.0-150600.23.65.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: Do not include stack ptr register in precision backtracking bookkeeping Yi Lai reported an issue ([1]) where the following warning appears in kernel dmesg: [ 60.643604] verifier backtracking bug [

• CVE-2025-38277MedJul 10, 2025
  affected < 6.4.0-150600.23.65.1fixed 6.4.0-150600.23.65.1

  In the Linux kernel, the following vulnerability has been resolved: mtd: nand: ecc-mxic: Fix use of uninitialized variable ret If ctx->steps is zero, the loop processing ECC steps is skipped, and the variable ret remains uninitialized. It is later checked and returned, which le

• CVE-2025-38275MedJul 10, 2025
  affected < 6.4.0-150600.23.65.1fixed 6.4.0-150600.23.65.1

  In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug The qmp_usb_iomap() helper function currently returns the raw result of devm_ioremap() for non-exclusive mappings. Since devm_ioremap() may return a NULL pointer a