suse/kernel-default&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (4,170)

• CVE-2025-21733MedFeb 27, 2025
  affected < 6.4.0-150600.23.47.2fixed 6.4.0-150600.23.47.2

  In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Fix resetting of tracepoints If a timerlat tracer is started with the osnoise option OSNOISE_WORKLOAD disabled, but then that option is enabled and timerlat is removed, the tracepoints that wer

• CVE-2025-21732MedFeb 27, 2025
  affected < 6.4.0-150600.23.47.2fixed 6.4.0-150600.23.47.2

  In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error This patch addresses a race condition for an ODP MR that can result in a CQE with an error on the UMR QP. During the __mlx5_ib_dereg_mr() flow,

• CVE-2024-58020MedFeb 27, 2025
  affected < 6.4.0-150600.23.47.2fixed 6.4.0-150600.23.47.2

  In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Add NULL check in mt_input_configured devm_kasprintf() can return a NULL pointer on failure,but this returned value in mt_input_configured() is not checked. Add NULL check in mt_input_configure

• CVE-2024-58019HigFeb 27, 2025
  affected < 6.4.0-150600.23.47.2fixed 6.4.0-150600.23.47.2

  In the Linux kernel, the following vulnerability has been resolved: nvkm/gsp: correctly advance the read pointer of GSP message queue A GSP event message consists three parts: message header, RPC header, message body. GSP calculates the number of pages to write from the total s

• CVE-2024-58018MedFeb 27, 2025
  affected < 6.4.0-150600.23.50.1fixed 6.4.0-150600.23.50.1

  In the Linux kernel, the following vulnerability has been resolved: nvkm: correctly calculate the available space of the GSP cmdq buffer r535_gsp_cmdq_push() waits for the available page in the GSP cmdq buffer when handling a large RPC request. When it sees at least one availab

• CVE-2024-58017MedFeb 27, 2025
  affected < 6.4.0-150600.23.47.2fixed 6.4.0-150600.23.47.2

  In the Linux kernel, the following vulnerability has been resolved: printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX Shifting 1 << 31 on a 32-bit int causes signed integer overflow, which leads to undefined behavior. To prevent this, cast 1 to u32 before perfor

• CVE-2024-58014HigFeb 27, 2025
  affected < 6.4.0-150600.23.47.2fixed 6.4.0-150600.23.47.2

  In the Linux kernel, the following vulnerability has been resolved: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() In 'wlc_phy_iqcal_gainparams_nphy()', add gain range check to WARN() instead of possible out-of-bounds 'tbl_iqcal_gainparams_nphy' access.

• CVE-2024-58013HigFeb 27, 2025
  affected < 6.4.0-150600.23.47.2fixed 6.4.0-150600.23.47.2

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync This fixes the following crash: ================================================================== BUG: KASAN: slab-use-after-free

• CVE-2024-58012MedFeb 27, 2025
  affected < 6.4.0-150600.23.47.2fixed 6.4.0-150600.23.47.2

  In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params Each cpu DAI should associate with a widget. However, the topology might not create the right number of DAI widgets for aggregated amps. And i

• CVE-2024-58011MedFeb 27, 2025
  affected < 6.4.0-150600.23.47.2fixed 6.4.0-150600.23.47.2

  In the Linux kernel, the following vulnerability has been resolved: platform/x86: int3472: Check for adev == NULL Not all devices have an ACPI companion fwnode, so adev might be NULL. This can e.g. (theoretically) happen when a user manually binds one of the int3472 drivers to

• CVE-2024-58009MedFeb 27, 2025
  affected < 6.4.0-150600.23.47.2fixed 6.4.0-150600.23.47.2

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc A NULL sock pointer is passed into l2cap_sock_alloc() when it is called from l2cap_sock_new_connection_cb() and the error handling paths should als

• CVE-2024-58007HigFeb 27, 2025
  affected < 6.4.0-150600.23.47.2fixed 6.4.0-150600.23.47.2

  In the Linux kernel, the following vulnerability has been resolved: soc: qcom: socinfo: Avoid out of bounds read of serial number On MSM8916 devices, the serial number exposed in sysfs is constant and does not change across individual devices. It's always: db410c:/sys/device

• CVE-2024-58006CriFeb 27, 2025
  affected < 6.4.0-150600.23.47.2fixed 6.4.0-150600.23.47.2

  In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() In commit 4284c88fff0e ("PCI: designware-ep: Allow pci_epc_set_bar() update inbound map address") set_bar() was modified to support dynamically

• CVE-2024-58005MedFeb 27, 2025
  affected < 6.4.0-150600.23.47.2fixed 6.4.0-150600.23.47.2

  In the Linux kernel, the following vulnerability has been resolved: tpm: Change to kvalloc() in eventlog/acpi.c The following failure was reported on HPE ProLiant D320: [ 10.693310][ T1] tpm_tis STM0925:00: 2.0 TPM (device-id 0x3, rev-id 0) [ 10.848132][ T1] --------

• CVE-2024-58002HigFeb 27, 2025
  affected < 6.4.0-150600.23.47.2fixed 6.4.0-150600.23.47.2

  In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Remove dangling pointers When an async control is written, we copy a pointer to the file handle that started the operation. That pointer will be used when the device is done. Which could be any

• CVE-2024-58001MedFeb 27, 2025
  affected < 6.4.0-150600.23.50.1fixed 6.4.0-150600.23.50.1

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: handle a symlink read error correctly Patch series "Convert ocfs2 to use folios". Mark did a conversion of ocfs2 to use folios and sent it to me as a giant patch for review ;-) So I've redone it as ind

• CVE-2024-57834MedFeb 27, 2025
  affected < 6.4.0-150600.23.47.2fixed 6.4.0-150600.23.47.2

  In the Linux kernel, the following vulnerability has been resolved: media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread syzbot report a null-ptr-deref in vidtv_mux_stop_thread. [1] If dvb->mux is not initialized successfully by vidtv_mux_init() in the vidtv_start_strea

• CVE-2024-54458HigFeb 27, 2025
  affected < 6.4.0-150600.23.53.1fixed 6.4.0-150600.23.53.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: bsg: Set bsg_queue to NULL after removal Currently, this does not cause any issues, but I believe it is necessary to set bsg_queue to NULL after removing it to prevent potential use-after-free (UAF)

• CVE-2024-52559HigFeb 27, 2025
  affected < 6.4.0-150600.23.47.2fixed 6.4.0-150600.23.47.2

  In the Linux kernel, the following vulnerability has been resolved: drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit() The "submit->cmd[i].size" and "submit->cmd[i].offset" variables are u32 values that come from the user via the submit_lookup_cmds() function. This

• CVE-2025-21731HigFeb 27, 2025
  affected < 6.4.0-150600.23.47.2fixed 6.4.0-150600.23.47.2

  In the Linux kernel, the following vulnerability has been resolved: nbd: don't allow reconnect after disconnect Following process can cause nbd_config UAF: 1) grab nbd_config temporarily; 2) nbd_genl_disconnect() flush all recv_work() and release the initial reference: nbd