suse/kernel-default&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (4,170)

• CVE-2025-21673CriJan 31, 2025
  affected < 6.4.0-150600.23.42.2fixed 6.4.0-150600.23.42.2

  In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double free of TCP_Server_Info::hostname When shutting down the server in cifs_put_tcp_session(), cifsd thread might be reconnecting to multiple DFS targets before it realizes it should exit th

• CVE-2025-21671HigJan 31, 2025
  affected < 6.4.0-150600.23.47.2fixed 6.4.0-150600.23.47.2

  In the Linux kernel, the following vulnerability has been resolved: zram: fix potential UAF of zram table If zram_meta_alloc failed early, it frees allocated zram->table without setting it NULL. Which will potentially cause zram_meta_free to access the table if user reset an f

• CVE-2025-21670MedJan 31, 2025
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: vsock/bpf: return early if transport is not assigned Some of the core functions can only be called if the transport has been assigned. As Michal reported, a socket might have the transport at NULL, for example

• CVE-2025-21669HigJan 31, 2025
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: discard packets if the transport changes If the socket has been de-assigned or assigned to another transport, we must discard any packets received because they are not expected and would cause iss

• CVE-2025-21668MedJan 31, 2025
  affected < 6.4.0-150600.23.42.2fixed 6.4.0-150600.23.42.2

  In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8mp-blk-ctrl: add missing loop break condition Currently imx8mp_blk_ctrl_remove() will continue the for loop until an out-of-bounds exception occurs. pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DI

• CVE-2025-21667MedJan 31, 2025
  affected < 6.4.0-150600.23.42.2fixed 6.4.0-150600.23.42.2

  In the Linux kernel, the following vulnerability has been resolved: iomap: avoid avoid truncating 64-bit offset to 32 bits on 32-bit kernels, iomap_write_delalloc_scan() was inadvertently using a 32-bit position due to folio_next_index() returning an unsigned long. This could l

• CVE-2025-21666MedJan 31, 2025
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] Recent reports have shown how we sometimes call vsock_*_has_data() when a vsock socket has been de-assigned from a transport (see attached links), bu

• CVE-2025-21665MedJan 31, 2025
  affected < 6.4.0-150600.23.42.2fixed 6.4.0-150600.23.42.2

  In the Linux kernel, the following vulnerability has been resolved: filemap: avoid truncating 64-bit offset to 32 bits On 32-bit kernels, folio_seek_hole_data() was inadvertently truncating a 64-bit value to 32 bits, leading to a possible infinite loop when writing to an xfs fi

• CVE-2024-57948MedJan 31, 2025
  affected < 6.4.0-150600.23.42.2fixed 6.4.0-150600.23.42.2

  In the Linux kernel, the following vulnerability has been resolved: mac802154: check local interfaces before deleting sdata list syzkaller reported a corrupted list in ieee802154_if_remove. [1] Remove an IEEE 802.15.4 network interface after unregister an IEEE 802.15.4 hardwar

• CVE-2024-57947CriJan 23, 2025
  affected < 6.4.0-150600.23.65.1fixed 6.4.0-150600.23.65.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_set_pipapo: fix initial map fill The initial buffer has to be inited to all-ones, but it must restrict it to the size of the first field, not the total field size. After each round in the map sea

• CVE-2025-21664HigJan 21, 2025
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: dm thin: make get_first_thin use rcu-safe list first function The documentation in rculist.h explains the absence of list_empty_rcu() and cautions programmers against relying on a list_empty() -> list_first() s

• CVE-2025-21663CriJan 21, 2025
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwmac-tegra: Read iommu stream id from device tree Nvidia's Tegra MGBE controllers require the IOMMU "Stream ID" (SID) to be written to the MGBE_WRAP_AXI_ASID0_CTRL register. The current driver is

• CVE-2025-21662MedJan 21, 2025
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix variable not being completed when function returns When cmd_alloc_index(), fails cmd_work_handler() needs to complete ent->slotted before returning early. Otherwise the task which issued the comma

• CVE-2025-21659HigJan 21, 2025
  affected < 6.4.0-150600.23.47.2fixed 6.4.0-150600.23.47.2

  In the Linux kernel, the following vulnerability has been resolved: netdev: prevent accessing NAPI instances from another namespace The NAPI IDs were not fully exposed to user space prior to the netlink API, so they were never namespaced. The netlink API must ensure that at the

• CVE-2025-21658MedJan 21, 2025
  affected < 6.4.0-150600.23.60.5fixed 6.4.0-150600.23.60.5

  In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid NULL pointer dereference if no valid extent tree [BUG] Syzbot reported a crash with the following call trace: BTRFS info (device loop0): scrub: started on devid 1 BUG: kernel NULL pointer dere

• CVE-2025-21656MedJan 21, 2025
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur scsi_execute_cmd() function can return both negative (linux codes) and positive (scsi_cmnd result field) error codes. Currently the d

• CVE-2024-57946MedJan 21, 2025
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: virtio-blk: don't keep queue frozen during system suspend Commit 4ce6e2db00de ("virtio-blk: Ensure no requests in virtqueues before deleting vqs.") replaces queue quiesce with queue freeze in virtio-blk's PM ca

• CVE-2024-57940MedJan 21, 2025
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: exfat: fix the infinite loop in exfat_readdir() If the file system is corrupted so that a cluster is linked to itself in the cluster chain, and there is an unused directory entry in the cluster, 'dentry' will n

• CVE-2024-57938MedJan 21, 2025
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: net/sctp: Prevent autoclose integer overflow in sctp_association_init() While by default max_autoclose equals to INT_MAX / HZ, one may set net.sctp.max_autoclose to UINT_MAX. There is code in sctp_association_i

• CVE-2024-57936CriJan 21, 2025
  affected < 6.4.0-150600.23.38.1fixed 6.4.0-150600.23.38.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix max SGEs for the Work Request Gen P7 supports up to 13 SGEs for now. WQE software structure can hold only 6 now. Since the max send sge is reported as 13, the stack can give requests up to 13