VYPR

rpm package

suse/kernel-default&distro=SUSE Linux Enterprise Module for Basesystem 15 SP6

pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6

Vulnerabilities (3,752)

  • CVE-2025-38537MedAug 16, 2025
    affected < 6.4.0-150600.23.70.1fixed 6.4.0-150600.23.70.1

    In the Linux kernel, the following vulnerability has been resolved: net: phy: Don't register LEDs for genphy If a PHY has no driver, the genphy driver is probed/removed directly in phy_attach/detach. If the PHY's ofnode has an "leds" subnode, then the LEDs will be (un)registere

  • CVE-2025-38535HigAug 16, 2025
    affected < 6.4.0-150600.23.70.1fixed 6.4.0-150600.23.70.1

    In the Linux kernel, the following vulnerability has been resolved: phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode When transitioning from USB_ROLE_DEVICE to USB_ROLE_NONE, the code assumed that the regulator should be disabled. However, if the regulator is

  • CVE-2025-38533CriAug 16, 2025
    affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

    In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix the using of Rx buffer DMA The wx_rx_buffer structure contained two DMA address fields: 'dma' and 'page_dma'. However, only 'page_dma' was actually initialized and used to program the Rx descrip

  • CVE-2025-38531MedAug 16, 2025
    affected < 6.4.0-150600.23.70.1fixed 6.4.0-150600.23.70.1

    In the Linux kernel, the following vulnerability has been resolved: iio: common: st_sensors: Fix use of uninitialize device structs Throughout the various probe functions &indio_dev->dev is used before it is initialized. This caused a kernel panic in st_sensors_power_enable() w

  • CVE-2025-38530HigAug 16, 2025
    affected < 6.4.0-150600.23.70.1fixed 6.4.0-150600.23.70.1

    In the Linux kernel, the following vulnerability has been resolved: comedi: pcl812: Fix bit shift out of bounds When checking for a supported IRQ number, the following test is used: if ((1 << it->options[1]) & board->irq_bits) { However, `it->options[i]` is an unchecked `int

  • CVE-2025-38529HigAug 16, 2025
    affected < 6.4.0-150600.23.70.1fixed 6.4.0-150600.23.70.1

    In the Linux kernel, the following vulnerability has been resolved: comedi: aio_iiro_16: Fix bit shift out of bounds When checking for a supported IRQ number, the following test is used: if ((1 << it->options[1]) & 0xdcfc) { However, `it->options[i]` is an unchecked `int` va

  • CVE-2025-38528HigAug 16, 2025
    affected < 6.4.0-150600.23.70.1fixed 6.4.0-150600.23.70.1

    In the Linux kernel, the following vulnerability has been resolved: bpf: Reject %p% format string in bprintf-like helpers static const char fmt[] = "%p%"; bpf_trace_printk(fmt, sizeof(fmt)); The above BPF program isn't rejected and causes a kernel warning at runtime:

  • CVE-2025-38527CriAug 16, 2025
    affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

    In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifs_oplock_break A race condition can occur in cifs_oplock_break() leading to a use-after-free of the cinode structure when unmounting: cifs_oplock_break() _cifsFileIn

  • CVE-2025-38526HigAug 16, 2025
    affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

    In the Linux kernel, the following vulnerability has been resolved: ice: add NULL check in eswitch lag check The function ice_lag_is_switchdev_running() is being called from outside of the LAG event handler code. This results in the lag->upper_netdev being NULL sometimes. To

  • CVE-2025-38524HigAug 16, 2025
    affected < 6.4.0-150600.23.70.1fixed 6.4.0-150600.23.70.1

    In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix recv-recv race of completed call If a call receives an event (such as incoming data), the call gets placed on the socket's queue and a thread in recvmsg can be awakened to go and process it. Once th

  • CVE-2025-38520MedAug 16, 2025
    affected < 6.4.0-150600.23.70.1fixed 6.4.0-150600.23.70.1

    In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Don't call mmput from MMU notifier callback If the process is exiting, the mmput inside mmu notifier callback from compactd or fork or numa balancing could release the last reference of mm struct to

  • CVE-2025-38516MedAug 16, 2025
    affected < 6.4.0-150600.23.70.1fixed 6.4.0-150600.23.70.1

    In the Linux kernel, the following vulnerability has been resolved: pinctrl: qcom: msm: mark certain pins as invalid for interrupts On some platforms, the UFS-reset pin has no interrupt logic in TLMM but is nevertheless registered as a GPIO in the kernel. This enables the user-

  • CVE-2025-38515MedAug 16, 2025
    affected < 6.4.0-150600.23.70.1fixed 6.4.0-150600.23.70.1

    In the Linux kernel, the following vulnerability has been resolved: drm/sched: Increment job count before swapping tail spsc queue A small race exists between spsc_queue_push and the run-job worker, in which spsc_queue_push may return not-first while the run-job worker has alre

  • CVE-2025-38514HigAug 16, 2025
    affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

    In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix oops due to non-existence of prealloc backlog struct If an AF_RXRPC service socket is opened and bound, but calls are preallocated, then rxrpc_alloc_incoming_call() will oops because the rxrpc_backlo

  • CVE-2025-38513MedAug 16, 2025
    affected < 6.4.0-150600.23.70.1fixed 6.4.0-150600.23.70.1

    In the Linux kernel, the following vulnerability has been resolved: wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() There is a potential NULL pointer dereference in zd_mac_tx_to_dev(). For example, the following is possible: T0 T1 zd_m

  • CVE-2025-38512HigAug 16, 2025
    affected < 6.4.0-150600.23.70.1fixed 6.4.0-150600.23.70.1

    In the Linux kernel, the following vulnerability has been resolved: wifi: prevent A-MSDU attacks in mesh networks This patch is a mitigation to prevent the A-MSDU spoofing vulnerability for mesh networks. The initial update to the IEEE 802.11 standard, in response to the FragAt

  • CVE-2025-38510MedAug 16, 2025
    affected < 6.4.0-150600.23.70.1fixed 6.4.0-150600.23.70.1

    In the Linux kernel, the following vulnerability has been resolved: kasan: remove kasan_find_vm_area() to prevent possible deadlock find_vm_area() couldn't be called in atomic_context. If find_vm_area() is called to reports vm area information, kasan can trigger deadlock like:

  • CVE-2025-38506MedAug 16, 2025
    affected < 6.4.0-150600.23.70.1fixed 6.4.0-150600.23.70.1

    In the Linux kernel, the following vulnerability has been resolved: KVM: Allow CPU to reschedule while setting per-page memory attributes When running an SEV-SNP guest with a sufficiently large amount of memory (1TB+), the host can experience CPU soft lockups when running an op

  • CVE-2025-38503MedAug 16, 2025
    affected < 6.4.0-150600.23.70.1fixed 6.4.0-150600.23.70.1

    In the Linux kernel, the following vulnerability has been resolved: btrfs: fix assertion when building free space tree When building the free space tree with the block group tree feature enabled, we can hit an assertion failure like this: BTRFS info (device loop0 state M): r

  • CVE-2025-38500HigAug 12, 2025
    affected < 6.4.0-150600.23.70.1fixed 6.4.0-150600.23.70.1

    In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collect_md xfrm interface collect_md property on xfrm interfaces can only be set on device creation, thus xfrmi_changelink() should fail when called on such in

Page 32 of 188