suse/kernel-default&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7

Vulnerabilities (2,262)

• CVE-2025-40134Nov 12, 2025
  affected < 6.4.0-150700.53.28.1fixed 6.4.0-150700.53.28.1

  In the Linux kernel, the following vulnerability has been resolved: dm: fix NULL pointer dereference in __dm_suspend() There is a race condition between dm device suspend and table load that can lead to null pointer dereference. The issue occurs when suspend is invoked before t

• CVE-2025-40132Nov 12, 2025
  affected < 6.4.0-150700.53.31.1fixed 6.4.0-150700.53.31.1

  In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback In create_sdw_dailink() check that sof_end->codec_info->add_sidecar is not NULL before calling it. The original code assumed that if include_side

• CVE-2025-40129Nov 12, 2025
  affected < 6.4.0-150700.53.25.1fixed 6.4.0-150700.53.25.1

  In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdr_stream_decode_opaque_auth(), zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data

• CVE-2025-40127Nov 12, 2025
  affected < 6.4.0-150700.53.25.1fixed 6.4.0-150700.53.25.1

  In the Linux kernel, the following vulnerability has been resolved: hwrng: ks-sa - fix division by zero in ks_sa_rng_init Fix division by zero in ks_sa_rng_init caused by missing clock pointer initialization. The clk_get_rate() call is performed on an uninitialized clk pointer,

• CVE-2025-40123Nov 12, 2025
  affected < 6.4.0-150700.53.28.1fixed 6.4.0-150700.53.28.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce expected_attach_type for tailcall compatibility Yinhao et al. recently reported: Our fuzzer tool discovered an uninitialized pointer issue in the bpf_prog_test_run_xdp() function within the Li

• CVE-2025-40121Nov 12, 2025
  affected < 6.4.0-150700.53.25.1fixed 6.4.0-150700.53.25.1

  In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping When an invalid value is passed via quirk option, currently bytcr_rt5640 driver just ignores and leaves as is, which may lead to unepxected results lik

• CVE-2025-40120Nov 12, 2025
  affected < 6.4.0-150700.53.25.1fixed 6.4.0-150700.53.25.1

  In the Linux kernel, the following vulnerability has been resolved: net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock Prevent USB runtime PM (autosuspend) for AX88772* in bind. usbnet enables runtime PM (autosuspend) by default, so disabling it via the usb_dri

• CVE-2025-40118Nov 12, 2025
  affected < 6.4.0-150700.53.25.1fixed 6.4.0-150700.53.25.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod Since commit f7b705c238d1 ("scsi: pm80xx: Set phy_attached to zero when device is gone") UBSAN reports: UBSAN: array-index-out-of-bounds in drivers/scs

• CVE-2025-40116Nov 12, 2025
  affected < 6.4.0-150700.53.25.1fixed 6.4.0-150700.53.25.1

  In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup The kthread_run() function returns error pointers so the max3421_hcd->spi_thread pointer can be either error pointers or NULL. Check for bo

• CVE-2025-40115Nov 12, 2025
  affected < 6.4.0-150700.53.25.1fixed 6.4.0-150700.53.25.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix crash in transport port remove by using ioc_info() During mpt3sas_transport_port_remove(), messages were logged with dev_printk() against &mpt3sas_port->port->dev. At this point the SAS trans

• CVE-2025-40164Nov 12, 2025
  affected < 6.4.0-150700.53.25.1fixed 6.4.0-150700.53.25.1

  In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix using smp_processor_id() in preemptible code warnings Syzbot reported the following warning: BUG: using smp_processor_id() in preemptible [00000000] code: dhcpcd/2879 caller is usbnet_skb_return+0x

• CVE-2025-40149Nov 12, 2025
  affected < 6.4.0-150700.53.25.1fixed 6.4.0-150700.53.25.1

  In the Linux kernel, the following vulnerability has been resolved: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). get_netdev_for_sock() is called during setsockopt(), so not under RCU. Using sk_dst_get(sk)->dev could trigger UAF. Let's use __sk_dst_get()

• CVE-2025-40111Nov 12, 2025
  affected < 6.4.0-150700.53.25.1fixed 6.4.0-150700.53.25.1

  In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix Use-after-free in validation Nodes stored in the validation duplicates hashtable come from an arena allocator that is cleared at the end of vmw_execbuf_process. All nodes are expected to be clea

• CVE-2025-40110Nov 12, 2025
  affected < 6.4.0-150700.53.25.1fixed 6.4.0-150700.53.25.1

  In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix a null-ptr access in the cursor snooper Check that the resource which is converted to a surface exists before trying to use the cursor snooper on it. vmw_cmd_res_check allows explicit invalid (

• CVE-2025-40109Nov 9, 2025
  affected < 6.4.0-150700.53.25.1fixed 6.4.0-150700.53.25.1

  In the Linux kernel, the following vulnerability has been resolved: crypto: rng - Ensure set_ent is always present Ensure that set_ent is always set since only drbg provides it.

• CVE-2025-40107Nov 3, 2025
  affected < 6.4.0-150700.53.25.1fixed 6.4.0-150700.53.25.1

  In the Linux kernel, the following vulnerability has been resolved: can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled This issue is similar to the vulnerability in the `mcp251x` driver, which was fixed in commit 03c427147b2d ("can:

• CVE-2025-40106Oct 31, 2025
  affected < 6.4.0-150700.53.31.1fixed 6.4.0-150700.53.31.1

  In the Linux kernel, the following vulnerability has been resolved: comedi: fix divide-by-zero in comedi_buf_munge() The comedi_buf_munge() function performs a modulo operation `async->munge_chan %= async->cmd.chanlist_len` without first checking if chanlist_len is zero. If a u

• CVE-2025-40105Oct 30, 2025
  affected < 6.4.0-150700.53.25.1fixed 6.4.0-150700.53.25.1

  In the Linux kernel, the following vulnerability has been resolved: vfs: Don't leak disconnected dentries on umount When user calls open_by_handle_at() on some inode that is not cached, we will create disconnected dentry for it. If such dentry is a directory, exportfs_decode_fh

• CVE-2025-40104Oct 30, 2025
  affected < 6.4.0-150700.53.22.1fixed 6.4.0-150700.53.22.1

  In the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix mailbox API compatibility by negotiating supported features There was backward compatibility in the terms of mailbox API. Various drivers from various OSes supporting 10G adapters from Intel portfo

• CVE-2025-40103Oct 30, 2025
  affected < 6.4.0-150700.53.34.1fixed 6.4.0-150700.53.34.1

  In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix refcount leak for cifs_sb_tlink Fix three refcount inconsistency issues related to `cifs_sb_tlink`. Comments for `cifs_sb_tlink` state that `cifs_put_tlink()` needs to be called after successf