VYPR

rpm package

suse/kernel-default&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4

pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4

Vulnerabilities (2,874)

  • CVE-2022-49995HigJun 18, 2025
    affected < 5.14.21-150400.24.170.2fixed 5.14.21-150400.24.170.2

    In the Linux kernel, the following vulnerability has been resolved: writeback: avoid use-after-free after removing device When a disk is removed, bdi_unregister gets called to stop further writeback and wait for associated delayed work to complete. However, wb_inode_writeback_

  • CVE-2022-49993MedJun 18, 2025
    affected < 5.14.21-150400.24.170.2fixed 5.14.21-150400.24.170.2

    In the Linux kernel, the following vulnerability has been resolved: loop: Check for overflow while configuring loop The userspace can configure a loop using an ioctl call, wherein a configuration of type loop_config is passed (see lo_ioctl()'s case on line 1550 of drivers/block

  • CVE-2022-49990HigJun 18, 2025
    affected < 5.14.21-150400.24.170.2fixed 5.14.21-150400.24.170.2

    In the Linux kernel, the following vulnerability has been resolved: s390: fix double free of GS and RI CBs on fork() failure The pointers for guarded storage and runtime instrumentation control blocks are stored in the thread_struct of the associated task. These pointers are in

  • CVE-2022-49989MedJun 18, 2025
    affected < 5.14.21-150400.24.170.2fixed 5.14.21-150400.24.170.2

    In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix error exit of privcmd_ioctl_dm_op() The error exit of privcmd_ioctl_dm_op() is calling unlock_pages() potentially with pages being NULL, leading to a NULL dereference. Additionally lock_pages(

  • CVE-2022-49987MedJun 18, 2025
    affected < 5.14.21-150400.24.170.2fixed 5.14.21-150400.24.170.2

    In the Linux kernel, the following vulnerability has been resolved: md: call __md_stop_writes in md_stop From the link [1], we can see raid1d was running even after the path raid_dtr -> md_stop -> __md_stop. Let's stop write first in destructor to align with normal md-raid to

  • CVE-2022-49986MedJun 18, 2025
    affected < 5.14.21-150400.24.170.2fixed 5.14.21-150400.24.170.2

    In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq storvsc_error_wq workqueue should not be marked as WQ_MEM_RECLAIM as it doesn't need to make forward progress under memory pressure. Marking this work

  • CVE-2022-49985HigJun 18, 2025
    affected < 5.14.21-150400.24.170.2fixed 5.14.21-150400.24.170.2

    In the Linux kernel, the following vulnerability has been resolved: bpf: Don't use tnum_range on array range checking for poke descriptors Hsin-Wei reported a KASAN splat triggered by their BPF runtime fuzzer which is based on a customized syzkaller: BUG: KASAN: slab-out-of-

  • CVE-2022-49984MedJun 18, 2025
    affected < 5.14.21-150400.24.170.2fixed 5.14.21-150400.24.170.2

    In the Linux kernel, the following vulnerability has been resolved: HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report It is possible for a malicious device to forgo submitting a Feature Report. The HID Steam driver presently makes no prevision for this a

  • CVE-2022-49983MedJun 18, 2025
    affected < 5.14.21-150400.24.170.2fixed 5.14.21-150400.24.170.2

    In the Linux kernel, the following vulnerability has been resolved: udmabuf: Set the DMA mask for the udmabuf device (v2) If the DMA mask is not set explicitly, the following warning occurs when the userspace tries to access the dma-buf via the CPU as reported by syzbot here:

  • CVE-2022-49982MedJun 18, 2025
    affected < 5.14.21-150400.24.170.2fixed 5.14.21-150400.24.170.2

    In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix memory leak in pvr_probe The error handling code in pvr2_hdw_create forgets to unregister the v4l2 device. When pvr2_hdw_create returns back to pvr2_context_create, it calls pvr2_context_des

  • CVE-2022-49981MedJun 18, 2025
    affected < 5.14.21-150400.24.170.2fixed 5.14.21-150400.24.170.2

    In the Linux kernel, the following vulnerability has been resolved: HID: hidraw: fix memory leak in hidraw_release() Free the buffered reports before deleting the list entry. BUG: memory leak unreferenced object 0xffff88810e72f180 (size 32): comm "softirq", pid 0, jiffies 42

  • CVE-2022-49980HigJun 18, 2025
    affected < 5.14.21-150400.24.179.1fixed 5.14.21-150400.24.179.1

    In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix use-after-free Read in usb_udc_uevent() The syzbot fuzzer found a race between uevent callbacks and gadget driver unregistration that can cause a use-after-free bug: --------------------------

  • CVE-2022-49978MedJun 18, 2025
    affected < 5.14.21-150400.24.170.2fixed 5.14.21-150400.24.170.2

    In the Linux kernel, the following vulnerability has been resolved: fbdev: fb_pm2fb: Avoid potential divide by zero error In `do_fb_ioctl()` of fbmem.c, if cmd is FBIOPUT_VSCREENINFO, var will be copied from user, then go through `fb_set_var()` and `info->fbops->fb_check_var()`

  • CVE-2022-49977HigJun 18, 2025
    affected < 5.14.21-150400.24.170.2fixed 5.14.21-150400.24.170.2

    In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead ftrace_startup does not remove ops from ftrace_ops_list when ftrace_startup_enable fails: register_ftrace_function ftrace_star

  • CVE-2022-49969HigJun 18, 2025
    affected < 5.14.21-150400.24.170.2fixed 5.14.21-150400.24.170.2

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: clear optc underflow before turn off odm clock [Why] After ODM clock off, optc underflow bit will be kept there always and clear not work. We need to clear that before clock off. [How] Clear t

  • CVE-2022-49968HigJun 18, 2025
    affected < 5.14.21-150400.24.170.2fixed 5.14.21-150400.24.170.2

    In the Linux kernel, the following vulnerability has been resolved: ieee802154/adf7242: defer destroy_workqueue call There is a possible race condition (use-after-free) like below (FREE) | (USE) adf7242_remove | adf7242_channel cancel_d

  • CVE-2022-49966MedJun 18, 2025
    affected < 5.14.21-150400.24.170.2fixed 5.14.21-150400.24.170.2

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid To avoid any potential memory leak.

  • CVE-2022-49964MedJun 18, 2025
    affected < 5.14.21-150400.24.170.2fixed 5.14.21-150400.24.170.2

    In the Linux kernel, the following vulnerability has been resolved: arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level Though acpi_find_last_cache_level() always returned signed value and the document states it will return any errors caused by

  • CVE-2022-49960MedJun 18, 2025
    affected < 5.14.21-150400.24.170.2fixed 5.14.21-150400.24.170.2

    In the Linux kernel, the following vulnerability has been resolved: drm/i915: fix null pointer dereference Asus chromebook CX550 crashes during boot on v5.17-rc1 kernel. The root cause is null pointer defeference of bi_next in tgl_get_bw_info() in drivers/gpu/drm/i915/display/i

  • CVE-2022-49958MedJun 18, 2025
    affected < 5.14.21-150400.24.170.2fixed 5.14.21-150400.24.170.2

    In the Linux kernel, the following vulnerability has been resolved: net/sched: fix netdevice reference leaks in attach_default_qdiscs() In attach_default_qdiscs(), if a dev has multiple queues and queue 0 fails to attach qdisc because there is no memory in attach_one_default_qd

Page 53 of 144