suse/kernel-default&distro=SUSE Linux Enterprise Workstation Extension 12 SP5

Vulnerabilities (1,486)

• CVE-2024-36015May 29, 2024
  affected < 4.12.14-122.219.1fixed 4.12.14-122.219.1

  In the Linux kernel, the following vulnerability has been resolved: ppdev: Add an error check in register_device In register_device, the return value of ida_simple_get is unchecked, in witch ida_simple_get will use an invalid index value. To address this issue, index should be

• CVE-2024-36014May 29, 2024
  affected < 4.12.14-122.222.1fixed 4.12.14-122.222.1

  In the Linux kernel, the following vulnerability has been resolved: drm/arm/malidp: fix a possible null pointer dereference In malidp_mw_connector_reset, new memory is allocated with kzalloc, but no check is performed. In order to prevent null pointer dereferencing, ensure that

• CVE-2023-52880May 24, 2024
  affected < 4.12.14-122.219.1fixed 4.12.14-122.219.1

  In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc Any unprivileged user can attach N_GSM0710 ldisc, but it requires CAP_NET_ADMIN to create a GSM network anyway. Require initial namespace CAP_NET_ADM

• CVE-2021-47571May 24, 2024
  affected < 4.12.14-122.222.1fixed 4.12.14-122.222.1

  In the Linux kernel, the following vulnerability has been resolved: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() The free_rtllib() function frees the "dev" pointer so there is use after free on the next line. Re-arrange things to avoid that.

• CVE-2021-47566May 24, 2024
  affected < 4.12.14-122.222.1fixed 4.12.14-122.222.1

  In the Linux kernel, the following vulnerability has been resolved: proc/vmcore: fix clearing user buffer by properly using clear_user() To clear a user buffer we cannot simply use memset, we have to use clear_user(). With a virtio-mem device that registers a vmcore_cb and has

• CVE-2021-47565May 24, 2024
  affected < 4.12.14-122.219.1fixed 4.12.14-122.219.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix kernel panic during drive powercycle test While looping over shost's sdev list it is possible that one of the drives is getting removed and its sas_target object is freed but its sdev object

• CVE-2021-47559May 24, 2024
  affected < 4.12.14-122.225.1fixed 4.12.14-122.225.1

  In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk() Coverity reports a possible NULL dereferencing problem: in smc_vlan_by_tcpsk(): 6. returned_null: netdev_lower_get_next returns NULL (checked 29 o

• CVE-2021-47549May 24, 2024
  affected < 4.12.14-122.228.1fixed 4.12.14-122.228.1

  In the Linux kernel, the following vulnerability has been resolved: sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl When the `rmmod sata_fsl.ko` command is executed in the PPC64 GNU/Linux, a bug is reported: =========================================================

• CVE-2021-47548May 24, 2024
  affected < 4.12.14-122.219.1fixed 4.12.14-122.219.1

  In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() The if statement: if (port >= DSAF_GE_NUM) return; limits the value of port less than DSAF_GE_NUM

• CVE-2021-47547May 24, 2024
  affected < 4.12.14-122.222.1fixed 4.12.14-122.222.1

  In the Linux kernel, the following vulnerability has been resolved: net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound In line 5001, if all id in the array 'lp->phy[8]' is not 0, when the 'for' end, the 'k' is 8. At this time, the array 'lp->phy

• CVE-2021-47544May 24, 2024
  affected < 4.12.14-122.222.1fixed 4.12.14-122.222.1

  In the Linux kernel, the following vulnerability has been resolved: tcp: fix page frag corruption on page fault Steffen reported a TCP stream corruption for HTTP requests served by the apache web-server using a cifs mount-point and memory mapping the relevant file. The root ca

• CVE-2021-47542May 24, 2024
  affected < 4.12.14-122.225.1fixed 4.12.14-122.225.1

  In the Linux kernel, the following vulnerability has been resolved: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings() In qlcnic_83xx_add_rings(), the indirect function of ahw->hw_ops->alloc_mbx_args will be called to allocate memory for cmd.req.arg,

• CVE-2021-47541May 24, 2024
  affected < 4.12.14-122.219.1fixed 4.12.14-122.219.1

  In the Linux kernel, the following vulnerability has been resolved: net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources() In mlx4_en_try_alloc_resources(), mlx4_en_copy_priv() is called and tmp->tx_cq will be freed on the error path of mlx4_en_copy_priv(). Aft

• CVE-2021-47523May 24, 2024
  affected < 4.12.14-122.219.1fixed 4.12.14-122.219.1

  In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr This buffer is currently allocated in hfi1_init(): if (reinit) ret = init_after_reset(dd); else ret = loadtime_init(dd); if (ret) goto done; /* allocate

• CVE-2021-47520May 24, 2024
  affected < 4.12.14-122.222.1fixed 4.12.14-122.222.1

  In the Linux kernel, the following vulnerability has been resolved: can: pch_can: pch_can_rx_normal: fix use after free After calling netif_receive_skb(skb), dereferencing skb is unsafe. Especially, the can_frame cf which aliases skb memory is dereferenced just after the call n

• CVE-2021-47518May 24, 2024
  affected < 4.12.14-122.222.1fixed 4.12.14-122.222.1

  In the Linux kernel, the following vulnerability has been resolved: nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done The done() netlink callback nfc_genl_dump_ses_done() should check if received argument is non-NULL, because its allocation could fail earlier in d

• CVE-2021-47516May 24, 2024
  affected < 4.12.14-122.225.1fixed 4.12.14-122.225.1

  In the Linux kernel, the following vulnerability has been resolved: nfp: Fix memory leak in nfp_cpp_area_cache_add() In line 800 (#1), nfp_cpp_area_alloc() allocates and initializes a CPP area structure. But in line 807 (#2), when the cache is allocated failed, this CPP area st

• CVE-2021-47511May 24, 2024
  affected < 4.12.14-122.219.1fixed 4.12.14-122.219.1

  In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix negative period/buffer sizes The period size calculation in OSS layer may receive a negative value as an error, but the code there assumes only the positive values and handle them with size_

• CVE-2021-47509May 24, 2024
  affected < 4.12.14-122.219.1fixed 4.12.14-122.219.1

  In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Limit the period size to 16MB Set the practical limit to the period size (the fragment shift in OSS) instead of a full 31bit; a too large value could lead to the exhaust of memory as we allocate

• CVE-2021-47506May 24, 2024
  affected < 4.12.14-122.219.1fixed 4.12.14-122.219.1

  In the Linux kernel, the following vulnerability has been resolved: nfsd: fix use-after-free due to delegation race A delegation break could arrive as soon as we've called vfs_setlease. A delegation break runs a callback which immediately (in nfsd4_cb_recall_prepare) adds the