suse/kernel-default&distro=SUSE Manager Server 4.3

Vulnerabilities (1,907)

• CVE-2024-27397HigMay 14, 2024
  affected < 5.14.21-150400.24.170.2fixed 5.14.21-150400.24.170.2

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use timestamp to check for set element timeout Add a timestamp field at the beginning of the transaction, store it in the nftables per-netns area. Update set backend .insert, .deactivate

• CVE-2024-27398May 13, 2024
  affected < 5.14.21-150400.24.122.2fixed 5.14.21-150400.24.122.2

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout When the sco connection is established and then, the sco socket is releasing, timeout_work will be scheduled to judge whether the sco disconnection

• CVE-2023-52655May 13, 2024
  affected < 5.14.21-150400.24.122.2fixed 5.14.21-150400.24.122.2

  In the Linux kernel, the following vulnerability has been resolved: usb: aqc111: check packet for fixup for true limit If a device sends a packet that is inbetween 0 and sizeof(u64) the value passed to skb_trim() as length will wrap around ending up as some very large value. T

• CVE-2023-52654May 9, 2024
  affected < 5.14.21-150400.24.122.2fixed 5.14.21-150400.24.122.2

  In the Linux kernel, the following vulnerability has been resolved: io_uring/af_unix: disable sending io_uring over sockets File reference cycles have caused lots of problems for io_uring in the past, and it still doesn't work exactly right and races with unix_stream_read_gener

• CVE-2022-48704May 3, 2024
  affected < 5.14.21-150400.24.122.2fixed 5.14.21-150400.24.122.2

  In the Linux kernel, the following vulnerability has been resolved: drm/radeon: add a force flush to delay work when radeon Although radeon card fence and wait for gpu to finish processing current batch rings, there is still a corner case that radeon lockup work queue may not b

• CVE-2022-48695May 3, 2024
  affected < 5.14.21-150400.24.122.2fixed 5.14.21-150400.24.122.2

  In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix use-after-free warning Fix the following use-after-free warning which is observed during controller reset: refcount_t: underflow; use-after-free. WARNING: CPU: 23 PID: 5399 at lib/refcount.c

• CVE-2022-48703May 3, 2024
  affected < 5.14.21-150400.24.122.2fixed 5.14.21-150400.24.122.2

  In the Linux kernel, the following vulnerability has been resolved: thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR In some case, the GDDV returns a package with a buffer which has zero length. It causes that kmemdup() returns ZERO_SIZE_PTR (0x10). T

• CVE-2022-48702May 3, 2024
  affected < 5.14.21-150400.24.122.2fixed 5.14.21-150400.24.122.2

  In the Linux kernel, the following vulnerability has been resolved: ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() The voice allocator sometimes begins allocating from near the end of the array and then wraps around, however snd_emu10k1_pcm_channel_a

• CVE-2022-48701May 3, 2024
  affected < 5.14.21-150400.24.122.2fixed 5.14.21-150400.24.122.2

  In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() There may be a bad USB audio device with a USB ID of (0x04fa, 0x4201) and the number of it's interfaces less than 4, an out-of-boun

• CVE-2022-48699May 3, 2024
  affected < 5.14.21-150400.24.122.2fixed 5.14.21-150400.24.122.2

  In the Linux kernel, the following vulnerability has been resolved: sched/debug: fix dentry leak in update_sched_domain_debugfs Kuyo reports that the pattern of using debugfs_remove(debugfs_lookup()) leaks a dentry and with a hotplug stress test, the machine eventually runs out

• CVE-2022-48697May 3, 2024
  affected < 5.14.21-150400.24.122.2fixed 5.14.21-150400.24.122.2

  In the Linux kernel, the following vulnerability has been resolved: nvmet: fix a use-after-free Fix the following use-after-free complaint triggered by blktests nvme/004: BUG: KASAN: user-memory-access in blk_mq_complete_request_remote+0xac/0x350 Read of size 4 at addr 0000607

• CVE-2022-48694May 3, 2024
  affected < 5.14.21-150400.24.122.2fixed 5.14.21-150400.24.122.2

  In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix drain SQ hang with no completion SW generated completions for outstanding WRs posted on SQ after QP is in error target the wrong CQ. This causes the ib_drain_sq to hang with no completion. Fix

• CVE-2022-48693May 3, 2024
  affected < 5.14.21-150400.24.122.2fixed 5.14.21-150400.24.122.2

  In the Linux kernel, the following vulnerability has been resolved: soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs In brcmstb_pm_probe(), there are two kinds of leak bugs: (1) we need to add of_node_put() when for_each__matching_node() breaks (2) we need to add

• CVE-2022-48692May 3, 2024
  affected < 5.14.21-150400.24.122.2fixed 5.14.21-150400.24.122.2

  In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: Set scmnd->result only when scmnd is not NULL This change fixes the following kernel NULL pointer dereference which is reproduced by blktests srp/007 occasionally. BUG: kernel NULL pointer dereferenc

• CVE-2022-48688May 3, 2024
  affected < 5.14.21-150400.24.122.2fixed 5.14.21-150400.24.122.2

  In the Linux kernel, the following vulnerability has been resolved: i40e: Fix kernel crash during module removal The driver incorrectly frees client instance and subsequent i40e module removal leads to kernel crash. Reproducer: 1. Do ethtool offline test followed immediately b

• CVE-2022-48687May 3, 2024
  affected < 5.14.21-150400.24.122.2fixed 5.14.21-150400.24.122.2

  In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix out-of-bounds read when setting HMAC data. The SRv6 layer allows defining HMAC data that can later be used to sign IPv6 Segment Routing Headers. This configuration is realised via netlink through

• CVE-2022-48686May 3, 2024
  affected < 5.14.21-150400.24.122.2fixed 5.14.21-150400.24.122.2

  In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix UAF when detecting digest errors We should also bail from the io_work loop when we set rd_enabled to true, so we don't attempt to read data from the socket when the TCP stream is already out-of-sy

• CVE-2022-48675May 3, 2024
  affected < 5.14.21-150400.24.122.2fixed 5.14.21-150400.24.122.2

  In the Linux kernel, the following vulnerability has been resolved: IB/core: Fix a nested dead lock as part of ODP flow Fix a nested dead lock as part of ODP flow by using mmput_async(). From the below call trace [1] can see that calling mmput() once we have the umem_odp->umem

• CVE-2022-48673May 3, 2024
  affected < 5.14.21-150400.24.122.2fixed 5.14.21-150400.24.122.2

  In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix possible access to freed memory in link clear After modifying the QP to the Error state, all RX WR would be completed with WC in IB_WC_WR_FLUSH_ERR status. Current implementation does not wait for

• CVE-2022-48672May 3, 2024
  affected < 5.14.21-150400.24.122.2fixed 5.14.21-150400.24.122.2

  In the Linux kernel, the following vulnerability has been resolved: of: fdt: fix off-by-one error in unflatten_dt_nodes() Commit 78c44d910d3e ("drivers/of: Fix depth when unflattening devicetree") forgot to fix up the depth check in the loop body in unflatten_dt_nodes() which m