suse/kernel-default-base&distro=SUSE Linux Enterprise Module for Basesystem 15 SP6

Vulnerabilities (3,752)

• CVE-2024-47702HigOct 21, 2024
  affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

  In the Linux kernel, the following vulnerability has been resolved: bpf: Fail verification for sign-extension of packet data/data_end/data_meta syzbot reported a kernel crash due to commit 1f1e864b6555 ("bpf: Handle sign-extenstin ctx member accesses"). The reason is due to s

• CVE-2024-47701HigOct 21, 2024
  affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

  In the Linux kernel, the following vulnerability has been resolved: ext4: avoid OOB when system.data xattr changes underneath the filesystem When looking up for an entry in an inlined directory, if e_value_offs is changed underneath the filesystem by some change in the block de

• CVE-2024-47699MedOct 21, 2024
  affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

  In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() Patch series "nilfs2: fix potential issues with empty b-tree nodes". This series addresses three potential issues with empty b-tree nodes that can o

• CVE-2024-47698HigOct 21, 2024
  affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

  In the Linux kernel, the following vulnerability has been resolved: drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error Ensure index in rtl2832_pid_filter does not exceed 31 to prevent out-of-bounds access. dev->filters is a 32-bit value, so set_bit and cle

• CVE-2024-47697HigOct 21, 2024
  affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

  In the Linux kernel, the following vulnerability has been resolved: drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error Ensure index in rtl2830_pid_filter does not exceed 31 to prevent out-of-bounds access. dev->filters is a 32-bit value, so set_bit and cle

• CVE-2024-47696HigOct 21, 2024
  affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

  In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency In the commit aee2424246f9 ("RDMA/iwcm: Fix a use-after-free related to destroying CM IDs"), the function flush_workqueue is invoked to flush

• CVE-2024-47695CriOct 21, 2024
  affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

  In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds In the function init_conns(), after the create_con() and create_cm() for loop if something fails. In the cleanup for loop after the destroy tag, we acce

• CVE-2024-47693MedOct 21, 2024
  affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

  In the Linux kernel, the following vulnerability has been resolved: IB/core: Fix ib_cache_setup_one error flow cleanup When ib_cache_update return an error, we exit ib_cache_setup_one instantly with no proper cleanup, even though before this we had already successfully done gid

• CVE-2024-47692MedOct 21, 2024
  affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

  In the Linux kernel, the following vulnerability has been resolved: nfsd: return -EINVAL when namelen is 0 When we have a corrupted main.sqlite in /var/lib/nfs/nfsdcld/, it may result in namelen being 0, which will cause memdup_user() to return ZERO_SIZE_PTR. When we access the

• CVE-2024-47688MedOct 21, 2024
  affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

  In the Linux kernel, the following vulnerability has been resolved: driver core: Fix a potential null-ptr-deref in module_add_driver() Inject fault while probing of-fpga-region, if kasprintf() fails in module_add_driver(), the second sysfs_remove_link() in exit path will cause

• CVE-2024-47687MedOct 21, 2024
  affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

  In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix invalid mr resource destroy Certain error paths from mlx5_vdpa_dev_add() can end up releasing mr resources which never got initialized in the first place. This patch adds the missing check in ml

• CVE-2024-47686HigOct 21, 2024
  affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

  In the Linux kernel, the following vulnerability has been resolved: ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate() The psc->div[] array has psc->num_div elements. These values come from when we call clk_hw_register_div(). It's adc_divisors and ARRAY_SIZE(adc_diviso

• CVE-2024-47685CriOct 21, 2024
  affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() syzbot reported that nf_reject_ip6_tcphdr_put() was possibly sending garbage on the four reserved tcp bits (th->res1) Use skb_put_zero() to clear the w

• CVE-2024-47684MedOct 21, 2024
  affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

  In the Linux kernel, the following vulnerability has been resolved: tcp: check skb is non-NULL in tcp_rto_delta_us() We have some machines running stock Ubuntu 20.04.6 which is their 5.4.0-174-generic kernel that are running ceph and recently hit a null ptr dereference in tcp_r

• CVE-2024-47682HigOct 21, 2024
  affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

  In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix off-by-one error in sd_read_block_characteristics() Ff the device returns page 0xb1 with length 8 (happens with qemu v2.x, for example), sd_read_block_characteristics() may attempt an out-of-bound

• CVE-2024-47681MedOct 21, 2024
  affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

  In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he Fix the NULL pointer dereference in mt7996_mcu_sta_bfer_he routine adding an sta interface to the mt7996 driver. Found by code review.

• CVE-2024-47679HigOct 21, 2024
  affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

  In the Linux kernel, the following vulnerability has been resolved: vfs: fix race between evice_inodes() and find_inode()&iput() Hi, all Recently I noticed a bug[1] in btrfs, after digged it into and I believe it'a race in vfs. Let's assume there's a inode (ie ino 261) with i

• CVE-2024-47678CriOct 21, 2024
  affected < 6.4.0-150600.23.33.1.150600.12.14.1fixed 6.4.0-150600.23.33.1.150600.12.14.1

  In the Linux kernel, the following vulnerability has been resolved: icmp: change the order of rate limits ICMP messages are ratelimited : After the blamed commits, the two rate limiters are applied in this order: 1) host wide ratelimit (icmp_global_allow()) 2) Per destinatio

• CVE-2024-47675HigOct 21, 2024
  affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

  In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() If bpf_link_prime() fails, bpf_uprobe_multi_link_attach() goes to the error_free label and frees the array of bpf_uprobe's without calling bpf_uprobe_un

• CVE-2024-47674HigOct 15, 2024
  affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

  In the Linux kernel, the following vulnerability has been resolved: mm: avoid leaving partial pfn mappings around in error case As Jann points out, PFN mappings are special, because unlike normal memory mappings, there is no lifetime information associated with the mapping - it