suse/kernel-default-base&distro=SUSE Linux Enterprise Module for Basesystem 15 SP6

Vulnerabilities (3,752)

• CVE-2024-36021MedMay 30, 2024
  affected < 6.4.0-150600.23.7.3.150600.12.2.7fixed 6.4.0-150600.23.7.3.150600.12.2.7

  In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when devlink reload during pf initialization The devlink reload process will access the hardware resources, but the register operation is done before the hardware is initialized. So,

• CVE-2024-36020HigMay 30, 2024
  affected < 6.4.0-150600.23.7.3.150600.12.2.7fixed 6.4.0-150600.23.7.3.150600.12.2.7

  In the Linux kernel, the following vulnerability has been resolved: i40e: fix vf may be used uninitialized in this function warning To fix the regression introduced by commit 52424f974bc5, which causes servers hang in very hard to reproduce conditions with resets races. Using t

• CVE-2024-36019HigMay 30, 2024
  affected < 6.4.0-150600.23.7.3.150600.12.2.7fixed 6.4.0-150600.23.7.3.150600.12.2.7

  In the Linux kernel, the following vulnerability has been resolved: regmap: maple: Fix cache corruption in regcache_maple_drop() When keeping the upper end of a cache block entry, the entry[] array must be indexed by the offset from the base register of the block, i.e. max - ma

• CVE-2024-36018HigMay 30, 2024
  affected < 6.4.0-150600.23.7.3.150600.12.2.7fixed 6.4.0-150600.23.7.3.150600.12.2.7

  In the Linux kernel, the following vulnerability has been resolved: nouveau/uvmm: fix addr/range calcs for remap operations dEQP-VK.sparse_resources.image_rebind.2d_array.r64i.128_128_8 was causing a remap operation like the below. op_remap: prev: 0000003fffed0000 00000000000f

• CVE-2024-36017MedMay 30, 2024
  affected < 6.4.0-150600.23.14.2.150600.12.4.3fixed 6.4.0-150600.23.14.2.150600.12.4.3

  In the Linux kernel, the following vulnerability has been resolved: rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation Each attribute inside a nested IFLA_VF_VLAN_LIST is assumed to be a struct ifla_vf_vlan_info so the size of such attribute needs to be at least o

• CVE-2024-36016HigMay 29, 2024
  affected < 6.4.0-150600.23.7.3.150600.12.2.7fixed 6.4.0-150600.23.7.3.150600.12.2.7

  In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix possible out-of-bounds in gsm0_receive() Assuming the following: - side A configures the n_gsm in basic option mode - side B sends the header of a basic option mode frame with data length 1 - si

• CVE-2023-52881CriMay 29, 2024
  affected < 6.4.0-150600.23.14.2.150600.12.4.3fixed 6.4.0-150600.23.14.2.150600.12.4.3

  In the Linux kernel, the following vulnerability has been resolved: tcp: do not accept ACK of bytes we never sent This patch is based on a detailed report and ideas from Yepeng Pan and Christian Rossow. ACK seq validation is currently following RFC 5961 5.2 guidelines: The

• CVE-2024-36015HigMay 29, 2024
  affected < 6.4.0-150600.23.7.3.150600.12.2.7fixed 6.4.0-150600.23.7.3.150600.12.2.7

  In the Linux kernel, the following vulnerability has been resolved: ppdev: Add an error check in register_device In register_device, the return value of ida_simple_get is unchecked, in witch ida_simple_get will use an invalid index value. To address this issue, index should be

• CVE-2024-36014MedMay 29, 2024
  affected < 6.4.0-150600.23.7.3.150600.12.2.7fixed 6.4.0-150600.23.7.3.150600.12.2.7

  In the Linux kernel, the following vulnerability has been resolved: drm/arm/malidp: fix a possible null pointer dereference In malidp_mw_connector_reset, new memory is allocated with kzalloc, but no check is performed. In order to prevent null pointer dereferencing, ensure that

• CVE-2023-52880HigMay 24, 2024
  affected < 6.4.0-150600.23.14.2.150600.12.4.3fixed 6.4.0-150600.23.14.2.150600.12.4.3

  In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc Any unprivileged user can attach N_GSM0710 ldisc, but it requires CAP_NET_ADMIN to create a GSM network anyway. Require initial namespace CAP_NET_ADM

• CVE-2024-36013HigMay 23, 2024
  affected < 6.4.0-150600.23.7.3.150600.12.2.7fixed 6.4.0-150600.23.7.3.150600.12.2.7

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() Extend a critical section to prevent chan from early freeing. Also make the l2cap_connect() return type void. Nothing is using the returned value but

• CVE-2024-36012HigMay 23, 2024
  affected < 6.4.0-150600.23.7.3.150600.12.2.7fixed 6.4.0-150600.23.7.3.150600.12.2.7

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: msft: fix slab-use-after-free in msft_do_close() Tying the msft->data lifetime to hdev by freeing it in hci_release_dev() to fix the following case: [use] msft_do_close() msft = hdev->msft_data;

• CVE-2024-36011MedMay 23, 2024
  affected < 6.4.0-150600.23.7.3.150600.12.2.7fixed 6.4.0-150600.23.7.3.150600.12.2.7

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HCI: Fix potential null-ptr-deref Fix potential null-ptr-deref in hci_le_big_sync_established_evt().

• CVE-2024-36010MedMay 22, 2024
  affected < 6.4.0-150600.23.14.2.150600.12.4.3fixed 6.4.0-150600.23.14.2.150600.12.4.3

  In the Linux kernel, the following vulnerability has been resolved: igb: Fix string truncation warnings in igb_set_fw_version Commit 1978d3ead82c ("intel: fix string truncation warnings") fixes '-Wformat-truncation=' warnings in igb_main.c by using kasprintf. drivers/net/ether

• CVE-2023-52879HigMay 21, 2024
  affected < 6.4.0-150600.23.14.2.150600.12.4.3fixed 6.4.0-150600.23.14.2.150600.12.4.3

  In the Linux kernel, the following vulnerability has been resolved: tracing: Have trace_event_file have ref counters The following can crash the kernel: # cd /sys/kernel/tracing # echo 'p:sched schedule' > kprobe_events # exec 5>>events/kprobes/sched/enable # > kprobe_even

• CVE-2023-52878MedMay 21, 2024
  affected < 6.4.0-150600.23.14.2.150600.12.4.3fixed 6.4.0-150600.23.14.2.150600.12.4.3

  In the Linux kernel, the following vulnerability has been resolved: can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds If the "struct can_priv::echoo_skb" is accessed out of bounds, this would cause a kernel crash. Instead, issue a

• CVE-2023-52877MedMay 21, 2024
  affected < 6.4.0-150600.23.14.2.150600.12.4.3fixed 6.4.0-150600.23.14.2.150600.12.4.3

  In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() It is possible that typec_register_partner() returns ERR_PTR on failure. When port->partner is an error, a NULL pointer dereference may occur as

• CVE-2023-52876MedMay 21, 2024
  affected < 6.4.0-150600.23.14.2.150600.12.4.3fixed 6.4.0-150600.23.14.2.150600.12.4.3

  In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data Add the check for the return value of mtk_alloc_clk_data() in order to avoid NULL pointer dereference.

• CVE-2023-52875MedMay 21, 2024
  affected < 6.4.0-150600.23.14.2.150600.12.4.3fixed 6.4.0-150600.23.14.2.150600.12.4.3

  In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data Add the check for the return value of mtk_alloc_clk_data() in order to avoid NULL pointer dereference.

• CVE-2023-52874HigMay 21, 2024
  affected < 6.4.0-150600.23.14.2.150600.12.4.3fixed 6.4.0-150600.23.14.2.150600.12.4.3

  In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Zero out the missing RSI in TDX_HYPERCALL macro In the TDX_HYPERCALL asm, after the TDCALL instruction returns from the untrusted VMM, the registers that the TDX guest shares to the VMM need to be clea