suse/kernel-default-base&distro=SUSE Linux Enterprise Module for Basesystem 15 SP6

Vulnerabilities (3,752)

• CVE-2024-35944MedMay 19, 2024
  affected < 6.4.0-150600.23.7.3.150600.12.2.7fixed 6.4.0-150600.23.7.3.150600.12.2.7

  In the Linux kernel, the following vulnerability has been resolved: VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() Syzkaller hit 'WARNING in dg_dispatch_as_host' bug. memcpy: detected field-spanning write (size 56) of single field "&dg_info->msg" at drivers/misc/

• CVE-2024-35943MedMay 19, 2024
  affected < 6.4.0-150600.23.7.3.150600.12.2.7fixed 6.4.0-150600.23.7.3.150600.12.2.7

  In the Linux kernel, the following vulnerability has been resolved: pmdomain: ti: Add a null pointer check to the omap_prm_domain_init devm_kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure. Ensure the allocation was successful by chec

• CVE-2024-35942MedMay 19, 2024
  affected < 6.4.0-150600.23.17.1.150600.12.6.2fixed 6.4.0-150600.23.17.1.150600.12.6.2

  In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain According to i.MX8MP RM and HDMI ADD, the fdcc clock is part of hdmi rx verification IP that should not enable for HDMI TX. But actually i

• CVE-2024-35940MedMay 19, 2024
  affected < 6.4.0-150600.23.7.3.150600.12.2.7fixed 6.4.0-150600.23.7.3.150600.12.2.7

  In the Linux kernel, the following vulnerability has been resolved: pstore/zone: Add a null pointer check to the psz_kmsg_read kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure. Ensure the allocation was successful by checking the poin

• CVE-2024-35939CriMay 19, 2024
  affected < 6.4.0-150600.23.22.1.150600.12.8.3fixed 6.4.0-150600.23.22.1.150600.12.8.3

  In the Linux kernel, the following vulnerability has been resolved: dma-direct: Leak pages on dma_set_decrypted() failure On TDX it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is returned and the result

• CVE-2024-35938MedMay 19, 2024
  affected < 6.4.0-150600.23.7.3.150600.12.2.7fixed 6.4.0-150600.23.7.3.150600.12.2.7

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: decrease MHI channel buffer length to 8KB Currently buf_len field of ath11k_mhi_config_qca6390 is assigned with 0, making MHI use a default size, 64KB, to allocate channel buffers. This is likely

• CVE-2024-35937HigMay 19, 2024
  affected < 6.4.0-150600.23.7.3.150600.12.2.7fixed 6.4.0-150600.23.7.3.150600.12.2.7

  In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check A-MSDU format more carefully If it looks like there's another subframe in the A-MSDU but the header isn't fully there, we can end up reading data out of bounds, only to discard later. Make

• CVE-2024-35936MedMay 19, 2024
  affected < 6.4.0-150600.23.7.3.150600.12.2.7fixed 6.4.0-150600.23.7.3.150600.12.2.7

  In the Linux kernel, the following vulnerability has been resolved: btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() The unhandled case in btrfs_relocate_sys_chunks() loop is a corruption, as it could be caused only by two impossible conditions: - at first

• CVE-2024-35935LowMay 19, 2024
  affected < 6.4.0-150600.23.7.3.150600.12.2.7fixed 6.4.0-150600.23.7.3.150600.12.2.7

  In the Linux kernel, the following vulnerability has been resolved: btrfs: send: handle path ref underflow in header iterate_inode_ref() Change BUG_ON to proper error handling if building the path buffer fails. The pointers are not printed so we don't accidentally leak kernel a

• CVE-2024-35934MedMay 19, 2024
  affected < 6.4.0-150600.23.17.1.150600.12.6.2fixed 6.4.0-150600.23.17.1.150600.12.6.2

  In the Linux kernel, the following vulnerability has been resolved: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() Many syzbot reports show extreme rtnl pressure, and many of them hint that smc acquires rtnl in netns creation for no good reason [1] This patch

• CVE-2024-35933MedMay 19, 2024
  affected < 6.4.0-150600.23.7.3.150600.12.2.7fixed 6.4.0-150600.23.7.3.150600.12.2.7

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Fix null ptr deref in btintel_read_version If hci_cmd_sync_complete() is triggered and skb is NULL, then hdev->req_skb is NULL, which will cause this issue.

• CVE-2024-35932HigMay 19, 2024
  affected < 6.4.0-150600.23.7.3.150600.12.2.7fixed 6.4.0-150600.23.7.3.150600.12.2.7

  In the Linux kernel, the following vulnerability has been resolved: drm/vc4: don't check if plane->state->fb == state->fb Currently, when using non-blocking commits, we can see the following kernel warning: [ 110.908514] ------------[ cut here ]------------ [ 110.908529] ref

• CVE-2024-35931HigMay 19, 2024
  affected < 6.4.0-150600.23.7.3.150600.12.2.7fixed 6.4.0-150600.23.7.3.150600.12.2.7

  In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip do PCI error slot reset during RAS recovery Why: The PCI error slot reset maybe triggered after inject ue to UMC multi times, this caused system hang. [ 557.371857] amdgpu 0000:af:

• CVE-2024-35930MedMay 19, 2024
  affected < 6.4.0-150600.23.7.3.150600.12.2.7fixed 6.4.0-150600.23.7.3.150600.12.2.7

  In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() The call to lpfc_sli4_resume_rpi() in lpfc_rcv_padisc() may return an unsuccessful status. In such cases, the elsiocb is not issued, the completion is

• CVE-2024-35927MedMay 19, 2024
  affected < 6.4.0-150600.23.7.3.150600.12.2.7fixed 6.4.0-150600.23.7.3.150600.12.2.7

  In the Linux kernel, the following vulnerability has been resolved: drm: Check output polling initialized before disabling In drm_kms_helper_poll_disable() check if output polling support is initialized before disabling polling. If not flag this as a warning. Additionally in dr

• CVE-2024-35926MedMay 19, 2024
  affected < 6.4.0-150600.23.14.2.150600.12.4.3fixed 6.4.0-150600.23.14.2.150600.12.4.3

  In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - Fix async_disable descriptor leak The disable_async paths of iaa_compress/decompress() don't free idxd descriptors in the async_disable case. Currently this only happens in the testcases where req

• CVE-2024-35925MedMay 19, 2024
  affected < 6.4.0-150600.23.14.2.150600.12.4.3fixed 6.4.0-150600.23.14.2.150600.12.4.3

  In the Linux kernel, the following vulnerability has been resolved: block: prevent division by zero in blk_rq_stat_sum() The expression dst->nr_samples + src->nr_samples may have zero value on overflow. It is necessary to add a check to avoid division by zero. Found by Linux V

• CVE-2024-35924HigMay 19, 2024
  affected < 6.4.0-150600.23.7.3.150600.12.2.7fixed 6.4.0-150600.23.7.3.150600.12.2.7

  In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Limit read size on v1.2 Between UCSI 1.2 and UCSI 2.0, the size of the MESSAGE_IN region was increased from 16 to 256. In order to avoid overflowing reads for older systems, add a mechanism to

• CVE-2024-35922MedMay 19, 2024
  affected < 6.4.0-150600.23.7.3.150600.12.2.7fixed 6.4.0-150600.23.7.3.150600.12.2.7

  In the Linux kernel, the following vulnerability has been resolved: fbmon: prevent division by zero in fb_videomode_from_videomode() The expression htotal * vtotal can have a zero value on overflow. It is necessary to prevent division by zero like in fb_var_to_videomode(). Fou

• CVE-2024-35921HigMay 19, 2024
  affected < 6.4.0-150600.23.7.3.150600.12.2.7fixed 6.4.0-150600.23.7.3.150600.12.2.7

  In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix oops when HEVC init fails The stateless HEVC decoder saves the instance pointer in the context regardless if the initialization worked or not. This caused a use after free, when the