VYPR

rpm package

suse/kernel-default-base&distro=SUSE Linux Enterprise Module for Basesystem 15 SP6

pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6

Vulnerabilities (3,752)

  • CVE-2024-53042MedNov 19, 2024
    affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

    In the Linux kernel, the following vulnerability has been resolved: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() There are code paths from which the function is called without holding the RCU read lock, resulting in a suspicious RCU usage warning [

  • CVE-2024-50304MedNov 19, 2024
    affected < 6.4.0-150600.23.38.1.150600.12.16.2fixed 6.4.0-150600.23.38.1.150600.12.16.2

    In the Linux kernel, the following vulnerability has been resolved: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() The per-netns IP tunnel hash table is protected by the RTNL mutex and ip_tunnel_find() is only called from the control path where the mutex

  • CVE-2024-50302MedKEVNov 19, 2024
    affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

    In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak k

  • CVE-2024-50301HigNov 19, 2024
    affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

    In the Linux kernel, the following vulnerability has been resolved: security/keys: fix slab-out-of-bounds in key_task_permission KASAN reports an out of bounds read: BUG: KASAN: slab-out-of-bounds in __kuid_val include/linux/uidgid.h:36 BUG: KASAN: slab-out-of-bounds in uid_eq

  • CVE-2024-50299HigNov 19, 2024
    affected < 6.4.0-150600.23.38.1.150600.12.16.2fixed 6.4.0-150600.23.38.1.150600.12.16.2

    In the Linux kernel, the following vulnerability has been resolved: sctp: properly validate chunk size in sctp_sf_ootb() A size validation fix similar to that in Commit 50619dbf8db7 ("sctp: add size validation when walking chunks") is also required in sctp_sf_ootb() to address

  • CVE-2024-50298MedNov 19, 2024
    affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

    In the Linux kernel, the following vulnerability has been resolved: net: enetc: allocate vf_state during PF probes In the previous implementation, vf_state is allocated memory only when VF is enabled. However, net_device_ops::ndo_set_vf_mac() may be called before VF is enabled

  • CVE-2024-50296MedNov 19, 2024
    affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

    In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when uninstalling driver When the driver is uninstalled and the VF is disabled concurrently, a kernel crash occurs. The reason is that the two actions call function pci_disable_sriov

  • CVE-2024-50295MedNov 19, 2024
    affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

    In the Linux kernel, the following vulnerability has been resolved: net: arc: fix the device for dma_map_single/dma_unmap_single The ndev->dev and pdev->dev aren't the same device, use ndev->dev.parent which has dma_mask, ndev->dev.parent is just pdev->dev. Or it would cause th

  • CVE-2024-50294HigNov 19, 2024
    affected < 6.4.0-150600.23.42.2.150600.12.18.4fixed 6.4.0-150600.23.42.2.150600.12.18.4

    In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix missing locking causing hanging calls If a call gets aborted (e.g. because kafs saw a signal) between it being queued for connection and the I/O thread picking up the call, the abort will be prioriti

  • CVE-2024-50292MedNov 19, 2024
    affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

    In the Linux kernel, the following vulnerability has been resolved: ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove In case of error when requesting ctrl_chan DMA channel, ctrl_chan is not null. So the release of the dma channel leads to the following issu

  • CVE-2024-50290MedNov 19, 2024
    affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

    In the Linux kernel, the following vulnerability has been resolved: media: cx24116: prevent overflows on SNR calculus as reported by Coverity, if reading SNR registers fail, a negative number will be returned, causing an underflow when reading SNR registers. Prevent that.

  • CVE-2024-50289MedNov 19, 2024
    affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

    In the Linux kernel, the following vulnerability has been resolved: media: av7110: fix a spectre vulnerability As warned by smatch: drivers/staging/media/av7110/av7110_ca.c:270 dvb_ca_ioctl() warn: potential spectre issue 'av7110->ci_slot' [w] (local cap) There is a spectre-r

  • CVE-2024-50287MedNov 19, 2024
    affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

    In the Linux kernel, the following vulnerability has been resolved: media: v4l2-tpg: prevent the risk of a division by zero As reported by Coverity, the logic at tpg_precalculate_line() blindly rescales the buffer even when scaled_witdh is equal to zero. If this ever happens, t

  • CVE-2024-50282HigNov 19, 2024
    affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

    In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() Avoid a possible buffer overflow if size is larger than 4K. (cherry picked from commit f5d873f5825b40d886d03bd2aede91d4cf002434)

  • CVE-2024-50280HigNov 19, 2024
    affected < 6.4.0-150600.23.33.1.150600.12.14.1fixed 6.4.0-150600.23.33.1.150600.12.14.1

    In the Linux kernel, the following vulnerability has been resolved: dm cache: fix flushing uninitialized delayed_work on cache_ctr error An unexpected WARN_ON from flush_work() may occur when cache creation fails, caused by destroying the uninitialized delayed_work waker in the

  • CVE-2024-50279HigNov 19, 2024
    affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

    In the Linux kernel, the following vulnerability has been resolved: dm cache: fix out-of-bounds access to the dirty bitset when resizing dm-cache checks the dirty bits of the cache blocks to be dropped when shrinking the fast device, but an index bug in bitset iteration causes

  • CVE-2024-50278HigNov 19, 2024
    affected < 6.4.0-150600.23.33.1.150600.12.14.1fixed 6.4.0-150600.23.33.1.150600.12.14.1

    In the Linux kernel, the following vulnerability has been resolved: dm cache: fix potential out-of-bounds access on the first resume Out-of-bounds access occurs if the fast device is expanded unexpectedly before the first-time resume of the cache table. This happens because exp

  • CVE-2024-50276CriNov 19, 2024
    affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

    In the Linux kernel, the following vulnerability has been resolved: net: vertexcom: mse102x: Fix possible double free of TX skb The scope of the TX skb is wider than just mse102x_tx_frame_spi(), so in case the TX skb room needs to be expanded, we should free the the temporary s

  • CVE-2024-50275HigNov 19, 2024
    affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

    In the Linux kernel, the following vulnerability has been resolved: arm64/sve: Discard stale CPU state when handling SVE traps The logic for handling SVE traps manipulates saved FPSIMD/SVE state incorrectly, and a race with preemption can result in a task having TIF_SVE set and

  • CVE-2024-50274HigNov 19, 2024
    affected < 6.4.0-150600.23.30.1.150600.12.12.6fixed 6.4.0-150600.23.30.1.150600.12.12.6

    In the Linux kernel, the following vulnerability has been resolved: idpf: avoid vport access in idpf_get_link_ksettings When the device control plane is removed or the platform running device control plane is rebooted, a reset is detected on the driver. On driver reset, it rele

Page 96 of 188