rpm package
suse/kernel-default-base&distro=SUSE Enterprise Storage 7.1
pkg:rpm/suse/kernel-default-base&distro=SUSE%20Enterprise%20Storage%207.1
Vulnerabilities (1,483)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-40204 | — | < 5.3.18-150300.59.229.3.150300.18.136.3 | 5.3.18-150300.59.229.3.150300.18.136.3 | Nov 12, 2025 | In the Linux kernel, the following vulnerability has been resolved: sctp: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this. | ||
| CVE-2025-40154 | — | < 5.3.18-150300.59.229.3.150300.18.136.3 | 5.3.18-150300.59.229.3.150300.18.136.3 | Nov 12, 2025 | In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping When an invalid value is passed via quirk option, currently bytcr_rt5640 driver only shows an error message but leaves as is. This may lead to unepxect | ||
| CVE-2025-40121 | — | < 5.3.18-150300.59.229.3.150300.18.136.3 | 5.3.18-150300.59.229.3.150300.18.136.3 | Nov 12, 2025 | In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping When an invalid value is passed via quirk option, currently bytcr_rt5640 driver just ignores and leaves as is, which may lead to unepxected results lik | ||
| CVE-2025-40082 | — | < 5.3.18-150300.59.226.2.150300.18.134.2 | 5.3.18-150300.59.226.2.150300.18.134.2 | Oct 28, 2025 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() BUG: KASAN: slab-out-of-bounds in hfsplus_uni2asc+0xa71/0xb90 fs/hfsplus/unicode.c:186 Read of size 2 at addr ffff8880289ef218 by task syz.6.248/14290 | ||
| CVE-2025-40040 | — | < 5.3.18-150300.59.229.3.150300.18.136.3 | 5.3.18-150300.59.229.3.150300.18.136.3 | Oct 28, 2025 | In the Linux kernel, the following vulnerability has been resolved: mm/ksm: fix flag-dropping behavior in ksm_madvise syzkaller discovered the following crash: (kernel BUG) [ 44.607039] ------------[ cut here ]------------ [ 44.607422] kernel BUG at mm/userfaultfd.c:2067! | ||
| CVE-2025-40018 | — | < 5.3.18-150300.59.226.2.150300.18.134.2 | 5.3.18-150300.59.226.2.150300.18.134.2 | Oct 24, 2025 | In the Linux kernel, the following vulnerability has been resolved: ipvs: Defer ip_vs_ftp unregister during netns cleanup On the netns cleanup path, __ip_vs_ftp_exit() may unregister ip_vs_ftp before connections with valid cp->app pointers are flushed, leading to a use-after-fr | ||
| CVE-2023-53722 | — | < 5.3.18-150300.59.226.2.150300.18.134.2 | 5.3.18-150300.59.226.2.150300.18.134.2 | Oct 22, 2025 | In the Linux kernel, the following vulnerability has been resolved: md: raid1: fix potential OOB in raid1_remove_disk() If rddev->raid_disk is greater than mddev->raid_disks, there will be an out-of-bounds in raid1_remove_disk(). We have already found similar reports as follows | ||
| CVE-2023-53717 | — | < 5.3.18-150300.59.229.3.150300.18.136.3 | 5.3.18-150300.59.229.3.150300.18.136.3 | Oct 22, 2025 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() Fix a stack-out-of-bounds write that occurs in a WMI response callback function that is called after a timeout occurs in ath9k_wm | ||
| CVE-2023-53705 | — | < 5.3.18-150300.59.226.2.150300.18.134.2 | 5.3.18-150300.59.226.2.150300.18.134.2 | Oct 22, 2025 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bounds access in ipv6_find_tlv() optlen is fetched without checking whether there is more than one byte to parse. It can lead to out-of-bounds access. Found by InfoTeCS on behalf of Linux Veri | ||
| CVE-2022-50574 | — | < 5.3.18-150300.59.226.2.150300.18.134.2 | 5.3.18-150300.59.226.2.150300.18.134.2 | Oct 22, 2025 | In the Linux kernel, the following vulnerability has been resolved: drm/omap: dss: Fix refcount leak bugs In dss_init_ports() and __dss_uninit_ports(), we should call of_node_put() for the reference returned by of_graph_get_port_by_id() in fail path or when it is not used anymo | ||
| CVE-2022-50563 | — | < 5.3.18-150300.59.226.2.150300.18.134.2 | 5.3.18-150300.59.226.2.150300.18.134.2 | Oct 22, 2025 | In the Linux kernel, the following vulnerability has been resolved: dm thin: Fix UAF in run_timer_softirq() When dm_resume() and dm_destroy() are concurrent, it will lead to UAF, as follows: BUG: KASAN: use-after-free in __run_timers+0x173/0x710 Write of size 8 at addr ffff8 | ||
| CVE-2025-39973 | — | < 5.3.18-150300.59.226.2.150300.18.134.2 | 5.3.18-150300.59.226.2.150300.18.134.2 | Oct 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for ring_len param The `ring_len` parameter provided by the virtual function (VF) is assigned directly to the hardware memory context (HMC) without any validation. To address this, introdu | ||
| CVE-2025-39968 | — | < 5.3.18-150300.59.226.2.150300.18.134.2 | 5.3.18-150300.59.226.2.150300.18.134.2 | Oct 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: i40e: add max boundary check for VF filters There is no check for max filters that VF can request. Add it. | ||
| CVE-2023-53673 | Hig | 7.8 | < 5.3.18-150300.59.226.2.150300.18.134.2 | 5.3.18-150300.59.226.2.150300.18.134.2 | Oct 7, 2025 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: call disconnect callback before deleting conn In hci_cs_disconnect, we do hci_conn_del even if disconnection failed. ISO, L2CAP and SCO connections refer to the hci_conn without hci_conn_ | |
| CVE-2023-53676 | — | < 5.3.18-150300.59.229.3.150300.18.136.3 | 5.3.18-150300.59.229.3.150300.18.136.3 | Oct 7, 2025 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() The function lio_target_nacl_info_show() uses sprintf() in a loop to print details for every iSCSI connection in a session without checkin | ||
| CVE-2023-53659 | — | < 5.3.18-150300.59.229.3.150300.18.136.3 | 5.3.18-150300.59.229.3.150300.18.136.3 | Oct 7, 2025 | In the Linux kernel, the following vulnerability has been resolved: iavf: Fix out-of-bounds when setting channels on remove If we set channels greater during iavf_remove(), and waiting reset done would be timeout, then returned with error but changed num_active_queues directly, | ||
| CVE-2022-50549 | — | < 5.3.18-150300.59.226.2.150300.18.134.2 | 5.3.18-150300.59.226.2.150300.18.134.2 | Oct 7, 2025 | In the Linux kernel, the following vulnerability has been resolved: dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata Following concurrent processes: P1(drop cache) P2(kworker) drop_caches_sysctl_handler drop_slab shrink_slab | ||
| CVE-2022-50546 | — | < 5.3.18-150300.59.226.2.150300.18.134.2 | 5.3.18-150300.59.226.2.150300.18.134.2 | Oct 7, 2025 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix uninititialized value in 'ext4_evict_inode' Syzbot found the following issue: ===================================================== BUG: KMSAN: uninit-value in ext4_evict_inode+0xdd/0x26b0 fs/ext4/ino | ||
| CVE-2022-50544 | — | < 5.3.18-150300.59.226.2.150300.18.134.2 | 5.3.18-150300.59.226.2.150300.18.134.2 | Oct 7, 2025 | In the Linux kernel, the following vulnerability has been resolved: usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() xhci_alloc_stream_info() allocates stream context array for stream_info ->stream_ctx_array with xhci_alloc_stream_ctx(). When some error oc | ||
| CVE-2023-53619 | — | < 5.3.18-150300.59.226.2.150300.18.134.2 | 5.3.18-150300.59.226.2.150300.18.134.2 | Oct 7, 2025 | In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free If nf_conntrack_init_start() fails (for example due to a register_nf_conntrack_bpf() failure), the nf_conntrack_helper_fini() clean-up path frees th |
- CVE-2025-40204Nov 12, 2025affected < 5.3.18-150300.59.229.3.150300.18.136.3fixed 5.3.18-150300.59.229.3.150300.18.136.3
In the Linux kernel, the following vulnerability has been resolved: sctp: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this.
- CVE-2025-40154Nov 12, 2025affected < 5.3.18-150300.59.229.3.150300.18.136.3fixed 5.3.18-150300.59.229.3.150300.18.136.3
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping When an invalid value is passed via quirk option, currently bytcr_rt5640 driver only shows an error message but leaves as is. This may lead to unepxect
- CVE-2025-40121Nov 12, 2025affected < 5.3.18-150300.59.229.3.150300.18.136.3fixed 5.3.18-150300.59.229.3.150300.18.136.3
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping When an invalid value is passed via quirk option, currently bytcr_rt5640 driver just ignores and leaves as is, which may lead to unepxected results lik
- CVE-2025-40082Oct 28, 2025affected < 5.3.18-150300.59.226.2.150300.18.134.2fixed 5.3.18-150300.59.226.2.150300.18.134.2
In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() BUG: KASAN: slab-out-of-bounds in hfsplus_uni2asc+0xa71/0xb90 fs/hfsplus/unicode.c:186 Read of size 2 at addr ffff8880289ef218 by task syz.6.248/14290
- CVE-2025-40040Oct 28, 2025affected < 5.3.18-150300.59.229.3.150300.18.136.3fixed 5.3.18-150300.59.229.3.150300.18.136.3
In the Linux kernel, the following vulnerability has been resolved: mm/ksm: fix flag-dropping behavior in ksm_madvise syzkaller discovered the following crash: (kernel BUG) [ 44.607039] ------------[ cut here ]------------ [ 44.607422] kernel BUG at mm/userfaultfd.c:2067!
- CVE-2025-40018Oct 24, 2025affected < 5.3.18-150300.59.226.2.150300.18.134.2fixed 5.3.18-150300.59.226.2.150300.18.134.2
In the Linux kernel, the following vulnerability has been resolved: ipvs: Defer ip_vs_ftp unregister during netns cleanup On the netns cleanup path, __ip_vs_ftp_exit() may unregister ip_vs_ftp before connections with valid cp->app pointers are flushed, leading to a use-after-fr
- CVE-2023-53722Oct 22, 2025affected < 5.3.18-150300.59.226.2.150300.18.134.2fixed 5.3.18-150300.59.226.2.150300.18.134.2
In the Linux kernel, the following vulnerability has been resolved: md: raid1: fix potential OOB in raid1_remove_disk() If rddev->raid_disk is greater than mddev->raid_disks, there will be an out-of-bounds in raid1_remove_disk(). We have already found similar reports as follows
- CVE-2023-53717Oct 22, 2025affected < 5.3.18-150300.59.229.3.150300.18.136.3fixed 5.3.18-150300.59.229.3.150300.18.136.3
In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() Fix a stack-out-of-bounds write that occurs in a WMI response callback function that is called after a timeout occurs in ath9k_wm
- CVE-2023-53705Oct 22, 2025affected < 5.3.18-150300.59.226.2.150300.18.134.2fixed 5.3.18-150300.59.226.2.150300.18.134.2
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bounds access in ipv6_find_tlv() optlen is fetched without checking whether there is more than one byte to parse. It can lead to out-of-bounds access. Found by InfoTeCS on behalf of Linux Veri
- CVE-2022-50574Oct 22, 2025affected < 5.3.18-150300.59.226.2.150300.18.134.2fixed 5.3.18-150300.59.226.2.150300.18.134.2
In the Linux kernel, the following vulnerability has been resolved: drm/omap: dss: Fix refcount leak bugs In dss_init_ports() and __dss_uninit_ports(), we should call of_node_put() for the reference returned by of_graph_get_port_by_id() in fail path or when it is not used anymo
- CVE-2022-50563Oct 22, 2025affected < 5.3.18-150300.59.226.2.150300.18.134.2fixed 5.3.18-150300.59.226.2.150300.18.134.2
In the Linux kernel, the following vulnerability has been resolved: dm thin: Fix UAF in run_timer_softirq() When dm_resume() and dm_destroy() are concurrent, it will lead to UAF, as follows: BUG: KASAN: use-after-free in __run_timers+0x173/0x710 Write of size 8 at addr ffff8
- CVE-2025-39973Oct 15, 2025affected < 5.3.18-150300.59.226.2.150300.18.134.2fixed 5.3.18-150300.59.226.2.150300.18.134.2
In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for ring_len param The `ring_len` parameter provided by the virtual function (VF) is assigned directly to the hardware memory context (HMC) without any validation. To address this, introdu
- CVE-2025-39968Oct 15, 2025affected < 5.3.18-150300.59.226.2.150300.18.134.2fixed 5.3.18-150300.59.226.2.150300.18.134.2
In the Linux kernel, the following vulnerability has been resolved: i40e: add max boundary check for VF filters There is no check for max filters that VF can request. Add it.
- affected < 5.3.18-150300.59.226.2.150300.18.134.2fixed 5.3.18-150300.59.226.2.150300.18.134.2
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: call disconnect callback before deleting conn In hci_cs_disconnect, we do hci_conn_del even if disconnection failed. ISO, L2CAP and SCO connections refer to the hci_conn without hci_conn_
- CVE-2023-53676Oct 7, 2025affected < 5.3.18-150300.59.229.3.150300.18.136.3fixed 5.3.18-150300.59.229.3.150300.18.136.3
In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() The function lio_target_nacl_info_show() uses sprintf() in a loop to print details for every iSCSI connection in a session without checkin
- CVE-2023-53659Oct 7, 2025affected < 5.3.18-150300.59.229.3.150300.18.136.3fixed 5.3.18-150300.59.229.3.150300.18.136.3
In the Linux kernel, the following vulnerability has been resolved: iavf: Fix out-of-bounds when setting channels on remove If we set channels greater during iavf_remove(), and waiting reset done would be timeout, then returned with error but changed num_active_queues directly,
- CVE-2022-50549Oct 7, 2025affected < 5.3.18-150300.59.226.2.150300.18.134.2fixed 5.3.18-150300.59.226.2.150300.18.134.2
In the Linux kernel, the following vulnerability has been resolved: dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata Following concurrent processes: P1(drop cache) P2(kworker) drop_caches_sysctl_handler drop_slab shrink_slab
- CVE-2022-50546Oct 7, 2025affected < 5.3.18-150300.59.226.2.150300.18.134.2fixed 5.3.18-150300.59.226.2.150300.18.134.2
In the Linux kernel, the following vulnerability has been resolved: ext4: fix uninititialized value in 'ext4_evict_inode' Syzbot found the following issue: ===================================================== BUG: KMSAN: uninit-value in ext4_evict_inode+0xdd/0x26b0 fs/ext4/ino
- CVE-2022-50544Oct 7, 2025affected < 5.3.18-150300.59.226.2.150300.18.134.2fixed 5.3.18-150300.59.226.2.150300.18.134.2
In the Linux kernel, the following vulnerability has been resolved: usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() xhci_alloc_stream_info() allocates stream context array for stream_info ->stream_ctx_array with xhci_alloc_stream_ctx(). When some error oc
- CVE-2023-53619Oct 7, 2025affected < 5.3.18-150300.59.226.2.150300.18.134.2fixed 5.3.18-150300.59.226.2.150300.18.134.2
In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free If nf_conntrack_init_start() fails (for example due to a register_nf_conntrack_bpf() failure), the nf_conntrack_helper_fini() clean-up path frees th
Page 1 of 75