suse/kernel-docs&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

Vulnerabilities (2,830)

• CVE-2022-48732Jun 20, 2024
  affected < 5.14.21-150400.24.128.1fixed 5.14.21-150400.24.128.1

  In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix off by one in BIOS boundary checking Bounds checking when parsing init scripts embedded in the BIOS reject access to the last byte. This causes driver initialization to fail on Apple eMac's wit

• CVE-2022-48730Jun 20, 2024
  affected < 5.14.21-150400.24.128.1fixed 5.14.21-150400.24.128.1

  In the Linux kernel, the following vulnerability has been resolved: dma-buf: heaps: Fix potential spectre v1 gadget It appears like nr could be a Spectre v1 gadget as it's supplied by a user and used as an array index. Prevent the contents of kernel memory from being leaked to

• CVE-2022-48729Jun 20, 2024
  affected < 5.14.21-150400.24.128.1fixed 5.14.21-150400.24.128.1

  In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix panic with larger ipoib send_queue_size When the ipoib send_queue_size is increased from the default the following panic happens: RIP: 0010:hfi1_ipoib_drain_tx_ring+0x45/0xf0 [hfi1] Code: 31 e

• CVE-2022-48728Jun 20, 2024
  affected < 5.14.21-150400.24.128.1fixed 5.14.21-150400.24.128.1

  In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix AIP early init panic An early failure in hfi1_ipoib_setup_rn() can lead to the following panic: BUG: unable to handle kernel NULL pointer dereference at 00000000000001b0 PGD 0 P4D 0 Oops: 00

• CVE-2022-48727Jun 20, 2024
  affected < 5.14.21-150400.24.128.1fixed 5.14.21-150400.24.128.1

  In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Avoid consuming a stale esr value when SError occur When any exception other than an IRQ occurs, the CPU updates the ESR_EL2 register with the exception syndrome. An SError may also become pending,

• CVE-2022-48726Jun 20, 2024
  affected < 5.14.21-150400.24.128.1fixed 5.14.21-150400.24.128.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Protect mc during concurrent multicast leaves Partially revert the commit mentioned in the Fixes line to make sure that allocation and erasing multicast struct are locked. BUG: KASAN: use-after-fr

• CVE-2022-48725Jun 20, 2024
  affected < 5.14.21-150400.24.128.1fixed 5.14.21-150400.24.128.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix refcounting leak in siw_create_qp() The atomic_inc() needs to be paired with an atomic_dec() on the error path.

• CVE-2022-48724Jun 20, 2024
  affected < 5.14.21-150400.24.128.1fixed 5.14.21-150400.24.128.1

  In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping() After commit e3beca48a45b ("irqdomain/treewide: Keep firmware node unconditionally allocated"). For tear down scenario, fn is only freed afte

• CVE-2022-48723Jun 20, 2024
  affected < 5.14.21-150400.24.128.1fixed 5.14.21-150400.24.128.1

  In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: fix reference count leak in uniphier_spi_probe() The issue happens in several error paths in uniphier_spi_probe(). When either dma_get_slave_caps() or devm_spi_register_master() returns an error

• CVE-2022-48722Jun 20, 2024
  affected < 5.14.21-150400.24.128.1fixed 5.14.21-150400.24.128.1

  In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: ca8210: Stop leaking skb's Upon error the ieee802154_xmit_complete() helper is not called. Only ieee802154_wake_queue() is called manually. We then leak the skb structure. Free the skb structu

• CVE-2022-48721Jun 20, 2024
  affected < 5.14.21-150400.24.128.1fixed 5.14.21-150400.24.128.1

  In the Linux kernel, the following vulnerability has been resolved: net/smc: Forward wakeup to smc socket waitqueue after fallback When we replace TCP with SMC and a fallback occurs, there may be some socket waitqueue entries remaining in smc socket->wq, such as eppoll_entries

• CVE-2022-48720Jun 20, 2024
  affected < 5.14.21-150400.24.128.1fixed 5.14.21-150400.24.128.1

  In the Linux kernel, the following vulnerability has been resolved: net: macsec: Fix offload support for NETDEV_UNREGISTER event Current macsec netdev notify handler handles NETDEV_UNREGISTER event by releasing relevant SW resources only, this causes resources leak in case of m

• CVE-2022-48717Jun 20, 2024
  affected < 5.14.21-150400.24.128.1fixed 5.14.21-150400.24.128.1

  In the Linux kernel, the following vulnerability has been resolved: ASoC: max9759: fix underflow in speaker_gain_control_put() Check for negative values of "priv->gain" to prevent an out of bounds access. The concern is that these might come from the user via: -> snd_ctl_ele

• CVE-2022-48715Jun 20, 2024
  affected < 5.14.21-150400.24.128.1fixed 5.14.21-150400.24.128.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe Running tests with a debug kernel shows that bnx2fc_recv_frame() is modifying the per_cpu lport stats counters in a non-mpsafe way. Just boot a debug kernel and r

• CVE-2022-48713Jun 20, 2024
  affected < 5.14.21-150400.24.128.1fixed 5.14.21-150400.24.128.1

  In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/pt: Fix crash with stop filters in single-range mode Add a check for !buf->single before calling pt_buffer_region_size in a place where a missing check can cause a kernel crash. Fixes a bug intr

• CVE-2022-48712Jun 20, 2024
  affected < 5.14.21-150400.24.128.1fixed 5.14.21-150400.24.128.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix error handling in ext4_fc_record_modified_inode() Current code does not fully takes care of krealloc() error case, which could lead to silent memory corruption or a kernel bug. This patch fixes that.

• CVE-2022-48711Jun 20, 2024
  affected < 5.14.21-150400.24.128.1fixed 5.14.21-150400.24.128.1

  In the Linux kernel, the following vulnerability has been resolved: tipc: improve size validations for received domain records The function tipc_mon_rcv() allows a node to receive and process domain_record structs from peer nodes to track their views of the network topology. T

• CVE-2021-47620Jun 20, 2024
  affected < 5.14.21-150400.24.128.1fixed 5.14.21-150400.24.128.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: refactor malicious adv data check Check for out-of-bound read was being performed at the end of while num_reports loop, and would fill journal with false positives. Added check to beginning of loop p

• CVE-2021-47619Jun 20, 2024
  affected < 5.14.21-150400.24.128.1fixed 5.14.21-150400.24.128.1

  In the Linux kernel, the following vulnerability has been resolved: i40e: Fix queues reservation for XDP When XDP was configured on a system with large number of CPUs and X722 NIC there was a call trace with NULL pointer dereference. i40e 0000:87:00.0: failed to get tracking f

• CVE-2021-47618Jun 20, 2024
  affected < 5.14.21-150400.24.128.1fixed 5.14.21-150400.24.128.1

  In the Linux kernel, the following vulnerability has been resolved: ARM: 9170/1: fix panic when kasan and kprobe are enabled arm32 uses software to simulate the instruction replaced by kprobe. some instructions may be simulated by constructing assembly functions. therefore, bef