suse/kernel-docs&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

Vulnerabilities (2,318)

• CVE-2022-50489Oct 4, 2025
  affected < 5.14.21-150500.55.127.1fixed 5.14.21-150500.55.127.1

  In the Linux kernel, the following vulnerability has been resolved: drm/mipi-dsi: Detach devices when removing the host Whenever the MIPI-DSI host is unregistered, the code of mipi_dsi_host_unregister() loops over every device currently found on that bus and will unregister it.

• CVE-2022-50488Oct 4, 2025
  affected < 5.14.21-150500.55.127.1fixed 5.14.21-150500.55.127.1

  In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix possible uaf for 'bfqq->bic' Our test report a uaf for 'bfqq->bic' in 5.10: ================================================================== BUG: KASAN: use-after-free in bfq_select_queue+0x3

• CVE-2023-53579Oct 4, 2025
  affected < 5.14.21-150500.55.127.1fixed 5.14.21-150500.55.127.1

  In the Linux kernel, the following vulnerability has been resolved: gpio: mvebu: fix irq domain leak Uwe Kleine-König pointed out we still have one resource leak in the mvebu driver triggered on driver detach. Let's address it with a custom devm action.

• CVE-2023-53578Oct 4, 2025
  affected < 5.14.21-150500.55.127.1fixed 5.14.21-150500.55.127.1

  In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume() Syzbot reported a bug as following: ===================================================== BUG: KMSAN: uninit-value in qrtr_tx_resume+0x185/0x1f0

• CVE-2023-53574Oct 4, 2025
  affected < 5.14.21-150500.55.127.1fixed 5.14.21-150500.55.127.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: delete timer and free skb queue when unloading Fix possible crash and memory leak on driver unload by deleting TX purge timer and freeing C2H queue in 'rtw_core_deinit()', shrink critical section i

• CVE-2023-53572Oct 4, 2025
  affected < 5.14.21-150500.55.127.1fixed 5.14.21-150500.55.127.1

  In the Linux kernel, the following vulnerability has been resolved: clk: imx: scu: use _safe list iterator to avoid a use after free This loop is freeing "clk" so it needs to use list_for_each_entry_safe(). Otherwise it dereferences a freed variable to get the next item on the

• CVE-2023-53571Oct 4, 2025
  affected < 5.14.21-150500.55.127.1fixed 5.14.21-150500.55.127.1

  In the Linux kernel, the following vulnerability has been resolved: drm/i915: Make intel_get_crtc_new_encoder() less oopsy The point of the WARN was to print something, not oops straight up. Currently that is precisely what happens if we can't find the connector for the crtc in

• CVE-2023-53568Oct 4, 2025
  affected < 5.14.21-150500.55.127.1fixed 5.14.21-150500.55.127.1

  In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: don't leak memory if dev_set_name() fails When dev_set_name() fails, zcdn_create() doesn't free the newly allocated resources. Do it.

• CVE-2023-53567Oct 4, 2025
  affected < 5.14.21-150500.55.127.1fixed 5.14.21-150500.55.127.1

  In the Linux kernel, the following vulnerability has been resolved: spi: qup: Don't skip cleanup in remove's error path Returning early in a platform driver's remove callback is wrong. In this case the dma resources are not released in the error path. this is never retried late

• CVE-2023-53566Oct 4, 2025
  affected < 5.14.21-150500.55.127.1fixed 5.14.21-150500.55.127.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: fix null deref on element insertion There is no guarantee that rb_prev() will not return NULL in nft_rbtree_gc_elem(): general protection fault, probably for non-canonical address 0x

• CVE-2023-53564Oct 4, 2025
  affected < 5.14.21-150500.55.127.1fixed 5.14.21-150500.55.127.1

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix defrag path triggering jbd2 ASSERT code path: ocfs2_ioctl_move_extents ocfs2_move_extents ocfs2_defrag_extent __ocfs2_move_extent + ocfs2_journal_access_di + ocfs2_split_extent //sub-

• CVE-2023-53562Oct 4, 2025
  affected < 5.14.21-150500.55.127.1fixed 5.14.21-150500.55.127.1

  In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix vram leak on bind errors Make sure to release the VRAM buffer also in a case a subcomponent fails to bind. Patchwork: https://patchwork.freedesktop.org/patch/525094/

• CVE-2023-53560Oct 4, 2025
  affected < 5.14.21-150500.55.127.1fixed 5.14.21-150500.55.127.1

  In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Add histograms to hist_vars if they have referenced variables Hist triggers can have referenced variables without having direct variables fields. This can be the case if referenced variables

• CVE-2023-53559Oct 4, 2025
  affected < 5.14.21-150500.55.127.1fixed 5.14.21-150500.55.127.1

  In the Linux kernel, the following vulnerability has been resolved: ip_vti: fix potential slab-use-after-free in decode_session6 When ip_vti device is set to the qdisc of the sfb type, the cb field of the sent skb may be modified during enqueuing. Then, slab-use-after-free may

• CVE-2023-53557Oct 4, 2025
  affected < 5.14.21-150500.55.127.1fixed 5.14.21-150500.55.127.1

  In the Linux kernel, the following vulnerability has been resolved: fprobe: Release rethook after the ftrace_ops is unregistered While running bpf selftests it's possible to get following fault: general protection fault, probably for non-canonical address \ 0x6b6b6b6b6b6b6

• CVE-2023-53556Oct 4, 2025
  affected < 5.14.21-150500.55.127.1fixed 5.14.21-150500.55.127.1

  In the Linux kernel, the following vulnerability has been resolved: iavf: Fix use-after-free in free_netdev We do netif_napi_add() for all allocated q_vectors[], but potentially do netif_napi_del() for part of them, then kfree q_vectors and leave invalid pointers at dev->napi_l

• CVE-2023-53554Oct 4, 2025
  affected < 5.14.21-150500.55.127.1fixed 5.14.21-150500.55.127.1

  In the Linux kernel, the following vulnerability has been resolved: staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() The "exc->key_len" is a u16 that comes from the user. If it's over IW_ENCODING_TOKEN_MAX (64) that could lead to memory corruption.

• CVE-2023-53553Oct 4, 2025
  affected < 5.14.21-150500.55.127.1fixed 5.14.21-150500.55.127.1

  In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: avoid struct memcpy overrun warning A previous patch addressed the fortified memcpy warning for most builds, but I still see this one with gcc-9: In file included from include/linux/string.h:254,

• CVE-2023-53552Oct 4, 2025
  affected < 5.14.21-150500.55.127.1fixed 5.14.21-150500.55.127.1

  In the Linux kernel, the following vulnerability has been resolved: drm/i915: mark requests for GuC virtual engines to avoid use-after-free References to i915_requests may be trapped by userspace inside a sync_file or dmabuf (dma-resv) and held indefinitely across different pro

• CVE-2023-53551Oct 4, 2025
  affected < 5.14.21-150500.55.127.1fixed 5.14.21-150500.55.127.1

  In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_serial: Add null pointer check in gserial_resume Consider a case where gserial_disconnect has already cleared gser->ioport. And if a wakeup interrupt triggers afterwards, gserial_resume gets call