suse/kernel-docs&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE

Vulnerabilities (52)

• CVE-2025-38713HigSep 4, 2025
  affected < 3.0.101-108.192.1fixed 3.0.101-108.192.1

  In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() The hfsplus_readdir() method is capable to crash by calling hfsplus_uni2asc(): [ 667.121659][ T9805] =================================================

• CVE-2025-38685HigSep 4, 2025
  affected < 3.0.101-108.192.1fixed 3.0.101-108.192.1

  In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix vmalloc out-of-bounds write in fast_imageblit This issue triggers when a userspace program does an ioctl FBIOPUT_CON2FBMAP by passing console number and frame buffer number. Ideally this maps console

• CVE-2025-38617Aug 22, 2025
  affected < 3.0.101-108.192.1fixed 3.0.101-108.192.1

  In the Linux kernel, the following vulnerability has been resolved: net/packet: fix a race in packet_set_ring() and packet_notifier() When packet_set_ring() releases po->bind_lock, another thread can run packet_notifier() and process an NETDEV_UP event. This race and the fix a

• CVE-2025-38498MedJul 30, 2025
  affected < 3.0.101-108.192.1fixed 3.0.101-108.192.1

  In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on unmounted/not ours mounts Ensure that propagation settings can only be changed for mounts located in the caller's mount namespace. This change aligns permission checking w

• CVE-2025-38352KEVJul 22, 2025
  affected < 3.0.101-108.192.1fixed 3.0.101-108.192.1

  In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() If an exiting non-autoreaping task has already passed exit_notify() and calls handle_posix_cpu_timers() from IRQ, it can be

• CVE-2025-38200Jul 4, 2025
  affected < 3.0.101-108.189.1fixed 3.0.101-108.189.1

  In the Linux kernel, the following vulnerability has been resolved: i40e: fix MMIO write access to an invalid page in i40e_clear_hw When the device sends a specific input, an integer underflow can occur, leading to MMIO write access to an invalid page. Prevent the integer unde

• CVE-2025-38177Jul 4, 2025
  affected < 3.0.101-108.201.1fixed 3.0.101-108.201.1

  In the Linux kernel, the following vulnerability has been resolved: sch_hfsc: make hfsc_qlen_notify() idempotent hfsc_qlen_notify() is not idempotent either and not friendly to its callers, like fq_codel_dequeue(). Let's make it idempotent to ease qdisc_tree_reduce_backlog() ca

• CVE-2022-50211Jun 18, 2025
  affected < 3.0.101-108.189.1fixed 3.0.101-108.189.1

  In the Linux kernel, the following vulnerability has been resolved: md-raid10: fix KASAN warning There's a KASAN warning in raid10_remove_disk when running the lvm test lvconvert-raid-reshape.sh. We fix this warning by verifying that the value "number" is valid. BUG: KASAN: sl

• CVE-2022-50116Jun 18, 2025
  affected < 3.0.101-108.192.1fixed 3.0.101-108.192.1

  In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix deadlock and link starvation in outgoing data path The current implementation queues up new control and user packets as needed and processes this queue down to the ldisc in the same code path. T

• CVE-2025-38079HigJun 18, 2025
  affected < 3.0.101-108.189.1fixed 3.0.101-108.189.1

  In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - fix double free in hash_accept If accept(2) is called on socket type algif_hash with MSG_MORE flag set and crypto_ahash_import fails, sk2 is freed. However, it is also freed in af_alg_relea

• CVE-2023-53117May 2, 2025
  affected < 3.0.101-108.189.1fixed 3.0.101-108.189.1

  In the Linux kernel, the following vulnerability has been resolved: fs: prevent out-of-bounds array speculation when closing a file descriptor Google-Bug-Id: 114199369

• CVE-2025-21971Apr 1, 2025
  affected < 3.0.101-108.189.1fixed 3.0.101-108.189.1

  In the Linux kernel, the following vulnerability has been resolved: net_sched: Prevent creation of classes with TC_H_ROOT The function qdisc_tree_reduce_backlog() uses TC_H_ROOT as a termination condition when traversing up the qdisc tree to update parent backlog counters. Howe

• CVE-2022-49733Mar 2, 2025
  affected < 3.0.101-108.180.1fixed 3.0.101-108.180.1

  In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC There is a small race window at snd_pcm_oss_sync() that is called from OSS PCM SNDCTL_DSP_SYNC ioctl; namely the function calls snd_pcm_oss_make_ready() at first, the

• CVE-2025-21772HigFeb 27, 2025
  affected < 3.0.101-108.180.1fixed 3.0.101-108.180.1

  In the Linux kernel, the following vulnerability has been resolved: partitions: mac: fix handling of bogus partition table Fix several issues in partition probing: - The bailout for a bad partoffset must use put_dev_sector(), since the preceding read_part_sector() succeede

• CVE-2024-57996MedFeb 27, 2025
  affected < 3.0.101-108.180.1fixed 3.0.101-108.180.1

  In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: don't allow 1 packet limit The current implementation does not work correctly with a limit of 1. iproute2 actually checks for this and this patch adds the check in kernel as well. This fixe

• CVE-2025-21738Feb 27, 2025
  affected < 3.0.101-108.204.1fixed 3.0.101-108.204.1

  In the Linux kernel, the following vulnerability has been resolved: ata: libata-sff: Ensure that we cannot write outside the allocated buffer reveliofuzzing reported that a SCSI_IOCTL_SEND_COMMAND ioctl with out_len set to 0xd42, SCSI command set to ATA_16 PASS-THROUGH, ATA com

• CVE-2025-21718Feb 27, 2025
  affected < 3.0.101-108.180.1fixed 3.0.101-108.180.1

  In the Linux kernel, the following vulnerability has been resolved: net: rose: fix timer races against user threads Rose timers only acquire the socket spinlock, without checking if the socket is owned by one user thread. Add a check and rearm the timers if needed. BUG: KASAN

• CVE-2022-49545Feb 26, 2025
  affected < 3.0.101-108.180.1fixed 3.0.101-108.180.1

  In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Cancel pending work at closing a MIDI substream At closing a USB MIDI output substream, there might be still a pending work, which would eventually access the rawmidi runtime object that is bei

• CVE-2022-49291Feb 26, 2025
  affected < 3.0.101-108.180.1fixed 3.0.101-108.180.1

  In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix races among concurrent hw_params and hw_free calls Currently we have neither proper check nor protection against the concurrent calls of PCM hw_params and hw_free ioctls, which may result in a UA

• CVE-2022-49288Feb 26, 2025
  affected < 3.0.101-108.180.1fixed 3.0.101-108.180.1

  In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix races among concurrent prealloc proc writes We have no protection against concurrent PCM buffer preallocation changes via proc files, and it may potentially lead to UAF or some weird problem. Th