suse/kernel-docs&distro=SUSE Linux Enterprise Server 15 SP4-LTSS

Vulnerabilities (2,830)

• CVE-2021-46933Feb 27, 2024
  affected < 5.14.21-150400.24.116.1fixed 5.14.21-150400.24.116.1

  In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. ffs_data_clear is indirectly called from both ffs_fs_kill_sb and ffs_ep0_release, so it ends up being called twice when userland closes ep0 and then unmou

• CVE-2021-46932Feb 27, 2024
  affected < 5.14.21-150400.24.111.2fixed 5.14.21-150400.24.111.2

  In the Linux kernel, the following vulnerability has been resolved: Input: appletouch - initialize work before device registration Syzbot has reported warning in __flush_work(). This warning is caused by work->func == NULL, which means missing work initialization. This may hap

• CVE-2021-46931Feb 27, 2024
  affected < 5.14.21-150400.24.116.1fixed 5.14.21-150400.24.116.1

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Wrap the tx reporter dump callback to extract the sq Function mlx5e_tx_reporter_dump_sq() casts its void * argument to struct mlx5e_txqsq *, but in TX-timeout-recovery flow the argument is actually o

• CVE-2021-46930Feb 27, 2024
  affected < 5.14.21-150400.24.116.1fixed 5.14.21-150400.24.116.1

  In the Linux kernel, the following vulnerability has been resolved: usb: mtu3: fix list_head check warning This is caused by uninitialization of list_head. BUG: KASAN: use-after-free in __list_del_entry_valid+0x34/0xe4 Call trace: dump_backtrace+0x0/0x298 show_stack+0x24/0x34

• CVE-2021-46929Feb 27, 2024
  affected < 5.14.21-150400.24.116.1fixed 5.14.21-150400.24.116.1

  In the Linux kernel, the following vulnerability has been resolved: sctp: use call_rcu to free endpoint This patch is to delay the endpoint free by calling call_rcu() to fix another use-after-free issue in sctp_sock_dump(): BUG: KASAN: use-after-free in __lock_acquire+0x36d9

• CVE-2021-46927Feb 27, 2024
  affected < 5.14.21-150400.24.116.1fixed 5.14.21-150400.24.116.1

  In the Linux kernel, the following vulnerability has been resolved: nitro_enclaves: Use get_user_pages_unlocked() call to handle mmap assert After commit 5b78ed24e8ec ("mm/pagemap: add mmap_assert_locked() annotations to find_vma*()"), the call to get_user_pages() will trigger

• CVE-2021-46926Feb 27, 2024
  affected < 5.14.21-150400.24.116.1fixed 5.14.21-150400.24.116.1

  In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: intel-sdw-acpi: harden detection of controller The existing code currently sets a pointer to an ACPI handle before checking that it's actually a SoundWire controller. This can lead to issues where th

• CVE-2021-46925Feb 27, 2024
  affected < 5.14.21-150400.24.116.1fixed 5.14.21-150400.24.116.1

  In the Linux kernel, the following vulnerability has been resolved: net/smc: fix kernel panic caused by race of smc_sock A crash occurs when smc_cdc_tx_handler() tries to access smc_sock but smc_release() has already freed it. [ 4570.695099] BUG: unable to handle page fault fo

• CVE-2021-46924Feb 27, 2024
  affected < 5.14.21-150400.24.111.2fixed 5.14.21-150400.24.111.2

  In the Linux kernel, the following vulnerability has been resolved: NFC: st21nfca: Fix memory leak in device probe and remove 'phy->pending_skb' is alloced when device probe, but forgot to free in the error handling path and remove path, this cause memory leak as follows: unre

• CVE-2021-46923Feb 27, 2024
  affected < 5.14.21-150400.24.111.2fixed 5.14.21-150400.24.111.2

  In the Linux kernel, the following vulnerability has been resolved: fs/mount_setattr: always cleanup mount_kattr Make sure that finish_mount_kattr() is called after mount_kattr was succesfully built in both the success and failure case to prevent leaking any references we took

• CVE-2023-52474Feb 26, 2024
  affected < 5.14.21-150400.24.116.1fixed 5.14.21-150400.24.116.1

  In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests hfi1 user SDMA request processing has two bugs that can cause data corruption for user SDMA requests that have multiple payload iovecs whe

• CVE-2019-25162Feb 26, 2024
  affected < 5.14.21-150400.24.111.2fixed 5.14.21-150400.24.111.2

  In the Linux kernel, the following vulnerability has been resolved: i2c: Fix a potential use after free Free the adap structure only after we are done using it. This patch just moves the put_device() down a bit to avoid the use after free. [wsa: added comment to the code, adde

• CVE-2022-48626Feb 25, 2024
  affected < 5.14.21-150400.24.116.1fixed 5.14.21-150400.24.116.1

  In the Linux kernel, the following vulnerability has been resolved: moxart: fix potential use-after-free on remove path It was reported that the mmc host structure could be accessed after it was freed in moxart_remove(), so fix this by saving the base register of the device and

• CVE-2023-52470Feb 25, 2024
  affected < 5.14.21-150400.24.116.1fixed 5.14.21-150400.24.116.1

  In the Linux kernel, the following vulnerability has been resolved: drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() check the alloc_workqueue return value in radeon_crtc_init() to avoid null-ptr-deref.

• CVE-2023-52469Feb 25, 2024
  affected < 5.14.21-150400.24.116.1fixed 5.14.21-150400.24.116.1

  In the Linux kernel, the following vulnerability has been resolved: drivers/amd/pm: fix a use-after-free in kv_parse_power_table When ps allocated by kzalloc equals to NULL, kv_parse_power_table frees adev->pm.dpm.ps that allocated before. However, after the control flow goes t

• CVE-2023-52467Feb 25, 2024
  affected < 5.14.21-150400.24.111.2fixed 5.14.21-150400.24.111.2

  In the Linux kernel, the following vulnerability has been resolved: mfd: syscon: Fix null pointer dereference in of_syscon_register() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.

• CVE-2024-26603Feb 24, 2024
  affected < 5.14.21-150400.24.111.2fixed 5.14.21-150400.24.111.2

  In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Stop relying on userspace for info to fault in xsave buffer Before this change, the expected size of the user space buffer was taken from fx_sw->xstate_size. fx_sw->xstate_size can be changed from user

• CVE-2024-26602Feb 24, 2024
  affected < 5.14.21-150400.24.111.2fixed 5.14.21-150400.24.111.2

  In the Linux kernel, the following vulnerability has been resolved: sched/membarrier: reduce the ability to hammer on sys_membarrier On some systems, sys_membarrier can be very expensive, causing overall slowdowns for everything. So put a lock on the path in order to serialize

• CVE-2024-26601Feb 24, 2024
  affected < 5.14.21-150400.24.119.1fixed 5.14.21-150400.24.119.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: regenerate buddy after block freeing failed if under fc replay This mostly reverts commit 6bd97bf273bd ("ext4: remove redundant mb_regenerate_buddy()") and reintroduces mb_regenerate_buddy(). Based on cod

• CVE-2024-26600Feb 24, 2024
  affected < 5.14.21-150400.24.116.1fixed 5.14.21-150400.24.116.1

  In the Linux kernel, the following vulnerability has been resolved: phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP If the external phy working together with phy-omap-usb2 does not implement send_srp(), we may still attempt to call it. This can happen on an idle Et