suse/kernel-livepatch-SLE15-SP2_Update_46&distro=SUSE Linux Enterprise Live Patching 15 SP2

Vulnerabilities (89)

• CVE-2023-52478Feb 29, 2024
  affected < 1-150200.5.3.2fixed 1-150200.5.3.2

  In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect hidpp_connect_event() has *four* time-of-check vs time-of-use (TOCTOU) races when it races with itself. hidpp_connect_event() primarily runs fro

• CVE-2023-52475Feb 29, 2024
  affected < 1-150200.5.3.2fixed 1-150200.5.3.2

  In the Linux kernel, the following vulnerability has been resolved: Input: powermate - fix use-after-free in powermate_config_complete syzbot has found a use-after-free bug [1] in the powermate driver. This happens when the device is disconnected, which leads to a memory free f

• CVE-2021-47013Feb 28, 2024
  affected < 1-150200.5.3.2fixed 1-150200.5.3.2

  In the Linux kernel, the following vulnerability has been resolved: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send In emac_mac_tx_buf_send, it calls emac_tx_fill_tpd(..,skb,..). If some error happens in emac_tx_fill_tpd(), the skb will be freed via dev_kfree_sk

• CVE-2021-47012Feb 28, 2024
  affected < 1-150200.5.3.2fixed 1-150200.5.3.2

  In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix a use after free in siw_alloc_mr Our code analyzer reported a UAF. In siw_alloc_mr(), it calls siw_mr_add_mem(mr,..). In the implementation of siw_mr_add_mem(), mem is assigned to mr->mem and the

• CVE-2021-47005Feb 28, 2024
  affected < 1-150200.5.3.2fixed 1-150200.5.3.2

  In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix NULL pointer dereference for ->get_features() get_features ops of pci_epc_ops may return NULL, causing NULL pointer dereference in pci_epf_test_alloc_space function. Let us add a check for pc

• CVE-2021-46989Feb 28, 2024
  affected < 1-150200.5.3.2fixed 1-150200.5.3.2

  In the Linux kernel, the following vulnerability has been resolved: hfsplus: prevent corruption in shrinking truncate I believe there are some issues introduced by commit 31651c607151 ("hfsplus: avoid deadlock on file truncation") HFS+ has extent records which always contains

• CVE-2020-36784Feb 28, 2024
  affected < 1-150200.5.3.2fixed 1-150200.5.3.2

  In the Linux kernel, the following vulnerability has been resolved: i2c: cadence: fix reference leak when pm_runtime_get_sync fails The PM reference count is not expected to be incremented on return in functions cdns_i2c_master_xfer and cdns_reg_slave. However, pm_runtime_get_

• CVE-2021-46974Feb 27, 2024
  affected < 1-150200.5.3.2fixed 1-150200.5.3.2

  In the Linux kernel, the following vulnerability has been resolved: bpf: Fix masking negation logic upon negative dst register The negation logic for the case where the off_reg is sitting in the dst register is not correct given then we cannot just invert the add to a sub or vi

• CVE-2021-46966Feb 27, 2024
  affected < 1-150200.5.3.2fixed 1-150200.5.3.2

  In the Linux kernel, the following vulnerability has been resolved: ACPI: custom_method: fix potential use-after-free issue In cm_write(), buf is always freed when reaching the end of the function. If the requested count is less than table.length, the allocated buffer will be

• CVE-2021-46964Feb 27, 2024
  affected < 1-150200.5.3.2fixed 1-150200.5.3.2

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Reserve extra IRQ vectors Commit a6dcfe08487e ("scsi: qla2xxx: Limit interrupt vectors to number of CPUs") lowers the number of allocated MSI-X vectors to the number of CPUs. That breaks vector

• CVE-2021-46955Feb 27, 2024
  affected < 4-150200.5.6.2fixed 4-150200.5.6.2

  In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB read while fragmenting IPv4 packets running openvswitch on kernels built with KASAN, it's possible to see the following splat while testing fragmentation of IPv4 packets: BUG: KASAN

• CVE-2021-46953Feb 27, 2024
  affected < 1-150200.5.3.2fixed 1-150200.5.3.2

  In the Linux kernel, the following vulnerability has been resolved: ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure When failing the driver probe because of invalid firmware properties, the GTDT driver unmaps the interrupt that it mapped earlier. However

• CVE-2020-36777Feb 27, 2024
  affected < 1-150200.5.3.2fixed 1-150200.5.3.2

  In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: Fix memory leak in dvb_media_device_free() dvb_media_device_free() is leaking memory. Free `dvbdev->adapter->conn` before setting it to NULL, as documented in include/media/media-device.h: "The m

• CVE-2021-46934Feb 27, 2024
  affected < 1-150200.5.3.2fixed 1-150200.5.3.2

  In the Linux kernel, the following vulnerability has been resolved: i2c: validate user data in compat ioctl Wrong user data may cause warning in i2c_transfer(), ex: zero msgs. Userspace should not be able to trigger warnings, so this patch adds validation checks for user data i

• CVE-2021-46932Feb 27, 2024
  affected < 1-150200.5.3.2fixed 1-150200.5.3.2

  In the Linux kernel, the following vulnerability has been resolved: Input: appletouch - initialize work before device registration Syzbot has reported warning in __flush_work(). This warning is caused by work->func == NULL, which means missing work initialization. This may hap

• CVE-2021-46929Feb 27, 2024
  affected < 1-150200.5.3.2fixed 1-150200.5.3.2

  In the Linux kernel, the following vulnerability has been resolved: sctp: use call_rcu to free endpoint This patch is to delay the endpoint free by calling call_rcu() to fix another use-after-free issue in sctp_sock_dump(): BUG: KASAN: use-after-free in __lock_acquire+0x36d9

• CVE-2021-46924Feb 27, 2024
  affected < 1-150200.5.3.2fixed 1-150200.5.3.2

  In the Linux kernel, the following vulnerability has been resolved: NFC: st21nfca: Fix memory leak in device probe and remove 'phy->pending_skb' is alloced when device probe, but forgot to free in the error handling path and remove path, this cause memory leak as follows: unre

• CVE-2021-46915Feb 27, 2024
  affected < 1-150200.5.3.2fixed 1-150200.5.3.2

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_limit: avoid possible divide error in nft_limit_init div_u64() divides u64 by u32. nft_limit_init() wants to divide u64 by u64, use the appropriate math function (div64_u64) divide error: 0000

• CVE-2021-46906Feb 26, 2024
  affected < 1-150200.5.3.2fixed 1-150200.5.3.2

  In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: fix info leak in hid_submit_ctrl In hid_submit_ctrl(), the way of calculating the report length doesn't take into account that report->size can be zero. When running the syzkaller reproducer, a rep

• CVE-2019-25162Feb 26, 2024
  affected < 1-150200.5.3.2fixed 1-150200.5.3.2

  In the Linux kernel, the following vulnerability has been resolved: i2c: Fix a potential use after free Free the adap structure only after we are done using it. This patch just moves the put_device() down a bit to avoid the use after free. [wsa: added comment to the code, adde