suse/kernel-livepatch-SLE15-SP2_Update_47&distro=SUSE Linux Enterprise Live Patching 15 SP2

Vulnerabilities (135)

• CVE-2021-47049Feb 28, 2024
  affected < 1-150200.5.3.3fixed 1-150200.5.3.3

  In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Use after free in __vmbus_open() The "open_info" variable is added to the &vmbus_connection.chn_msg_list, but the error handling frees "open_info" without removing it from the list. This wi

• CVE-2021-47045Feb 28, 2024
  affected < 1-150200.5.3.3fixed 1-150200.5.3.3

  In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix null pointer dereference in lpfc_prep_els_iocb() It is possible to call lpfc_issue_els_plogi() passing a did for which no matching ndlp is found. A call is then made to lpfc_prep_els_iocb() with

• CVE-2021-47034Feb 28, 2024
  affected < 1-150200.5.3.3fixed 1-150200.5.3.3

  In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: Fix pte update for kernel memory on radix When adding a PTE a ptesync is needed to order the update of the PTE with subsequent accesses otherwise a spurious fault may be raised. radix__set_pte_at(

• CVE-2021-47015Feb 28, 2024
  affected < 1-150200.5.3.3fixed 1-150200.5.3.3

  In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix RX consumer index logic in the error path. In bnxt_rx_pkt(), the RX buffers are expected to complete in order. If the RX consumer index indicates an out of order buffer completion, it means we are

• CVE-2021-47013Feb 28, 2024
  affected < 1-150200.5.3.3fixed 1-150200.5.3.3

  In the Linux kernel, the following vulnerability has been resolved: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send In emac_mac_tx_buf_send, it calls emac_tx_fill_tpd(..,skb,..). If some error happens in emac_tx_fill_tpd(), the skb will be freed via dev_kfree_sk

• CVE-2021-47006Feb 28, 2024
  affected < 1-150200.5.3.3fixed 1-150200.5.3.3

  In the Linux kernel, the following vulnerability has been resolved: ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook The commit 1879445dfa7b ("perf/core: Set event's default ::overflow_handler()") set a default event->overflow_handler in perf_

• CVE-2021-47000Feb 28, 2024
  affected < 1-150200.5.3.3fixed 1-150200.5.3.3

  In the Linux kernel, the following vulnerability has been resolved: ceph: fix inode leak on getattr error in __fh_to_dentry

• CVE-2021-46998Feb 28, 2024
  affected < 1-150200.5.3.3fixed 1-150200.5.3.3

  In the Linux kernel, the following vulnerability has been resolved: ethernet:enic: Fix a use after free bug in enic_hard_start_xmit In enic_hard_start_xmit, it calls enic_queue_wq_skb(). Inside enic_queue_wq_skb, if some error happens, the skb will be freed by dev_kfree_skb(skb

• CVE-2021-46992Feb 28, 2024
  affected < 1-150200.5.3.3fixed 1-150200.5.3.3

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: avoid overflows in nft_hash_buckets() Number of buckets being stored in 32bit variables, we have to ensure that no overflows occur in nft_hash_buckets() syzbot injected a size == 0x4000000

• CVE-2021-46991Feb 28, 2024
  affected < 1-150200.5.3.3fixed 1-150200.5.3.3

  In the Linux kernel, the following vulnerability has been resolved: i40e: Fix use-after-free in i40e_client_subtask() Currently the call to i40e_client_del_instance frees the object pf->cinst, however pf->cinst->lan_info is being accessed after the free. Fix this by adding the

• CVE-2021-46990Feb 28, 2024
  affected < 1-150200.5.3.3fixed 1-150200.5.3.3

  In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: Fix crashes when toggling entry flush barrier The entry flush mitigation can be enabled/disabled at runtime via a debugfs file (entry_flush), which causes the kernel to patch itself to enable/disab

• CVE-2021-46988Feb 28, 2024
  affected < 1-150200.5.3.3fixed 1-150200.5.3.3

  In the Linux kernel, the following vulnerability has been resolved: userfaultfd: release page in error path to avoid BUG_ON Consider the following sequence of events: 1. Userspace issues a UFFD ioctl, which ends up calling into shmem_mfill_atomic_pte(). We successfully acco

• CVE-2021-46984Feb 28, 2024
  affected < 1-150200.5.3.3fixed 1-150200.5.3.3

  In the Linux kernel, the following vulnerability has been resolved: kyber: fix out of bounds access when preempted __blk_mq_sched_bio_merge() gets the ctx and hctx for the current CPU and passes the hctx to ->bio_merge(). kyber_bio_merge() then gets the ctx for the current CPU

• CVE-2021-46981Feb 28, 2024
  affected < 1-150200.5.3.3fixed 1-150200.5.3.3

  In the Linux kernel, the following vulnerability has been resolved: nbd: Fix NULL pointer in flush_workqueue Open /dev/nbdX first, the config_refs will be 1 and the pointers in nbd_device are still null. Disconnect /dev/nbdX, then reference a null recv_workq. The protection by

• CVE-2020-36783Feb 28, 2024
  affected < 1-150200.5.3.3fixed 1-150200.5.3.3

  In the Linux kernel, the following vulnerability has been resolved: i2c: img-scb: fix reference leak when pm_runtime_get_sync fails The PM reference count is not expected to be incremented on return in functions img_i2c_xfer and img_i2c_init. However, pm_runtime_get_sync will

• CVE-2020-36782Feb 28, 2024
  affected < 1-150200.5.3.3fixed 1-150200.5.3.3

  In the Linux kernel, the following vulnerability has been resolved: i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails The PM reference count is not expected to be incremented on return in lpi2c_imx_master_enable. However, pm_runtime_get_sync will increment the

• CVE-2020-36780Feb 28, 2024
  affected < 1-150200.5.3.3fixed 1-150200.5.3.3

  In the Linux kernel, the following vulnerability has been resolved: i2c: sprd: fix reference leak when pm_runtime_get_sync fails The PM reference count is not expected to be incremented on return in sprd_i2c_master_xfer() and sprd_i2c_remove(). However, pm_runtime_get_sync wil

• CVE-2021-46971Feb 27, 2024
  affected < 1-150200.5.3.3fixed 1-150200.5.3.3

  In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix unconditional security_locked_down() call Currently, the lockdown state is queried unconditionally, even though its result is used only if the PERF_SAMPLE_REGS_INTR bit is set in attr.sample_type

• CVE-2021-46963Feb 27, 2024
  affected < 1-150200.5.3.3fixed 1-150200.5.3.3

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand() RIP: 0010:kmem_cache_free+0xfa/0x1b0 Call Trace: qla2xxx_mqueuecommand+0x2b5/0x2c0 [qla2xxx] scsi_queue_rq+0x5e2/0xa40 __blk_mq_t

• CVE-2021-46962Feb 27, 2024
  affected < 1-150200.5.3.3fixed 1-150200.5.3.3

  In the Linux kernel, the following vulnerability has been resolved: mmc: uniphier-sd: Fix a resource leak in the remove function A 'tmio_mmc_host_free()' call is missing in the remove function, in order to balance a 'tmio_mmc_host_alloc()' call in the probe. This is done in the