suse/kernel-livepatch-SLE15-SP2_Update_49&distro=SUSE Linux Enterprise Live Patching 15 SP2

Vulnerabilities (140)

• CVE-2021-47496May 22, 2024
  affected < 1-150200.5.3.1fixed 1-150200.5.3.1

  In the Linux kernel, the following vulnerability has been resolved: net/tls: Fix flipped sign in tls_err_abort() calls sk->sk_err appears to expect a positive value, a convention that ktls doesn't always follow and that leads to memory corruption in other code. For instance,

• CVE-2021-47495May 22, 2024
  affected < 1-150200.5.3.1fixed 1-150200.5.3.1

  In the Linux kernel, the following vulnerability has been resolved: usbnet: sanity check for maxpacket maxpacket of 0 makes no sense and oopses as we need to divide by it. Give up. V2: fixed typo in log and stylistic issues

• CVE-2021-47485May 22, 2024
  affected < 1-150200.5.3.1fixed 1-150200.5.3.1

  In the Linux kernel, the following vulnerability has been resolved: IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields Overflowing either addrlimit or bytes_togo can allow userspace to trigger a buffer overflow of kernel memory. Check for overflows in all t

• CVE-2021-47483May 22, 2024
  affected < 1-150200.5.3.1fixed 1-150200.5.3.1

  In the Linux kernel, the following vulnerability has been resolved: regmap: Fix possible double-free in regcache_rbtree_exit() In regcache_rbtree_insert_to_block(), when 'present' realloc failed, the 'blk' which is supposed to assign to 'rbnode->block' will be freed, so 'rbnode

• CVE-2021-47482May 22, 2024
  affected < 1-150200.5.3.1fixed 1-150200.5.3.1

  In the Linux kernel, the following vulnerability has been resolved: net: batman-adv: fix error handling Syzbot reported ODEBUG warning in batadv_nc_mesh_free(). The problem was in wrong error handling in batadv_mesh_init(). Before this patch batadv_mesh_init() was calling bata

• CVE-2021-47473May 22, 2024
  affected < 1-150200.5.3.1fixed 1-150200.5.3.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els() Commit 8c0eb596baa5 ("[SCSI] qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()"), intended to change: bsg_j

• CVE-2021-47468May 22, 2024
  affected < 1-150200.5.3.1fixed 1-150200.5.3.1

  In the Linux kernel, the following vulnerability has been resolved: isdn: mISDN: Fix sleeping function called from invalid context The driver can call card->isac.release() function from an atomic context. Fix this by calling this function after releasing the lock. The followi

• CVE-2021-47465May 22, 2024
  affected < 1-150200.5.3.1fixed 1-150200.5.3.1

  In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest() In commit 10d91611f426 ("powerpc/64s: Reimplement book3s idle code in C") kvm_start_guest() became idle_kvm_start_guest(). The old code allocate

• CVE-2021-47464May 22, 2024
  affected < 1-150200.5.3.1fixed 1-150200.5.3.1

  In the Linux kernel, the following vulnerability has been resolved: audit: fix possible null-pointer dereference in audit_filter_rules Fix possible null-pointer dereference in audit_filter_rules. audit_filter_rules() error: we previously assumed 'ctx' could be null

• CVE-2021-47460May 22, 2024
  affected < 1-150200.5.3.1fixed 1-150200.5.3.1

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix data corruption after conversion from inline format Commit 6dbf7bb55598 ("fs: Don't invalidate page buffers in block_write_full_page()") uncovered a latent bug in ocfs2 conversion from inline inode f

• CVE-2021-47456May 22, 2024
  affected < 1-150200.5.3.1fixed 1-150200.5.3.1

  In the Linux kernel, the following vulnerability has been resolved: can: peak_pci: peak_pci_remove(): fix UAF When remove the module peek_pci, referencing 'chan' again after releasing 'dev' will cause UAF. Fix this by releasing 'dev' later. The following log reveals it: [

• CVE-2021-47445May 22, 2024
  affected < 1-150200.5.3.1fixed 1-150200.5.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix null pointer dereference on pointer edp The initialization of pointer dev dereferences pointer edp before edp is null checked, so there is a potential null pointer deference issue. Fix this by only

• CVE-2021-47443May 22, 2024
  affected < 1-150200.5.3.1fixed 1-150200.5.3.1

  In the Linux kernel, the following vulnerability has been resolved: NFC: digital: fix possible memory leak in digital_tg_listen_mdaa() 'params' is allocated in digital_tg_listen_mdaa(), but not free when digital_send_cmd() failed, which will cause memory leak. Fix it by freeing

• CVE-2021-47442May 22, 2024
  affected < 1-150200.5.3.1fixed 1-150200.5.3.1

  In the Linux kernel, the following vulnerability has been resolved: NFC: digital: fix possible memory leak in digital_in_send_sdd_req() 'skb' is allocated in digital_in_send_sdd_req(), but not free when digital_in_send_cmd() failed, which will cause memory leak. Fix it by freei

• CVE-2021-47441May 22, 2024
  affected < 1-150200.5.3.1fixed 1-150200.5.3.1

  In the Linux kernel, the following vulnerability has been resolved: mlxsw: thermal: Fix out-of-bounds memory accesses Currently, mlxsw allows cooling states to be set above the maximum cooling state supported by the driver: # cat /sys/class/thermal/thermal_zone2/cdev0/type m

• CVE-2021-47436May 22, 2024
  affected < 1-150200.5.3.1fixed 1-150200.5.3.1

  In the Linux kernel, the following vulnerability has been resolved: usb: musb: dsps: Fix the probe error path Commit 7c75bde329d7 ("usb: musb: musb_dsps: request_irq() after initializing musb") has inverted the calls to dsps_setup_optional_vbus_irq() and dsps_create_musb_pdev()

• CVE-2021-47434May 22, 2024
  affected < 1-150200.5.3.1fixed 1-150200.5.3.1

  In the Linux kernel, the following vulnerability has been resolved: xhci: Fix command ring pointer corruption while aborting a command The command ring pointer is located at [6:63] bits of the command ring control register (CRCR). All the control bits like command stop, abort a

• CVE-2023-52871May 21, 2024
  affected < 1-150200.5.3.1fixed 1-150200.5.3.1

  In the Linux kernel, the following vulnerability has been resolved: soc: qcom: llcc: Handle a second device without data corruption Usually there is only one llcc device. But if there were a second, even a failed probe call would modify the global drv_data pointer. So check if

• CVE-2023-52840May 21, 2024
  affected < 1-150200.5.3.1fixed 1-150200.5.3.1

  In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() The put_device() calls rmi_release_function() which frees "fn" so the dereference on the next line "fn->num_of_irqs" is a use after free.

• CVE-2023-52752May 21, 2024
  affected < 4-150200.5.6.1fixed 4-150200.5.6.1

  In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() Skip SMB sessions that are being teared down (e.g. @ses->ses_status == SES_EXITING) in cifs_debug_data_proc_show() to avoid use-after-free in @