suse/kernel-livepatch-SLE15-SP3_Update_43&distro=SUSE Linux Enterprise Live Patching 15 SP3

Vulnerabilities (192)

• CVE-2021-47015Feb 28, 2024
  affected < 1-150300.7.3.5fixed 1-150300.7.3.5

  In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix RX consumer index logic in the error path. In bnxt_rx_pkt(), the RX buffers are expected to complete in order. If the RX consumer index indicates an out of order buffer completion, it means we are

• CVE-2021-47014Feb 28, 2024
  affected < 1-150300.7.3.5fixed 1-150300.7.3.5

  In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix wild memory access when clearing fragments while testing re-assembly/re-fragmentation using act_ct, it's possible to observe a crash like the following one: KASAN: maybe wild-memory-acc

• CVE-2021-47013Feb 28, 2024
  affected < 1-150300.7.3.5fixed 1-150300.7.3.5

  In the Linux kernel, the following vulnerability has been resolved: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send In emac_mac_tx_buf_send, it calls emac_tx_fill_tpd(..,skb,..). If some error happens in emac_tx_fill_tpd(), the skb will be freed via dev_kfree_sk

• CVE-2021-47009Feb 28, 2024
  affected < 1-150300.7.3.5fixed 1-150300.7.3.5

  In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix memory leak on object td Two error return paths are neglecting to free allocated object td, causing a memory leak. Fix this by returning via the error return path that securely kfree's td. F

• CVE-2021-47006Feb 28, 2024
  affected < 1-150300.7.3.5fixed 1-150300.7.3.5

  In the Linux kernel, the following vulnerability has been resolved: ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook The commit 1879445dfa7b ("perf/core: Set event's default ::overflow_handler()") set a default event->overflow_handler in perf_

• CVE-2021-47003Feb 28, 2024
  affected < 1-150300.7.3.5fixed 1-150300.7.3.5

  In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix potential null dereference on pointer status There are calls to idxd_cmd_exec that pass a null status pointer however a recent commit has added an assignment to *status that can end up with

• CVE-2021-47001Feb 28, 2024
  affected < 1-150300.7.3.5fixed 1-150300.7.3.5

  In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix cwnd update ordering After a reconnect, the reply handler is opening the cwnd (and thus enabling more RPC Calls to be sent) /before/ rpcrdma_post_recvs() can post enough Receive WRs to receive the

• CVE-2021-47000Feb 28, 2024
  affected < 1-150300.7.3.5fixed 1-150300.7.3.5

  In the Linux kernel, the following vulnerability has been resolved: ceph: fix inode leak on getattr error in __fh_to_dentry

• CVE-2021-46998Feb 28, 2024
  affected < 1-150300.7.3.5fixed 1-150300.7.3.5

  In the Linux kernel, the following vulnerability has been resolved: ethernet:enic: Fix a use after free bug in enic_hard_start_xmit In enic_hard_start_xmit, it calls enic_queue_wq_skb(). Inside enic_queue_wq_skb, if some error happens, the skb will be freed by dev_kfree_skb(skb

• CVE-2021-46992Feb 28, 2024
  affected < 1-150300.7.3.5fixed 1-150300.7.3.5

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: avoid overflows in nft_hash_buckets() Number of buckets being stored in 32bit variables, we have to ensure that no overflows occur in nft_hash_buckets() syzbot injected a size == 0x4000000

• CVE-2021-46991Feb 28, 2024
  affected < 1-150300.7.3.5fixed 1-150300.7.3.5

  In the Linux kernel, the following vulnerability has been resolved: i40e: Fix use-after-free in i40e_client_subtask() Currently the call to i40e_client_del_instance frees the object pf->cinst, however pf->cinst->lan_info is being accessed after the free. Fix this by adding the

• CVE-2021-46990Feb 28, 2024
  affected < 1-150300.7.3.5fixed 1-150300.7.3.5

  In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: Fix crashes when toggling entry flush barrier The entry flush mitigation can be enabled/disabled at runtime via a debugfs file (entry_flush), which causes the kernel to patch itself to enable/disab

• CVE-2021-46988Feb 28, 2024
  affected < 1-150300.7.3.5fixed 1-150300.7.3.5

  In the Linux kernel, the following vulnerability has been resolved: userfaultfd: release page in error path to avoid BUG_ON Consider the following sequence of events: 1. Userspace issues a UFFD ioctl, which ends up calling into shmem_mfill_atomic_pte(). We successfully acco

• CVE-2021-46984Feb 28, 2024
  affected < 1-150300.7.3.5fixed 1-150300.7.3.5

  In the Linux kernel, the following vulnerability has been resolved: kyber: fix out of bounds access when preempted __blk_mq_sched_bio_merge() gets the ctx and hctx for the current CPU and passes the hctx to ->bio_merge(). kyber_bio_merge() then gets the ctx for the current CPU

• CVE-2021-46983Feb 28, 2024
  affected < 1-150300.7.3.5fixed 1-150300.7.3.5

  In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: Fix NULL deref when SEND is completed with error When running some traffic and taking down the link on peer, a retry counter exceeded error is received. This leads to nvmet_rdma_error_comp which tri

• CVE-2021-46981Feb 28, 2024
  affected < 1-150300.7.3.5fixed 1-150300.7.3.5

  In the Linux kernel, the following vulnerability has been resolved: nbd: Fix NULL pointer in flush_workqueue Open /dev/nbdX first, the config_refs will be 1 and the pointers in nbd_device are still null. Disconnect /dev/nbdX, then reference a null recv_workq. The protection by

• CVE-2021-46980Feb 28, 2024
  affected < 1-150300.7.3.5fixed 1-150300.7.3.5

  In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4 commit 4dbc6a4ef06d ("usb: typec: ucsi: save power data objects in PD mode") introduced retrieval of the PDOs when connected to a PD-capable s

• CVE-2021-46976Feb 28, 2024
  affected < 1-150300.7.3.5fixed 1-150300.7.3.5

  In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix crash in auto_retire The retire logic uses the 2 lower bits of the pointer to the retire function to store flags. However, the auto_retire function is not guaranteed to be aligned to a multiple of

• CVE-2020-36783Feb 28, 2024
  affected < 1-150300.7.3.5fixed 1-150300.7.3.5

  In the Linux kernel, the following vulnerability has been resolved: i2c: img-scb: fix reference leak when pm_runtime_get_sync fails The PM reference count is not expected to be incremented on return in functions img_i2c_xfer and img_i2c_init. However, pm_runtime_get_sync will

• CVE-2020-36782Feb 28, 2024
  affected < 1-150300.7.3.5fixed 1-150300.7.3.5

  In the Linux kernel, the following vulnerability has been resolved: i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails The PM reference count is not expected to be incremented on return in lpi2c_imx_master_enable. However, pm_runtime_get_sync will increment the