suse/kernel-livepatch-SLE15-SP3_Update_50&distro=SUSE Linux Enterprise Live Patching 15 SP3

Vulnerabilities (85)

• CVE-2024-49860Oct 21, 2024
  affected < 1-150300.7.3.1fixed 1-150300.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of _STR method Only buffer objects are valid return values of _STR. If something else is returned description_show() will access invalid memory.

• CVE-2024-47706MedOct 21, 2024
  affected < 1-150300.7.3.1fixed 1-150300.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix possible UAF for bfqq->bic with merge chain 1) initial state, three tasks: Process 1 Process 2 Process 3 (BIC1) (BIC2) (BIC3) | Λ | Λ | Λ | |

• CVE-2024-47684MedOct 21, 2024
  affected < 1-150300.7.3.1fixed 1-150300.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: tcp: check skb is non-NULL in tcp_rto_delta_us() We have some machines running stock Ubuntu 20.04.6 which is their 5.4.0-174-generic kernel that are running ceph and recently hit a null ptr dereference in tcp_r

• CVE-2024-47674Oct 15, 2024
  affected < 1-150300.7.3.1fixed 1-150300.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: mm: avoid leaving partial pfn mappings around in error case As Jann points out, PFN mappings are special, because unlike normal memory mappings, there is no lifetime information associated with the mapping - it

• CVE-2024-47668Oct 9, 2024
  affected < 1-150300.7.3.1fixed 1-150300.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() If we need to increase the tree depth, allocate a new node, and then race with another thread that increased the tree depth before us, we'll sti

• CVE-2024-46849HigSep 27, 2024
  affected < 1-150300.7.3.1fixed 1-150300.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: ASoC: meson: axg-card: fix 'use-after-free' Buffer 'card->dai_link' is reallocated in 'meson_card_reallocate_links()', so move 'pad' pointer initialization after this function when memory is already reallocated

• CVE-2024-46813HigSep 27, 2024
  affected < 1-150300.7.3.1fixed 1-150300.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check link_index before accessing dc->links[] [WHY & HOW] dc->links[] has max size of MAX_LINKS and NULL is return when trying to access with out-of-bound index. This fixes 3 OVERRUN and 1 RES

• CVE-2024-46818Sep 27, 2024
  affected < 1-150300.7.3.1fixed 1-150300.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check gpio_id before used as array index [WHY & HOW] GPIO_ID_UNKNOWN (-1) is not a valid value for array index and therefore should be checked in advance. This fixes 5 OVERRUN issues reported

• CVE-2024-46817Sep 27, 2024
  affected < 1-150300.7.3.1fixed 1-150300.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6 [Why] Coverity reports OVERRUN warning. Should abort amdgpu_dm initialize. [How] Return failure to amdgpu_dm_init.

• CVE-2024-46816Sep 27, 2024
  affected < 1-150300.7.3.1fixed 1-150300.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links [Why] Coverity report OVERRUN warning. There are only max_links elements within dc->links. link count could up to AMDGPU_DM_MAX_D

• CVE-2024-46814Sep 27, 2024
  affected < 1-150300.7.3.1fixed 1-150300.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check msg_id before processing transcation [WHY & HOW] HDCP_MESSAGE_ID_INVALID (-1) is not a valid msg_id nor is it a valid array index, and it needs checking before used. This fixes 4 OVERRUN

• CVE-2024-45016MedSep 11, 2024
  affected < 1-150300.7.3.1fixed 1-150300.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: netem: fix return value if duplicate enqueue fails There is a bug in netem_enqueue() introduced by commit 5845f706388a ("net: netem: fix skb length BUG_ON in __skb_to_sgvec") that can lead to a use-after-free.

• CVE-2024-45026Sep 11, 2024
  affected < 1-150300.7.3.1fixed 1-150300.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix error recovery leading to data corruption on ESE devices Extent Space Efficient (ESE) or thin provisioned volumes need to be formatted on demand during usual IO processing. The dasd_ese_needs_fo

• CVE-2024-44947Sep 2, 2024
  affected < 1-150300.7.3.1fixed 1-150300.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: fuse: Initialize beyond-EOF page contents before setting uptodate fuse_notify_store(), unlike fuse_do_readpage(), does not enable page zeroing (because it can be used to change partial page contents). So fuse_

• CVE-2024-42145Jul 30, 2024
  affected < 1-150300.7.3.1fixed 1-150300.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: IB/core: Implement a limit on UMAD receive List The existing behavior of ib_umad, which maintains received MAD packets in an unbounded list, poses a risk of uncontrolled growth. As user-space applications extra

• CVE-2021-47589Jun 19, 2024
  affected < 1-150300.7.3.1fixed 1-150300.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: igbvf: fix double free in `igbvf_probe` In `igbvf_probe`, if register_netdev() fails, the program will go to label err_hw_init, and then to label err_ioremap. In free_netdev() which is just below label err_iore

• CVE-2023-52881May 29, 2024
  affected < 1-150300.7.3.1fixed 1-150300.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: tcp: do not accept ACK of bytes we never sent This patch is based on a detailed report and ideas from Yepeng Pan and Christian Rossow. ACK seq validation is currently following RFC 5961 5.2 guidelines: The

• CVE-2021-47416May 21, 2024
  affected < 1-150300.7.3.1fixed 1-150300.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: phy: mdio: fix memory leak Syzbot reported memory leak in MDIO bus interface, the problem was in wrong state logic. MDIOBUS_ALLOCATED indicates 2 states: 1. Bus is only allocated 2. Bus allocated and __mdiob

• CVE-2024-27043May 1, 2024
  affected < 1-150300.7.3.1fixed 1-150300.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: media: edia: dvbdev: fix a use-after-free In dvb_register_device, *pdvbdev is set equal to dvbdev, which is freed in several error-handling paths. However, *pdvbdev is not set to NULL after dvbdev's deallocatio

• CVE-2022-48664Apr 28, 2024
  affected < 1-150300.7.3.1fixed 1-150300.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: btrfs: fix hang during unmount when stopping a space reclaim worker Often when running generic/562 from fstests we can hang during unmount, resulting in a trace like this: Sep 07 11:52:00 debian9 unknown: ru