suse/kernel-livepatch-SLE15-SP4_Update_27&distro=SUSE Linux Enterprise Live Patching 15 SP4

Vulnerabilities (362)

• CVE-2022-48632Apr 28, 2024
  affected < 1-150400.9.3.2fixed 1-150400.9.3.2

  In the Linux kernel, the following vulnerability has been resolved: i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() memcpy() is called in a loop while 'operation->length' upper bound is not checked and 'data_idx' also increments.

• CVE-2024-26928Apr 28, 2024
  affected < 1-150400.9.3.2fixed 1-150400.9.3.2

  In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_debug_files_proc_show() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.

• CVE-2024-26925MedApr 25, 2024
  affected < 1-150400.9.3.2fixed 1-150400.9.3.2

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path The commit mutex should not be released during the critical section between nft_gc_seq_begin() and nft_gc_seq_end(), otherwise, async GC

• CVE-2024-26923MedApr 25, 2024
  affected < 2-150400.9.6.1fixed 2-150400.9.6.1

  In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix garbage collector racing against connect() Garbage collector does not take into account the risk of embryo getting enqueued during the garbage collection. If such embryo has a peer that carries SCM

• CVE-2024-26921Apr 18, 2024
  affected < 1-150400.9.3.2fixed 1-150400.9.3.2

  In the Linux kernel, the following vulnerability has been resolved: inet: inet_defrag: prevent sk release while still in use ip_local_out() and other functions can pass skb->sk as function argument. If the skb is a fragment and reassembly happens before such function call retu

• CVE-2024-26852HigApr 17, 2024
  affected < 1-150400.9.3.2fixed 1-150400.9.3.2

  In the Linux kernel, the following vulnerability has been resolved: net/ipv6: avoid possible UAF in ip6_route_mpath_notify() syzbot found another use-after-free in ip6_route_mpath_notify() [1] Commit f7225172f25a ("net/ipv6: prevent use after free in ip6_route_mpath_notify") w

• CVE-2024-26862Apr 17, 2024
  affected < 1-150400.9.3.2fixed 1-150400.9.3.2

  In the Linux kernel, the following vulnerability has been resolved: packet: annotate data-races around ignore_outgoing ignore_outgoing is read locklessly from dev_queue_xmit_nit() and packet_getsockopt() Add appropriate READ_ONCE()/WRITE_ONCE() annotations. syzbot reported:

• CVE-2024-26840Apr 17, 2024
  affected < 1-150400.9.3.2fixed 1-150400.9.3.2

  In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix memory leak in cachefiles_add_cache() The following memory leak was reported after unbinding /dev/cachefiles: ================================================================== unreferenced obj

• CVE-2024-26828Apr 17, 2024
  affected < 1-150400.9.3.2fixed 1-150400.9.3.2

  In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parse_server_interfaces() In this loop, we step through the buffer and after each item we check if the size_left is greater than the minimum size we need. However, the problem is that "b

• CVE-2024-26764Apr 3, 2024
  affected < 1-150400.9.3.2fixed 1-150400.9.3.2

  In the Linux kernel, the following vulnerability has been resolved: fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio If kiocb_set_cancel_fn() is called for I/O submitted via io_uring, the following kernel warning appears: WARNING: CPU: 3 PID: 368 at fs/aio.c:

• CVE-2024-26739Apr 3, 2024
  affected < 1-150400.9.3.2fixed 1-150400.9.3.2

  In the Linux kernel, the following vulnerability has been resolved: net/sched: act_mirred: don't override retval if we already lost the skb If we're redirecting the skb, and haven't called tcf_mirred_forward(), yet, we need to tell the core to drop the skb by setting the retcod

• CVE-2023-52591Mar 6, 2024
  affected < 1-150400.9.3.2fixed 1-150400.9.3.2

  In the Linux kernel, the following vulnerability has been resolved: reiserfs: Avoid touching renamed directory if parent does not change The VFS will not be locking moved directory if its parent does not change. Change reiserfs rename code to avoid touching renamed directory if

• CVE-2023-6531Jan 21, 2024
  affected < 1-150400.9.3.2fixed 1-150400.9.3.2

  A use-after-free flaw was found in the Linux Kernel due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic() on the socket that the SKB is queued on.

• CVE-2024-0639Jan 17, 2024
  affected < 1-150400.9.3.2fixed 1-150400.9.3.2

  A denial of service vulnerability due to a deadlock was found in sctp_auto_asconf_init in net/sctp/socket.c in the Linux kernel’s SCTP subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially crash the system.

• CVE-2023-47233MedNov 3, 2023
  affected < 1-150400.9.3.2fixed 1-150400.9.3.2

  The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the USB by hotplug) code. For physically proximate attackers with local access, this "could be exploited in a real world scenario." This is r

• CVE-2023-2860Jul 24, 2023
  affected < 1-150400.9.3.2fixed 1-150400.9.3.2

  An out-of-bounds read vulnerability was found in the SR-IPv6 implementation in the Linux kernel. The flaw exists within the processing of seg6 attributes. The issue results from the improper validation of user-supplied data, which can result in a read past the end of an allocated

• CVE-2023-0160Jul 18, 2023
  affected < 1-150400.9.3.2fixed 1-150400.9.3.2

  A deadlock flaw was found in the Linux kernel’s BPF subsystem. This flaw allows a local user to potentially crash the system.

• CVE-2023-1829Apr 12, 2023
  affected < 1-150400.9.3.2fixed 1-150400.9.3.2

  A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying struc

• CVE-2021-4148Mar 23, 2022
  affected < 1-150400.9.3.2fixed 1-150400.9.3.2

  A vulnerability was found in the Linux kernel's block_invalidatepage in fs/buffer.c in the filesystem. A missing sanity check may allow a local attacker with user privilege to cause a denial of service (DOS) problem.

• CVE-2021-39698Mar 16, 2022
  affected < 1-150400.9.3.2fixed 1-150400.9.3.2

  In aio_poll_complete_work of aio.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android ke