suse/kernel-livepatch-SLE15-SP4_Update_41&distro=SUSE Linux Enterprise Live Patching 15 SP4

Vulnerabilities (177)

• CVE-2025-23138Apr 16, 2025
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: watch_queue: fix pipe accounting mismatch Currently, watch_queue_set_size() modifies the pipe buffers charged to user->pipe_bufs without updating the pipe->nr_accounted on the pipe itself, due to the if (!pipe_

• CVE-2025-22060Apr 16, 2025
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: Prevent parser TCAM memory corruption Protect the parser TCAM/SRAM memory, and the cached (shadow) SRAM information, from concurrent modifications. Both the TCAM and SRAM tables are indirectly acce

• CVE-2025-22056Apr 16, 2025
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_tunnel: fix geneve_opt type confusion addition When handling multiple NFTA_TUNNEL_KEY_OPTS_GENEVE attributes, the parsing logic should place every geneve_opt structure one by one compactly. Hence

• CVE-2025-21999Apr 3, 2025
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: proc: fix UAF in proc_get_inode() Fix race between rmmod and /proc/XXX's inode instantiation. The bug is that pde->proc_ops don't belong to /proc, it belongs to a module, therefore dereferencing it after /proc

• CVE-2025-21971Apr 1, 2025
  affected < 7-150400.2.1fixed 7-150400.2.1

  In the Linux kernel, the following vulnerability has been resolved: net_sched: Prevent creation of classes with TC_H_ROOT The function qdisc_tree_reduce_backlog() uses TC_H_ROOT as a termination condition when traversing up the qdisc tree to update parent backlog counters. Howe

• CVE-2025-21888Mar 27, 2025
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix a WARN during dereg_mr for DM type Memory regions (MR) of type DM (device memory) do not have an associated umem. In the __mlx5_ib_dereg_mr() -> mlx5_free_priv_descs() flow, the code incorrectly

• CVE-2022-49139Feb 26, 2025
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt This event is just specified for SCO and eSCO link types. On the reception of a HCI_Synchronous_Connection_Complete for a BDADDR of an existing LE con

• CVE-2022-49110Feb 26, 2025
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: revisit gc autotuning as of commit 4608fdfc07e1 ("netfilter: conntrack: collect all entries in one cycle") conntrack gc was changed to run every 2 minutes. On systems where conntrack hash

• CVE-2025-21702HigFeb 18, 2025
  affected < 2-150400.2.1fixed 2-150400.2.1

  In the Linux kernel, the following vulnerability has been resolved: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 Expected behaviour: In case we reach scheduler's limit, pfifo_tail_enqueue() will drop a packet in scheduler's queue and decrease scheduler's qlen by one

• CVE-2024-56558Dec 27, 2024
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: nfsd: make sure exp active before svc_export_show The function `e_show` was called with protection from RCU. This only ensures that `exp` will not be freed. Therefore, the reference count for `exp` can drop to

• CVE-2024-53168Dec 27, 2024
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket BUG: KASAN: slab-use-after-free in tcp_write_timer_handler+0x156/0x3e0 Read of size 1 at addr ffff888111f322cd by task swapper/0/0 CPU: 0 UID: 0 PID

• CVE-2024-53141Dec 6, 2024
  affected < 9-150400.2.1fixed 9-150400.2.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add missing range check in bitmap_ip_uadt When tb[IPSET_ATTR_IP_TO] is not present but tb[IPSET_ATTR_CIDR] exists, the values of ip and ip_to are slightly swapped. Therefore, the range check f

• CVE-2024-53125Dec 4, 2024
  affected < 2-150400.2.1fixed 2-150400.2.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: sync_linked_regs() must preserve subreg_def Range propagation must not affect subreg_def marks, otherwise the following example is rewritten by verifier incorrectly when BPF_F_TEST_RND_HI32 flag is set:

• CVE-2023-1990Apr 12, 2023
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  A use-after-free flaw was found in ndlc_remove in drivers/nfc/st-nci/ndlc.c in the Linux Kernel. This flaw could allow an attacker to crash the system due to a race problem.

• CVE-2022-3640Oct 21, 2022
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  A vulnerability, which was classified as critical, was found in Linux Kernel. Affected is the function l2cap_conn_del of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue.

• CVE-2022-3619Oct 20, 2022
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function l2cap_recv_acldata of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to memory leak. It is recommended to apply a patch to

• CVE-2022-3564Oct 17, 2022
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to