suse/kernel-livepatch-SLE15-SP4_Update_45&distro=SUSE Linux Enterprise Live Patching 15 SP4

Vulnerabilities (345)

• CVE-2023-53230Sep 15, 2025
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: smb: client: fix warning in cifs_smb3_do_mount() This fixes the following warning reported by kernel test robot fs/smb/client/cifsfs.c:982 cifs_smb3_do_mount() warn: possible memory leak of 'cifs_sb'

• CVE-2023-53229Sep 15, 2025
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta Avoid potential data corruption issues caused by uninitialized driver private data structures.

• CVE-2023-53226Sep 15, 2025
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix OOB and integer underflow when rx packets Make sure mwifiex_process_mgmt_packet, mwifiex_process_sta_rx_packet and mwifiex_process_uap_rx_packet, mwifiex_uap_queue_bridged_pkt and mwifiex_pro

• CVE-2023-53223Sep 15, 2025
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: Add missing check for alloc_ordered_workqueue Add check for the return value of alloc_ordered_workqueue as it may return NULL pointer and cause NULL pointer dereference. Patchwork: https://patchwo

• CVE-2023-53222Sep 15, 2025
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: jfs: jfs_dmap: Validate db_l2nbperpage while mounting In jfs_dmap.c at line 381, BLKTODMAP is used to get a logical block number inside dbFree(). db_l2nbperpage, which is the log2 number of blocks per page, is

• CVE-2023-53219Sep 15, 2025
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: media: netup_unidvb: fix use-after-free at del_timer() When Universal DVB card is detaching, netup_unidvb_dma_fini() uses del_timer() to stop dma->timeout timer. But when timer handler netup_unidvb_dma_timeout(

• CVE-2023-53216Sep 15, 2025
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: arm64: efi: Make efi_rt_lock a raw_spinlock Running a rt-kernel base on 6.2.0-rc3-rt1 on an Ampere Altra outputs the following: BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt

• CVE-2023-53213Sep 15, 2025
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() Fix a slab-out-of-bounds read that occurs in kmemdup() called from brcmf_get_assoc_ies(). The bug could occur when assoc_info->req_len, data from

• CVE-2023-53205Sep 15, 2025
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler We do check for target CPU == -1, but this might change at the time we are going to use it. Hold the physical target CPU in a local vari

• CVE-2023-53201Sep 15, 2025
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: wraparound mbox producer index Driver is not handling the wraparound of the mbox producer index correctly. Currently the wraparound happens once u32 max is reached. Bit 31 of the producer index r

• CVE-2023-53199Sep 15, 2025
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails Syzkaller detected a memory leak of skbs in ath9k_hif_usb_rx_stream(). While processing skbs in ath9k_hif_usb_rx_stream(), the already allo

• CVE-2022-50289Sep 15, 2025
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix memory leak in ocfs2_stack_glue_init() ocfs2_table_header should be free in ocfs2_stack_glue_init() if ocfs2_sysfs_init() failed, otherwise kmemleak will report memleak. BUG: memory leak unreference

• CVE-2022-50286Sep 15, 2025
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline When converting files with inline data to extents, delayed allocations made on a file system created with both the bigalloc and inline o

• CVE-2022-50282Sep 15, 2025
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: chardev: fix error handling in cdev_device_add() While doing fault injection test, I got the following report: ------------[ cut here ]------------ kobject: '(null)' (0000000039956980): is not initialized, yet

• CVE-2022-50279Sep 15, 2025
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() There is a global-out-of-bounds reported by KASAN: BUG: KASAN: global-out-of-bounds in _rtl8812ae_eq_n_byte.part.0+0x3d/0x8

• CVE-2022-50278Sep 15, 2025
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: PNP: fix name memory leak in pnp_alloc_dev() After commit 1fa5ae857bb1 ("driver core: get rid of struct device's bus_id string array"), the name of device is allocated dynamically, move dev_set_name() after pnp

• CVE-2022-50277Sep 15, 2025
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: don't allow journal inode to have encrypt flag Mounting a filesystem whose journal inode has the encrypt flag causes a NULL dereference in fscrypt_limit_io_blocks() when the 'inlinecrypt' mount option is

• CVE-2022-50276Sep 15, 2025
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: power: supply: fix null pointer dereferencing in power_supply_get_battery_info when kmalloc() fail to allocate memory in kasprintf(), propname will be NULL, strcmp() called by of_get_property() will cause null

• CVE-2022-50275Sep 15, 2025
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Add the missed acpi_put_table() to fix memory leak When the radeon driver reads the bios information from ACPI table in radeon_acpi_vfct_bios(), it misses to call acpi_put_table() to release the ACP

• CVE-2022-50272Sep 15, 2025
  affected < 1-150400.9.3.1fixed 1-150400.9.3.1

  In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() Wei Chen reports a kernel bug as blew: general protection fault, probably for non-canonical address KASAN: null-ptr-deref in range [0x00000000000