suse/kernel-livepatch-SLE15-SP4_Update_46&distro=SUSE Linux Enterprise Live Patching 15 SP4

Vulnerabilities (183)

• CVE-2022-50493HigOct 4, 2025
  affected < 1-150400.9.5.1fixed 1-150400.9.5.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix crash when I/O abort times out While performing CPU hotplug, a crash with the following stack was seen: Call Trace: qla24xx_process_response_queue+0x42a/0x970 [qla2xxx] qla2x00_sta

• CVE-2022-50492HigOct 4, 2025
  affected < 1-150400.9.5.1fixed 1-150400.9.5.1

  In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix use-after-free on probe deferral The bridge counter was never reset when tearing down the DRM device so that stale pointers to deallocated structures would be accessed on the next tear down (e.g. a

• CVE-2022-50490HigOct 4, 2025
  affected < 1-150400.9.5.1fixed 1-150400.9.5.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: Propagate error from htab_lock_bucket() to userspace In __htab_map_lookup_and_delete_batch() if htab_lock_bucket() returns -EBUSY, it will go to next bucket. Going to next bucket may not only skip the elem

• CVE-2022-50489MedOct 4, 2025
  affected < 1-150400.9.5.1fixed 1-150400.9.5.1

  In the Linux kernel, the following vulnerability has been resolved: drm/mipi-dsi: Detach devices when removing the host Whenever the MIPI-DSI host is unregistered, the code of mipi_dsi_host_unregister() loops over every device currently found on that bus and will unregister it.

• CVE-2022-50488HigOct 4, 2025
  affected < 1-150400.9.5.1fixed 1-150400.9.5.1

  In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix possible uaf for 'bfqq->bic' Our test report a uaf for 'bfqq->bic' in 5.10: ================================================================== BUG: KASAN: use-after-free in bfq_select_queue+0x3

• CVE-2022-50485MedOct 4, 2025
  affected < 1-150400.9.5.1fixed 1-150400.9.5.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode There are many places that will get unhappy (and crash) when ext4_iget() returns a bad inode. However, if iget the boot loader inode, allows a bad in

• CVE-2022-50484MedOct 4, 2025
  affected < 1-150400.9.5.1fixed 1-150400.9.5.1

  In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential memory leaks When the driver hits -ENOMEM at allocating a URB or a buffer, it aborts and goes to the error path that releases the all previously allocated resources. However, whe

• CVE-2022-50482MedOct 4, 2025
  affected < 1-150400.9.5.1fixed 1-150400.9.5.1

  In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clean up si_domain in the init_dmars() error path A splat from kmem_cache_destroy() was seen with a kernel prior to commit ee2653bbe89d ("iommu/vt-d: Remove domain and devinfo mempool") when there w

• CVE-2022-50480MedOct 4, 2025
  affected < 1-150400.9.5.1fixed 1-150400.9.5.1

  In the Linux kernel, the following vulnerability has been resolved: memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() The break of for_each_available_child_of_node() needs a corresponding of_node_put() when the reference 'child' is not used anymore. Here we do not n

• CVE-2022-50478HigOct 4, 2025
  affected < 1-150400.9.5.1fixed 1-150400.9.5.1

  In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() Patch series "nilfs2: fix UBSAN shift-out-of-bounds warnings on mount time". The first patch fixes a bug reported by syzbot, and the second on

• CVE-2022-50475MedOct 4, 2025
  affected < 1-150400.9.5.1fixed 1-150400.9.5.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Make sure "ib_port" is valid when access sysfs node The "ib_port" structure must be set before adding the sysfs kobject, and reset after removing it, otherwise it may crash when accessing the sysfs n

• CVE-2022-50472HigOct 4, 2025
  affected < 1-150400.9.5.1fixed 1-150400.9.5.1

  In the Linux kernel, the following vulnerability has been resolved: IB/mad: Don't call to function that might sleep while in atomic context Tracepoints are not allowed to sleep, as such the following splat is generated due to call to ib_query_pkey() in atomic context. WARNING:

• CVE-2022-50471MedOct 4, 2025
  affected < 1-150400.9.5.1fixed 1-150400.9.5.1

  In the Linux kernel, the following vulnerability has been resolved: xen/gntdev: Accommodate VMA splitting Prior to this commit, the gntdev driver code did not handle the following scenario correctly with paravirtualized (PV) Xen domains: * User process sets up a gntdev mapping

• CVE-2022-50470HigOct 4, 2025
  affected < 1-150400.9.5.1fixed 1-150400.9.5.1

  In the Linux kernel, the following vulnerability has been resolved: xhci: Remove device endpoints from bandwidth list when freeing the device Endpoints are normally deleted from the bandwidth list when they are dropped, before the virt device is freed. If xHC host is dying or

• CVE-2025-39945HigOct 4, 2025
  affected < 1-150400.9.5.1fixed 1-150400.9.5.1

  In the Linux kernel, the following vulnerability has been resolved: cnic: Fix use-after-free bugs in cnic_delete_task The original code uses cancel_delayed_work() in cnic_cm_stop_bnx2x_hw(), which does not guarantee that the delayed work item 'delete_task' has fully completed i

• CVE-2023-53500HigOct 1, 2025
  affected < 1-150400.9.5.1fixed 1-150400.9.5.1

  In the Linux kernel, the following vulnerability has been resolved: xfrm: fix slab-use-after-free in decode_session6 When the xfrm device is set to the qdisc of the sfb type, the cb field of the sent skb may be modified during enqueuing. Then, slab-use-after-free may occur when

• CVE-2023-53365MedSep 17, 2025
  affected < 1-150400.9.5.1fixed 1-150400.9.5.1

  In the Linux kernel, the following vulnerability has been resolved: ip6mr: Fix skb_under_panic in ip6mr_cache_report() skbuff: skb_under_panic: text:ffffffff88771f69 len:56 put:-4 head:ffff88805f86a800 data:ffff887f5f86a850 tail:0x88 end:0x2c0 dev:pim6reg ------------[ cut he

• CVE-2022-50334MedSep 15, 2025
  affected < 1-150400.9.5.1fixed 1-150400.9.5.1

  In the Linux kernel, the following vulnerability has been resolved: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() Syzkaller reports a null-ptr-deref bug as follows: ====================================================== KASAN: null-ptr-deref in range [0x0000000000000

• CVE-2022-50327MedSep 15, 2025
  affected < 1-150400.9.5.1fixed 1-150400.9.5.1

  In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value The return value of acpi_fetch_acpi_dev() could be NULL, which would cause a NULL pointer dereference to occur in acpi_device_hid(). [ rjw: Subje

• CVE-2025-39797HigSep 12, 2025
  affected < 1-150400.9.5.1fixed 1-150400.9.5.1

  In the Linux kernel, the following vulnerability has been resolved: xfrm: Duplicate SPI Handling The issue originates when Strongswan initiates an XFRM_MSG_ALLOCSPI Netlink message, which triggers the kernel function xfrm_alloc_spi(). This function is expected to ensure uniquen