suse/kernel-livepatch-SLE15-SP4_Update_48&distro=SUSE Linux Enterprise Live Patching 15 SP4

Vulnerabilities (383)

• CVE-2023-54026Dec 24, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: opp: Fix use-after-free in lazy_opp_tables after probe deferral When dev_pm_opp_of_find_icc_paths() in _allocate_opp_table() returns -EPROBE_DEFER, the opp_table is freed again, to wait until all the interconne

• CVE-2023-54025Dec 24, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled In case WoWlan was never configured during the operation of the system, the hw->wiphy->wowlan_config will be NULL. rsi_config_wowlan() checks w

• CVE-2023-54024Dec 24, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: KVM: Destroy target device if coalesced MMIO unregistration fails Destroy and free the target coalesced MMIO device if unregistering said device fails. As clearly noted in the code, kvm_io_bus_unregister_dev()

• CVE-2023-54021Dec 24, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: set goal start correctly in ext4_mb_normalize_request We need to set ac_g_ex to notify the goal start used in ext4_mb_find_by_goal. Set ac_g_ex instead of ac_f_ex in ext4_mb_normalize_request. Besides we

• CVE-2023-54020Dec 24, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: dmaengine: sf-pdma: pdma_desc memory leak fix Commit b2cc5c465c2c ("dmaengine: sf-pdma: Add multithread support for a DMA channel") changed sf_pdma_prep_dma_memcpy() to unconditionally allocate a new sf_pdma_de

• CVE-2023-54019Dec 24, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: sched/psi: use kernfs polling functions for PSI trigger polling Destroying psi trigger in cgroup_file_release causes UAF issues when a cgroup is removed from under a polling process. This is happening because c

• CVE-2023-54018Dec 24, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: drm/msm/hdmi: Add missing check for alloc_ordered_workqueue Add check for the return value of alloc_ordered_workqueue as it may return NULL pointer and cause NULL pointer dereference in `hdmi_hdcp.c` and `hdmi_

• CVE-2023-54015Dec 24, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device In case devcom allocation is failed, mlx5 is always freeing the priv. However, this priv might have been allocated by a different thread, and free

• CVE-2023-54014Dec 24, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() Klocwork reported warning of rport maybe NULL and will be dereferenced. rport returned by call to fc_bsg_to_rport() could be NULL and dereferenced.

• CVE-2023-54010Dec 24, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects ACPICA commit 0d5f467d6a0ba852ea3aad68663cbcbd43300fd4 ACPI_ALLOCATE_ZEROED may fails, object_info might be null and will ca

• CVE-2023-54009Dec 24, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path The cdns_i2c_master_xfer() function gets a runtime PM reference when the function is entered. This reference is released when the function

• CVE-2023-54007Dec 24, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: vmci_host: fix a race condition in vmci_host_poll() causing GPF During fuzzing, a general protection fault is observed in vmci_host_poll(). general protection fault, probably for non-canonical address 0xdffffc

• CVE-2023-54003Dec 24, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix GID entry ref leak when create_ah fails If AH create request fails, release sgid_attr to avoid GID entry referrence leak reported while releasing GID table

• CVE-2023-54001Dec 24, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: staging: r8712: Fix memory leak in _r8712_init_xmit_priv() In the above mentioned routine, memory is allocated in several places. If the first succeeds and a later one fails, the routine will leak memory. This

• CVE-2023-53998Dec 24, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio - Fix race on data_avail and actual data The virtio rng device kicks off a new entropy request whenever the data available reaches zero. When a new request occurs at the end of a read operation,

• CVE-2023-53996Dec 24, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: x86/sev: Make enc_dec_hypercall() accept a size instead of npages enc_dec_hypercall() accepted a page count instead of a size, which forced its callers to round up. As a result, non-page aligned vaddrs caused p

• CVE-2023-53991Dec 24, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Disallow unallocated resources to be returned In the event that the topology requests resources that have not been created by the system (because they are typically not represented in dpu_mdss_cfg

• CVE-2023-53990Dec 24, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: SMB3: Add missing locks to protect deferred close file list cifs_del_deferred_close function has a critical section which modifies the deferred close file list. We must acquire deferred_lock before calling cifs

• CVE-2022-50709Dec 24, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() syzbot is reporting uninit value at ath9k_htc_rx_msg() [1], for ioctl(USB_RAW_IOCTL_EP_WRITE) can call ath9k_hif_usb_rx_stream() with pkt_len = 0 but

• CVE-2022-50704Dec 24, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix use-after-free during usb config switch In the process of switching USB config from rndis to other config, if the hardware does not support the ->pullup callback, or the hardware encounters a l