suse/kernel-livepatch-SLE15-SP4_Update_48&distro=SUSE Linux Enterprise Live Patching 15 SP4

Vulnerabilities (383)

• CVE-2023-54271Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before init blk-iocost sometimes causes the following crash: BUG: kernel NULL pointer dereference, address: 00000000000000e0 ... RIP:

• CVE-2023-54270Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: media: usb: siano: Fix use after free bugs caused by do_submit_urb There are UAF bugs caused by do_submit_urb(). One of the KASan reports is shown below: [ 36.403605] BUG: KASAN: use-after-free in worker_thr

• CVE-2023-54269CriDec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: SUNRPC: double free xprt_ctxt while still in use When an RPC request is deferred, the rq_xprt_ctxt pointer is moved out of the svc_rqst into the svc_deferred_req. When the deferred request is revisited, the poi

• CVE-2023-54266Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() 'read' is freed when it is known to be NULL, but not when a read error occurs. Revert the logic to avoid a small leak, should a m920x_read

• CVE-2023-54264Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: fs/sysv: Null check to prevent null-ptr-deref bug sb_getblk(inode->i_sb, parent) return a null ptr and taking lock on that leads to the null-ptr-deref bug.

• CVE-2023-54260Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: cifs: Fix lost destroy smbd connection when MR allocate failed If the MR allocate failed, the smb direct connection info is NULL, then smbd_destroy() will directly return, then the connection info will be leake

• CVE-2023-54252Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings My previous commit introduced a memory leak where the item allocated from tlmi_setting was not freed. This commit also renames it

• CVE-2023-54245Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds When we run syzkaller we get below Out of Bound. "KASAN: slab-out-of-bounds Read in regcache_flat_read" Below is the backtrace of the issue:

• CVE-2023-54244Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: Fix oops when removing custom query handlers When removing custom query handlers, the handler might still be used inside the EC query workqueue, causing a kernel oops if the module holding the callbac

• CVE-2023-54243HigDec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: fix table blob use-after-free We are not allowed to return an error at this point. Looking at the code it looks like ret is always 0 at this point, but its not. t = find_table_lock(net, re

• CVE-2023-54242Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: block, bfq: Fix division by zero error on zero wsum When the weighted sum is zero the calculation of limit causes a division by zero error. Fix this by continuing to the next level. This was discovered by runn

• CVE-2023-54236Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: net/net_failover: fix txq exceeding warning The failover txq is inited as 16 queues. when a packet is transmitted from the failover device firstly, the failover device will select the queue which is returned fr

• CVE-2023-54230Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: amba: bus: fix refcount leak commit 5de1540b7bc4 ("drivers/amba: create devices from device tree") increases the refcount of of_node, but not releases it in amba_device_release, so there is refcount leak. By us

• CVE-2023-54219HigDec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: Revert "IB/isert: Fix incorrect release of isert connection" Commit: 699826f4e30a ("IB/isert: Fix incorrect release of isert connection") is causing problems on OPA when DEVICE_REMOVAL is happening. ---------

• CVE-2023-54214HigDec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix potential user-after-free This fixes all instances of which requires to allocate a buffer calling alloc_skb which may release the chan lock and reacquire later which makes it possible that

• CVE-2023-54213Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: USB: sisusbvga: Add endpoint checks The syzbot fuzzer was able to provoke a WARNING from the sisusbvga driver: ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 1 PID

• CVE-2023-54211Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: tracing: Fix warning in trace_buffered_event_disable() Warning happened in trace_buffered_event_disable() at WARN_ON_ONCE(!trace_buffered_event_ref) Call Trace: ? __warn+0xa5/0x1b0 ? trace_buffered_e

• CVE-2023-54208Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: media: ov5675: Fix memleak in ov5675_init_controls() There is a kmemleak when testing the media/i2c/ov5675.c with bpf mock device: AssertionError: unreferenced object 0xffff888107362160 (size 16): comm "pyth

• CVE-2023-54205Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain of_irq_find_parent() returns a node pointer with refcount incremented, We should use of_node_put() on it when not needed anymore. Add missing of_n

• CVE-2023-54202HigDec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: drm/i915: fix race condition UAF in i915_perf_add_config_ioctl Userspace can guess the id value and try to race oa_config object creation with config remove, resulting in a use-after-free if we dereference the