suse/kernel-livepatch-SLE15-SP4_Update_48&distro=SUSE Linux Enterprise Live Patching 15 SP4

Vulnerabilities (383)

• CVE-2023-54270Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: media: usb: siano: Fix use after free bugs caused by do_submit_urb There are UAF bugs caused by do_submit_urb(). One of the KASan reports is shown below: [ 36.403605] BUG: KASAN: use-after-free in worker_thr

• CVE-2023-54269Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: SUNRPC: double free xprt_ctxt while still in use When an RPC request is deferred, the rq_xprt_ctxt pointer is moved out of the svc_rqst into the svc_deferred_req. When the deferred request is revisited, the poi

• CVE-2023-54266Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() 'read' is freed when it is known to be NULL, but not when a read error occurs. Revert the logic to avoid a small leak, should a m920x_read

• CVE-2023-54264Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: fs/sysv: Null check to prevent null-ptr-deref bug sb_getblk(inode->i_sb, parent) return a null ptr and taking lock on that leads to the null-ptr-deref bug.

• CVE-2023-54260Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: cifs: Fix lost destroy smbd connection when MR allocate failed If the MR allocate failed, the smb direct connection info is NULL, then smbd_destroy() will directly return, then the connection info will be leake

• CVE-2023-54252Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings My previous commit introduced a memory leak where the item allocated from tlmi_setting was not freed. This commit also renames it

• CVE-2023-54245Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds When we run syzkaller we get below Out of Bound. "KASAN: slab-out-of-bounds Read in regcache_flat_read" Below is the backtrace of the issue:

• CVE-2023-54244Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: Fix oops when removing custom query handlers When removing custom query handlers, the handler might still be used inside the EC query workqueue, causing a kernel oops if the module holding the callbac

• CVE-2023-54243Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: fix table blob use-after-free We are not allowed to return an error at this point. Looking at the code it looks like ret is always 0 at this point, but its not. t = find_table_lock(net, re

• CVE-2023-54242Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: block, bfq: Fix division by zero error on zero wsum When the weighted sum is zero the calculation of limit causes a division by zero error. Fix this by continuing to the next level. This was discovered by runn

• CVE-2023-54236Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: net/net_failover: fix txq exceeding warning The failover txq is inited as 16 queues. when a packet is transmitted from the failover device firstly, the failover device will select the queue which is returned fr

• CVE-2023-54230Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: amba: bus: fix refcount leak commit 5de1540b7bc4 ("drivers/amba: create devices from device tree") increases the refcount of of_node, but not releases it in amba_device_release, so there is refcount leak. By us

• CVE-2023-54219Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: Revert "IB/isert: Fix incorrect release of isert connection" Commit: 699826f4e30a ("IB/isert: Fix incorrect release of isert connection") is causing problems on OPA when DEVICE_REMOVAL is happening. ---------

• CVE-2023-54214Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix potential user-after-free This fixes all instances of which requires to allocate a buffer calling alloc_skb which may release the chan lock and reacquire later which makes it possible that

• CVE-2023-54213Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: USB: sisusbvga: Add endpoint checks The syzbot fuzzer was able to provoke a WARNING from the sisusbvga driver: ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 1 PID

• CVE-2023-54211Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: tracing: Fix warning in trace_buffered_event_disable() Warning happened in trace_buffered_event_disable() at WARN_ON_ONCE(!trace_buffered_event_ref) Call Trace: ? __warn+0xa5/0x1b0 ? trace_buffered_e

• CVE-2023-54208Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: media: ov5675: Fix memleak in ov5675_init_controls() There is a kmemleak when testing the media/i2c/ov5675.c with bpf mock device: AssertionError: unreferenced object 0xffff888107362160 (size 16): comm "pyth

• CVE-2023-54205Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain of_irq_find_parent() returns a node pointer with refcount incremented, We should use of_node_put() on it when not needed anymore. Add missing of_n

• CVE-2023-54202Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: drm/i915: fix race condition UAF in i915_perf_add_config_ioctl Userspace can guess the id value and try to race oa_config object creation with config remove, resulting in a use-after-free if we dereference the

• CVE-2023-54201Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix wrong resources deallocation order When trying to destroy QP or CQ, we first decrease the refcount and potentially free memory regions allocated for the object and then request the device to destr