suse/kernel-livepatch-SLE15-SP4_Update_48&distro=SUSE Linux Enterprise Live Patching 15 SP4

Vulnerabilities (383)

• CVE-2023-54199Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() Fix the below kernel panic due to null pointer access: [ 18.504431] Unable to handle kernel NULL pointer dereference at virtual address 000000000000

• CVE-2023-54198Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bounds access in tty_driver_lookup_tty() When specifying an invalid console= device like console=tty3270, tty_driver_lookup_tty() returns the tty struct without checking whether index is a valid

• CVE-2023-54197Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" This reverts commit 1e9ac114c4428fdb7ff4635b45d4f46017e8916f. This patch introduces a possible null-ptr-def problem. R

• CVE-2023-54190Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: leds: led-core: Fix refcount leak in of_led_get() class_find_device_by_of_node() calls class_find_device(), it will take the reference, use the put_device() to drop the reference when not need anymore.

• CVE-2023-54189Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Add check for kstrdup Add check for the return value of kstrdup() and return the error if it fails in order to avoid NULL pointer dereference.

• CVE-2023-54186Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: fix pin_assignment_show This patch fixes negative indexing of buf array in pin_assignment_show when get_current_pin_assignments returns 0 i.e. no compatible pin assignments are

• CVE-2023-54183Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() If fwnode_graph_get_remote_endpoint() fails, 'fwnode' is known to be NULL, so fwnode_handle_put() is a no-op. Release the reference t

• CVE-2023-54179Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Array index may go out of bound Klocwork reports array 'vha->host_str' of size 16 may use index value(s) 16..19. Use snprintf() instead of sprintf().

• CVE-2023-54177Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: quota: fix warning in dqgrab() There's issue as follows when do fault injection: WARNING: CPU: 1 PID: 14870 at include/linux/quotaops.h:51 dquot_disable+0x13b7/0x18c0 Modules linked in: CPU: 1 PID: 14870 Comm:

• CVE-2023-54173Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpf_event_output We received report [1] of kernel crash, which is caused by using nesting protection without disabled preemption. The bpf_event_output can be called by programs execu

• CVE-2023-54171Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory leak of iter->temp when reading trace_pipe kmemleak reports: unreferenced object 0xffff88814d14e200 (size 256): comm "cat", pid 336, jiffies 4294871818 (age 779.490s) hex dump (fir

• CVE-2023-54170Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: keys: Fix linking a duplicate key to a keyring's assoc_array When making a DNS query inside the kernel using dns_query(), the request code can in rare cases end up creating a duplicate index key in the assoc_ar

• CVE-2023-54168Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() The ucmd->log_sq_bb_count variable is controlled by the user so this shift can wrap. Fix it by using check_shl_overflow() in the same way that it was don

• CVE-2023-54166Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: igc: Fix Kernel Panic during ndo_tx_timeout callback The Xeon validation group has been carrying out some loaded tests with various HW configurations, and they have seen some transmit queue time out happening d

• CVE-2022-50889Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: dm integrity: Fix UAF in dm_integrity_dtr() Dm_integrity also has the same UAF problem when dm_resume() and dm_destroy() are concurrent. Therefore, cancelling timer again in dm_integrity_dtr().

• CVE-2022-50888Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio() q6v5_wcss_init_mmio() will call platform_get_resource_byname() that may fail and return NULL. devm_ioremap() will use res->start as

• CVE-2022-50887Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() I got the the following report: OF: ERROR: memory leak, expected refcount 1 instead of 2, of_node_get()/of_node_put() unbalanced -

• CVE-2022-50886Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: mmc: toshsd: fix return value check of mmc_add_host() mmc_add_host() may return error, if we ignore its return value, the memory that allocated in mmc_alloc_host() will be leaked and it will lead a kernel crash

• CVE-2022-50885Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed There is a null-ptr-deref when mount.cifs over rdma: BUG: KASAN: null-ptr-deref in rxe_qp_do_cleanup+0x2f3/0x360 [rdma_rxe] Rea

• CVE-2022-50884Dec 30, 2025
  affected < 1-150400.9.7.1fixed 1-150400.9.7.1

  In the Linux kernel, the following vulnerability has been resolved: drm: Prevent drm_copy_field() to attempt copying a NULL pointer There are some struct drm_driver fields that are required by drivers since drm_copy_field() attempts to copy them to user-space via DRM_IOCTL_VERS