suse/kernel-livepatch-SLE15-SP5_Update_11&distro=SUSE Linux Enterprise Live Patching 15 SP5

Vulnerabilities (77)

• CVE-2024-53104KEVDec 2, 2024
  affected < 13-150500.2.1fixed 13-150500.2.1

  In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the fra

• CVE-2024-50264Nov 19, 2024
  affected < 10-150500.11.6.1fixed 10-150500.11.6.1

  In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans During loopback communication, a dangling pointer can be created in vsk->trans, potentially leading to a Use-After-Free condition. T

• CVE-2022-48956Oct 21, 2024
  affected < 10-150500.11.6.1fixed 10-150500.11.6.1

  In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid use-after-free in ip6_fragment() Blamed commit claimed rcu_read_lock() was held by ip6_fragment() callers. It seems to not be always true, at least for UDP stack. syzbot reported: BUG: KASAN: use

• CVE-2024-43861Aug 20, 2024
  affected < 9-150500.11.6.1fixed 9-150500.11.6.1

  In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: fix memory leak for not ip packets Free the unused skb when not ip packets arrive.

• CVE-2024-41059Jul 29, 2024
  affected < 7-150500.11.6.1fixed 7-150500.11.6.1

  In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix uninit-value in copy_name [syzbot reported] BUG: KMSAN: uninit-value in sized_strscpy+0xc4/0x160 sized_strscpy+0xc4/0x160 copy_name+0x2af/0x320 fs/hfsplus/xattr.c:411 hfsplus_listxattr+0x11e9/0x

• CVE-2024-41057Jul 29, 2024
  affected < 11-150500.11.6.1fixed 11-150500.11.6.1

  In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() We got the following issue in our fault injection stress test: ================================================================== BUG: KASAN:

• CVE-2024-40956Jul 12, 2024
  affected < 13-150500.2.1fixed 13-150500.2.1

  In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list Use list_for_each_entry_safe() to allow iterating through the list and deleting the entry in the iteration process. The descriptor is freed

• CVE-2024-40954Jul 12, 2024
  affected < 7-150500.11.6.1fixed 7-150500.11.6.1

  In the Linux kernel, the following vulnerability has been resolved: net: do not leave a dangling sk pointer, when socket creation fails It is possible to trigger a use-after-free by: * attaching an fentry probe to __sock_release() and the probe calling the bpf_get_socket_

• CVE-2023-52340Jul 5, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  The IPv6 implementation in the Linux kernel before 6.3 has a net/ipv6/route.c max_size threshold that can be consumed easily, e.g., leading to a denial of service (network is unreachable errors) when IPv6 packets are sent in a loop via a raw socket.

• CVE-2021-47598Jun 19, 2024
  affected < 8-150500.11.6.1fixed 8-150500.11.6.1

  In the Linux kernel, the following vulnerability has been resolved: sch_cake: do not call cake_destroy() from cake_init() qdiscs are not supposed to call their own destroy() method from init(), because core stack already does that. syzbot was able to trigger use after free: D

• CVE-2024-36974HigJun 18, 2024
  affected < 13-150500.2.1fixed 13-150500.2.1

  In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP If one TCA_TAPRIO_ATTR_PRIOMAP attribute has been provided, taprio_parse_mqprio_opt() must validate it, or userspace can inject arbitrary data to the k

• CVE-2024-36971KEVJun 10, 2024
  affected < 11-150500.11.6.1fixed 11-150500.11.6.1

  In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU rules when sk->dst_cache must be cleared, leading to possible UAF. RCU rules are that we must first clear sk->sk_dst_ca

• CVE-2024-36964Jun 3, 2024
  affected < 7-150500.11.6.1fixed 7-150500.11.6.1

  In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bits is allowed through, which causes it to be able to set (among others) the suid bit. This was presumably not the intent s

• CVE-2024-36904HigMay 30, 2024
  affected < 9-150500.11.6.1fixed 9-150500.11.6.1

  In the Linux kernel, the following vulnerability has been resolved: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). Anderson Nascimento reported a use-after-free splat in tcp_twsk_unique() with nice analysis. Since commit ec94c2696f0b ("tcp/dccp: avoid one atomic operat

• CVE-2024-36899HigMay 30, 2024
  affected < 7-150500.11.6.1fixed 7-150500.11.6.1

  In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Fix use after free in lineinfo_changed_notify The use-after-free issue occurs as follows: when the GPIO chip device file is being closed by invoking gpio_chrdev_release(), watched_lines is freed

• CVE-2021-47517May 24, 2024
  affected < 9-150500.11.6.1fixed 9-150500.11.6.1

  In the Linux kernel, the following vulnerability has been resolved: ethtool: do not perform operations on net devices being unregistered There is a short period between a net device starts to be unregistered and when it is actually gone. In that time frame ethtool operations co

• CVE-2023-52846May 21, 2024
  affected < 6-150500.11.6.2fixed 6-150500.11.6.2

  In the Linux kernel, the following vulnerability has been resolved: hsr: Prevent use after free in prp_create_tagged_frame() The prp_fill_rct() function can fail. In that situation, it frees the skb and returns NULL. Meanwhile on the success path, it returns the original skb.

• CVE-2023-52752May 21, 2024
  affected < 8-150500.11.6.1fixed 8-150500.11.6.1

  In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() Skip SMB sessions that are being teared down (e.g. @ses->ses_status == SES_EXITING) in cifs_debug_data_proc_show() to avoid use-after-free in @

• CVE-2024-35950MedMay 20, 2024
  affected < 5-150500.11.6.1fixed 5-150500.11.6.1

  In the Linux kernel, the following vulnerability has been resolved: drm/client: Fully protect modes[] with dev->mode_config.mutex The modes[] array contains pointers to modes on the connectors' mode lists, which are protected by dev->mode_config.mutex. Thus we need to extend mo

• CVE-2024-35949May 20, 2024
  affected < 9-150500.11.6.1fixed 9-150500.11.6.1

  In the Linux kernel, the following vulnerability has been resolved: btrfs: make sure that WRITTEN is set on all metadata blocks We previously would call btrfs_check_leaf() if we had the check integrity code enabled, which meant that we could only run the extended leaf checks if