suse/kernel-livepatch-SLE15-SP5_Update_12&distro=SUSE Linux Enterprise Live Patching 15 SP5

Vulnerabilities (189)

• CVE-2023-52504HigMar 2, 2024
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: x86/alternatives: Disable KASAN in apply_alternatives() Fei has reported that KASAN triggers during apply_alternatives() on a 5-level paging machine: BUG: KASAN: out-of-bounds in rcu_is_watching() Read of si

• CVE-2023-52502HigMar 2, 2024
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() Sili Luo reported a race in nfc_llcp_sock_get(), leading to UAF. Getting a reference on the socket found in a lookup while holding a lock s

• CVE-2023-52501HigMar 2, 2024
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not attempt to read past "commit" When iterating over the ring buffer while the ring buffer is active, the writer can corrupt the reader. There's barriers to help detect this and handle it, but

• CVE-2023-52500MedMar 2, 2024
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command Tags allocated for OPC_INB_SET_CONTROLLER_CONFIG command need to be freed when we receive the response.

• CVE-2022-48628MedMar 2, 2024
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: ceph: drop messages from MDS when unmounting When unmounting all the dirty buffers will be flushed and after the last osd request is finished the last reference of the i_count will be released. Then it will flu

• CVE-2022-48627MedMar 2, 2024
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: vt: fix memory overlapping when deleting chars in the buffer A memory overlapping copy occurs when deleting a long line. This memory overlapping copy can cause data corruption when scr_memcpyw is optimized to m

• CVE-2023-52497HigMar 1, 2024
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: erofs: fix lz4 inplace decompression Currently EROFS can map another compressed buffer for inplace decompression, that was used to handle the cases that some pages of compressed data are actually not in-place I

• CVE-2024-26607MedFeb 29, 2024
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: drm/bridge: sii902x: Fix probing race issue A null pointer dereference crash has been observed rarely on TI platforms using sii9022 bridge: [ 53.271356] sii902x_get_edid+0x34/0x70 [sii902x] [ 53.276066]

• CVE-2023-52484MedFeb 29, 2024
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range When running an SVA case, the following soft lockup is triggered: -------------------------------------------------------------------

• CVE-2023-52482HigFeb 29, 2024
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: x86/srso: Add SRSO mitigation for Hygon processors Add mitigation for the speculative return stack overflow vulnerability which exists on Hygon processors too.

• CVE-2023-52481MedFeb 29, 2024
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: arm64: errata: Add Cortex-A520 speculative unprivileged load workaround Implement the workaround for ARM Cortex-A520 erratum 2966298. On an affected Cortex-A520 core, a speculatively executed unprivileged load

• CVE-2023-52477MedFeb 29, 2024
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev->bos without checking if it was allocated and init

• CVE-2023-52476MedFeb 29, 2024
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: perf/x86/lbr: Filter vsyscall addresses We found that a panic can occur when a vsyscall is made while LBR sampling is active. If the vsyscall is interrupted (NMI) for perf sampling, this call sequence can occur

• CVE-2021-46936HigFeb 27, 2024
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: net: fix use-after-free in tw_timer_handler A real world panic issue was found as follow in Linux 5.4. BUG: unable to handle page fault for address: ffffde49a863de28 PGD 7e6fe62067 P4D 7e6fe62067 PUD 7

• CVE-2021-46934LowFeb 27, 2024
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: i2c: validate user data in compat ioctl Wrong user data may cause warning in i2c_transfer(), ex: zero msgs. Userspace should not be able to trigger warnings, so this patch adds validation checks for user data i

• CVE-2021-46933HigFeb 27, 2024
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. ffs_data_clear is indirectly called from both ffs_fs_kill_sb and ffs_ep0_release, so it ends up being called twice when userland closes ep0 and then unmou

• CVE-2021-46931MedFeb 27, 2024
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Wrap the tx reporter dump callback to extract the sq Function mlx5e_tx_reporter_dump_sq() casts its void * argument to struct mlx5e_txqsq *, but in TX-timeout-recovery flow the argument is actually o

• CVE-2021-46930MedFeb 27, 2024
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: usb: mtu3: fix list_head check warning This is caused by uninitialization of list_head. BUG: KASAN: use-after-free in __list_del_entry_valid+0x34/0xe4 Call trace: dump_backtrace+0x0/0x298 show_stack+0x24/0x34

• CVE-2021-46929HigFeb 27, 2024
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: sctp: use call_rcu to free endpoint This patch is to delay the endpoint free by calling call_rcu() to fix another use-after-free issue in sctp_sock_dump(): BUG: KASAN: use-after-free in __lock_acquire+0x36d9

• CVE-2021-46927MedFeb 27, 2024
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: nitro_enclaves: Use get_user_pages_unlocked() call to handle mmap assert After commit 5b78ed24e8ec ("mm/pagemap: add mmap_assert_locked() annotations to find_vma*()"), the call to get_user_pages() will trigger