suse/kernel-livepatch-SLE15-SP5_Update_17&distro=SUSE Linux Enterprise Live Patching 15 SP5

Vulnerabilities (563)

• CVE-2024-38541HigJun 19, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: of: module: add buffer overflow check in of_modalias() In of_modalias(), if the buffer happens to be too small even for the 1st snprintf() call, the len parameter will become negative and str parameter (if not

• CVE-2024-38540MedJun 19, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq Undefined behavior is triggered when bnxt_qplib_alloc_init_hwq is called with hwq_attr->aux_depth != 0 and hwq_attr->aux_stride == 0. In that

• CVE-2024-36978HigJun 19, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: net: sched: sch_multiq: fix possible OOB write in multiq_tune() q->bands will be assigned to qopt->bands to execute subsequent code logic after kmalloc. So the old q->bands should not be used in kmalloc. Otherw

• CVE-2024-36975MedJun 18, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Do not use WARN when encode fails When asn1_encode_sequence() fails, WARN is not the correct solution. 1. asn1_encode_sequence() is not an internal function (located in lib/asn1_encode.c). 2.

• CVE-2024-36974HigJun 18, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP If one TCA_TAPRIO_ATTR_PRIOMAP attribute has been provided, taprio_parse_mqprio_opt() must validate it, or userspace can inject arbitrary data to the k

• CVE-2024-36971HigKEVJun 10, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU rules when sk->dst_cache must be cleared, leading to possible UAF. RCU rules are that we must first clear sk->sk_dst_ca

• CVE-2024-36969MedJun 8, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix division by zero in setup_dsc_config When slice_height is 0, the division by slice_height in the calculation of the number of slices will cause a division by zero driver crash. This leaves

• CVE-2024-36967MedJun 8, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix memory leak in tpm2_key_encode() 'scratch' is never freed. Fix this by calling kfree() in the success, and in the error case.

• CVE-2024-36965HigJun 8, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: remoteproc: mediatek: Make sure IPI buffer fits in L2TCM The IPI buffer location is read from the firmware that we load to the System Companion Processor, and it's not granted that both the SRAM (L2TCM) size th

• CVE-2024-36964HigJun 3, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bits is allowed through, which causes it to be able to set (among others) the suid bit. This was presumably not the intent s

• CVE-2024-36960HigJun 3, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix invalid reads in fence signaled events Correctly set the length of the drm_event to the size of the structure that's actually used. The length of the drm_event was set to the parent structure i

• CVE-2024-36949MedMay 30, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: amd/amdkfd: sync all devices to wait all processes being evicted If there are more than one device doing reset in parallel, the first device will call kfd_suspend_all_processes() to evict all processes on all d

• CVE-2024-36946MedMay 30, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: phonet: fix rtm_phonet_notify() skb allocation fill_route() stores three components in the skb: - struct rtmsg - RTA_DST (u8) - RTA_OIF (u32) Therefore, rtm_phonet_notify() should use NLMSG_ALIGN(sizeof(stru

• CVE-2024-36945HigMay 30, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: net/smc: fix neighbour and rtable leak in smc_ib_find_route() In smc_ib_find_route(), the neighbour found by neigh_lookup() and rtable resolved by ip_route_output_flow() are not released or put before return. I

• CVE-2024-36940HigMay 30, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: pinctrl: core: delete incorrect free in pinctrl_enable() The "pctldev" struct is allocated in devm_pinctrl_register_and_init(). It's a devm_ managed pointer that is freed by devm_pinctrl_dev_release(), so freei

• CVE-2024-36939MedMay 30, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: nfs: Handle error of rpc_proc_register() in nfs_net_init(). syzkaller reported a warning [0] triggered while destroying immature netns. rpc_proc_register() was called in init_nfs_fs(), but its error has been i

• CVE-2024-36937MedMay 30, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: xdp: use flags field to disambiguate broadcast redirect When redirecting a packet using XDP, the bpf_redirect_map() helper will set up the redirect destination information in struct bpf_redirect_info (using the

• CVE-2024-36934HigMay 30, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: bna: ensure the copied buf is NUL terminated Currently, we allocate a nbytes-sized kernel buffer and copy nbytes from userspace to that buffer. Later, we use sscanf on this buffer but we don't ensure that the s

• CVE-2024-36919MedMay 30, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload The session resources are used by FW and driver when session is offloaded, once session is uploaded these resources are not used. The loc

• CVE-2024-36917MedMay 30, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: block: fix overflow in blk_ioctl_discard() There is no check for overflow of 'start + len' in blk_ioctl_discard(). Hung task occurs if submit an discard ioctl with the following param: start = 0x80000000000ff