suse/kernel-livepatch-SLE15-SP5_Update_17&distro=SUSE Linux Enterprise Live Patching 15 SP5

Vulnerabilities (563)

• CVE-2024-36017MedMay 30, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation Each attribute inside a nested IFLA_VF_VLAN_LIST is assumed to be a struct ifla_vf_vlan_info so the size of such attribute needs to be at least o

• CVE-2023-52881CriMay 29, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: tcp: do not accept ACK of bytes we never sent This patch is based on a detailed report and ideas from Yepeng Pan and Christian Rossow. ACK seq validation is currently following RFC 5961 5.2 guidelines: The

• CVE-2021-47572MedMay 24, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: net: nexthop: fix null pointer dereference when IPv6 is not enabled When we try to add an IPv6 nexthop and IPv6 is not enabled (!CONFIG_IPV6) we'll hit a NULL pointer dereference[1] in the error path of nh_crea

• CVE-2021-47571HigMay 24, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() The free_rtllib() function frees the "dev" pointer so there is use after free on the next line. Re-arrange things to avoid that.

• CVE-2021-47566HigMay 24, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: proc/vmcore: fix clearing user buffer by properly using clear_user() To clear a user buffer we cannot simply use memset, we have to use clear_user(). With a virtio-mem device that registers a vmcore_cb and has

• CVE-2021-47555HigMay 24, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: net: vlan: fix underflow for the real_dev refcnt Inject error before dev_hold(real_dev) in register_vlan_dev(), and execute the following testcase: ip link add dev dummy1 type dummy ip link add name dummy1.100

• CVE-2021-47547MedMay 24, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound In line 5001, if all id in the array 'lp->phy[8]' is not 0, when the 'for' end, the 'k' is 8. At this time, the array 'lp->phy

• CVE-2021-47546MedMay 24, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: ipv6: fix memory leak in fib6_rule_suppress The kernel leaks memory when a `fib` rule is present in IPv6 nftables firewall rules and a suppress_prefix rule is present in the IPv6 routing rules (used by certain

• CVE-2021-47539MedMay 24, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() Need to call rxrpc_put_peer() for bundle candidate before kfree() as it holds a ref to rxrpc_peer. [DH: v2: Changed to abstract out the bundle freeing code

• CVE-2021-47538MedMay 24, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() Need to call rxrpc_put_local() for peer candidate before kfree() as it holds a ref to rxrpc_local. [DH: v2: Changed to abstract the peer freeing code out into

• CVE-2021-47534MedMay 24, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/vc4: kms: Add missing drm_crtc_commit_put Commit 9ec03d7f1ed3 ("drm/vc4: kms: Wait on previous FIFO users before a commit") introduced a global state for the HVS, with each FIFO storing the current CRTC com

• CVE-2021-47517HigMay 24, 2024
  affected < 2-150500.11.6.1fixed 2-150500.11.6.1

  In the Linux kernel, the following vulnerability has been resolved: ethtool: do not perform operations on net devices being unregistered There is a short period between a net device starts to be unregistered and when it is actually gone. In that time frame ethtool operations co

• CVE-2021-47515HigMay 24, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: seg6: fix the iif in the IPv6 socket control block When an IPv4 packet is received, the ip_rcv_core(...) sets the receiving interface index into the IPv4 socket control block (v5.16-rc4, net/ipv4/ip_input.c lin

• CVE-2023-52869MedMay 21, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: pstore/platform: Add check for kstrdup Add check for the return value of kstrdup() and return the error if it fails in order to avoid NULL pointer dereference.

• CVE-2023-52863MedMay 21, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: hwmon: (axi-fan-control) Fix possible NULL pointer dereference axi_fan_control_irq_handler(), dependent on the private axi_fan_control_data structure, might be called before the hwmon device is registered. That

• CVE-2023-52857MedMay 21, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix coverity issue with unintentional integer overflow 1. Instead of multiplying 2 variable of different types. Change to assign a value of one variable and then multiply the other variable. 2. A

• CVE-2023-52846HigMay 21, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: hsr: Prevent use after free in prp_create_tagged_frame() The prp_fill_rct() function can fail. In that situation, it frees the skb and returns NULL. Meanwhile on the success path, it returns the original skb.

• CVE-2023-52845HigMay 21, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING syzbot reported the following uninit-value access issue [1]: ===================================================== BUG: KMSAN: uninit-value in

• CVE-2023-52843MedMay 21, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: llc: verify mac len before reading mac header LLC reads the mac header with eth_hdr without verifying that the skb has an Ethernet header. Syzbot was able to enter llc_rcv on a tun device. Tun can insert packe

• CVE-2023-52837HigMay 21, 2024
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: nbd: fix uaf in nbd_open Commit 4af5f2e03013 ("nbd: use blk_mq_alloc_disk and blk_cleanup_disk") cleans up disk by blk_cleanup_disk() and it won't set disk->private_data as NULL as before. UAF may be triggered