suse/kernel-livepatch-SLE15-SP5_Update_19&distro=SUSE Linux Enterprise Live Patching 15 SP5

Vulnerabilities (344)

• CVE-2024-38602Jun 19, 2024
  affected < 1-150500.11.3.2fixed 1-150500.11.3.2

  In the Linux kernel, the following vulnerability has been resolved: ax25: Fix reference count leak issues of ax25_dev The ax25_addr_ax25dev() and ax25_dev_device_down() exist a reference count leak issue of the object "ax25_dev". Memory leak issue in ax25_addr_ax25dev(): The

• CVE-2024-38554Jun 19, 2024
  affected < 1-150500.11.3.2fixed 1-150500.11.3.2

  In the Linux kernel, the following vulnerability has been resolved: ax25: Fix reference count leak issue of net_device There is a reference count leak issue of the object "net_device" in ax25_dev_device_down(). When the ax25 device is shutting down, the ax25_dev_device_down() d

• CVE-2024-36962Jun 3, 2024
  affected < 1-150500.11.3.2fixed 1-150500.11.3.2

  In the Linux kernel, the following vulnerability has been resolved: net: ks8851: Queue RX packets in IRQ handler instead of disabling BHs Currently the driver uses local_bh_disable()/local_bh_enable() in its IRQ handler to avoid triggering net_rx_action() softirq on exit from n

• CVE-2024-36929MedMay 30, 2024
  affected < 1-150500.11.3.2fixed 1-150500.11.3.2

  In the Linux kernel, the following vulnerability has been resolved: net: core: reject skb_copy(_expand) for fraglist GSO skbs SKB_GSO_FRAGLIST skbs must not be linearized, otherwise they become invalid. Return NULL if such an skb is passed to skb_copy or skb_copy_expand, in ord

• CVE-2024-36936May 30, 2024
  affected < 1-150500.11.3.2fixed 1-150500.11.3.2

  In the Linux kernel, the following vulnerability has been resolved: efi/unaccepted: touch soft lockup during memory accept Commit 50e782a86c98 ("efi/unaccepted: Fix soft lockups caused by parallel memory acceptance") has released the spinlock so other CPUs can do memory accepta

• CVE-2024-36933May 30, 2024
  affected < 1-150500.11.3.2fixed 1-150500.11.3.2

  In the Linux kernel, the following vulnerability has been resolved: nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). syzbot triggered various splats (see [0] and links) by a crafted GSO packet of VIRTIO_NET_HDR_GSO_UDP layering the following p

• CVE-2021-47546May 24, 2024
  affected < 1-150500.11.3.2fixed 1-150500.11.3.2

  In the Linux kernel, the following vulnerability has been resolved: ipv6: fix memory leak in fib6_rule_suppress The kernel leaks memory when a `fib` rule is present in IPv6 nftables firewall rules and a suppress_prefix rule is present in the IPv6 routing rules (used by certain

• CVE-2021-47517May 24, 2024
  affected < 1-150500.11.3.2fixed 1-150500.11.3.2

  In the Linux kernel, the following vulnerability has been resolved: ethtool: do not perform operations on net devices being unregistered There is a short period between a net device starts to be unregistered and when it is actually gone. In that time frame ethtool operations co

• CVE-2024-36013May 23, 2024
  affected < 1-150500.11.3.2fixed 1-150500.11.3.2

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() Extend a critical section to prevent chan from early freeing. Also make the l2cap_connect() return type void. Nothing is using the returned value but

• CVE-2023-52859May 21, 2024
  affected < 1-150500.11.3.2fixed 1-150500.11.3.2

  In the Linux kernel, the following vulnerability has been resolved: perf: hisi: Fix use-after-free when register pmu fails When we fail to register the uncore pmu, the pmu context may not been allocated. The error handing will call cpuhp_state_remove_instance() to call uncore p

• CVE-2022-48706May 21, 2024
  affected < 1-150500.11.3.2fixed 1-150500.11.3.2

  In the Linux kernel, the following vulnerability has been resolved: vdpa: ifcvf: Do proper cleanup if IFCVF init fails ifcvf_mgmt_dev leaks memory if it is not freed before returning. Call is made to correct return statement so memory does not leak. ifcvf_init_hw does not take

• CVE-2024-36009May 20, 2024
  affected < 1-150500.11.3.2fixed 1-150500.11.3.2

  In the Linux kernel, the following vulnerability has been resolved: ax25: Fix netdev refcount issue The dev_tracker is added to ax25_cb in ax25_bind(). When the ax25 device is detaching, the dev_tracker of ax25_cb should be deallocated in ax25_kill_by_device() instead of the de

• CVE-2024-35971May 20, 2024
  affected < 1-150500.11.3.2fixed 1-150500.11.3.2

  In the Linux kernel, the following vulnerability has been resolved: net: ks8851: Handle softirqs at the end of IRQ thread to fix hang The ks8851_irq() thread may call ks8851_rx_pkts() in case there are any packets in the MAC FIFO, which calls netif_rx(). This netif_rx() impleme

• CVE-2024-35945May 19, 2024
  affected < 1-150500.11.3.2fixed 1-150500.11.3.2

  In the Linux kernel, the following vulnerability has been resolved: net: phy: phy_device: Prevent nullptr exceptions on ISR If phydev->irq is set unconditionally, check for valid interrupt handler or fall back to polling mode to prevent nullptr exceptions in interrupt service r

• CVE-2024-35902MedMay 19, 2024
  affected < 1-150500.11.3.2fixed 1-150500.11.3.2

  In the Linux kernel, the following vulnerability has been resolved: net/rds: fix possible cp null dereference cp might be null, calling cp->cp_conn would produce null dereference [Simon Horman adds:] Analysis: * cp is a parameter of __rds_rdma_map and is not reassigned. * T

• CVE-2024-35897MedMay 19, 2024
  affected < 1-150500.11.3.2fixed 1-150500.11.3.2

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: discard table flag update with pending basechain deletion Hook unregistration is deferred to the commit phase, same occurs with hook updates triggered by the table dormant flag. When both

• CVE-2024-27403May 17, 2024
  affected < 1-150500.11.3.2fixed 1-150500.11.3.2

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_flow_offload: reset dst in route object after setting up flow dst is transferred to the flow object, route object does not own it anymore. Reset dst in route object, otherwise if flow_offload_ad

• CVE-2024-27024HigMay 1, 2024
  affected < 1-150500.11.3.2fixed 1-150500.11.3.2

  In the Linux kernel, the following vulnerability has been resolved: net/rds: fix WARNING in rds_conn_connect_if_down If connection isn't established yet, get_mr() will fail, trigger connection after get_mr().

• CVE-2024-27079May 1, 2024
  affected < 1-150500.11.3.2fixed 1-150500.11.3.2

  In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix NULL domain on device release In the kdump kernel, the IOMMU operates in deferred_attach mode. In this mode, info->domain may not yet be assigned by the time the release_device function is calle

• CVE-2024-27016May 1, 2024
  affected < 1-150500.11.3.2fixed 1-150500.11.3.2

  In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: validate pppoe header Ensure there is sufficient room to access the protocol field of the PPPoe header. Validate it once before the flowtable lookup, then use a helper function to access p