suse/kernel-livepatch-SLE15-SP5_Update_25&distro=SUSE Linux Enterprise Live Patching 15 SP5

Vulnerabilities (633)

• CVE-2025-68813Jan 13, 2026
  affected < 15-150500.2.2fixed 15-150500.2.2

  In the Linux kernel, the following vulnerability has been resolved: ipvs: fix ipv4 null-ptr-deref in route error path The IPv4 code path in __ip_vs_get_out_rt() calls dst_link_failure() without ensuring skb->dev is set, leading to a NULL pointer dereference in fib_compute_spec_

• CVE-2025-71085Jan 13, 2026
  affected < 15-150500.2.2fixed 15-150500.2.2

  In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() There exists a kernel oops caused by a BUG_ON(nhead < 0) at net/core/skbuff.c:2232 in pskb_expand_head(). This bug is triggered as part of t

• CVE-2022-50697Dec 24, 2025
  affected < 15-150500.2.2fixed 15-150500.2.2

  In the Linux kernel, the following vulnerability has been resolved: mrp: introduce active flags to prevent UAF when applicant uninit The caller of del_timer_sync must prevent restarting of the timer, If we have no this synchronization, there is a small probability that the canc

• CVE-2025-68285Dec 16, 2025
  affected < 15-150500.2.2fixed 15-150500.2.2

  In the Linux kernel, the following vulnerability has been resolved: libceph: fix potential use-after-free in have_mon_and_osd_map() The wait loop in __ceph_open_session() can race with the client receiving a new monmap or osdmap shortly after the initial map is received. Both

• CVE-2025-68284Dec 16, 2025
  affected < 15-150500.2.2fixed 15-150500.2.2

  In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() The len field originates from untrusted network packets. Boundary checks have been added to prevent potential out-of-bounds writes wh

• CVE-2023-53781Dec 9, 2025
  affected < 15-150500.2.2fixed 15-150500.2.2

  In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in tcp_write_timer_handler(). With Eric's ref tracker, syzbot finally found a repro for use-after-free in tcp_write_timer_handler() by kernel TCP sockets. [0] If SMC creates a kernel so

• CVE-2025-40258Dec 4, 2025
  affected < 15-150500.2.2fixed 15-150500.2.2

  In the Linux kernel, the following vulnerability has been resolved: mptcp: fix race condition in mptcp_schedule_work() syzbot reported use-after-free in mptcp_schedule_work() [1] Issue here is that mptcp_schedule_work() schedules a work, then gets a refcount on sk->sk_refcnt i

• CVE-2023-53257Sep 15, 2025
  affected < 15-150500.2.2fixed 15-150500.2.2

  In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check S1G action frame size Before checking the action code, check that it even exists in the frame.

• CVE-2022-50252Sep 15, 2025
  affected < 9-150500.4.1fixed 9-150500.4.1

  In the Linux kernel, the following vulnerability has been resolved: igb: Do not free q_vector unless new one was allocated Avoid potential use-after-free condition under memory pressure. If the kzalloc() fails, q_vector will be freed but left in the original adapter->q_vector[v

• CVE-2025-38678Sep 3, 2025
  affected < 8-150500.2.1fixed 8-150500.2.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject duplicate device on updates A chain/flowtable update with duplicated devices in the same batch is possible. Unfortunately, netdev event path only removes the first device that is fo

• CVE-2025-38664Aug 22, 2025
  affected < 9-150500.4.1fixed 9-150500.4.1

  In the Linux kernel, the following vulnerability has been resolved: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() Add check for the return value of devm_kmemdup() to prevent potential null pointer dereference.

• CVE-2025-38644Aug 22, 2025
  affected < 8-150500.2.1fixed 8-150500.2.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject TDLS operations when station is not associated syzbot triggered a WARN in ieee80211_tdls_oper() by sending NL80211_TDLS_ENABLE_LINK immediately after NL80211_CMD_CONNECT, before associati

• CVE-2025-38618Aug 22, 2025
  affected < 9-150500.4.1fixed 9-150500.4.1

  In the Linux kernel, the following vulnerability has been resolved: vsock: Do not allow binding to VMADDR_PORT_ANY It is possible for a vsock to autobind to VMADDR_PORT_ANY. This can cause a use-after-free when a connection is made to the bound socket. The socket returned by ac

• CVE-2025-38617Aug 22, 2025
  affected < 9-150500.4.1fixed 9-150500.4.1

  In the Linux kernel, the following vulnerability has been resolved: net/packet: fix a race in packet_set_ring() and packet_notifier() When packet_set_ring() releases po->bind_lock, another thread can run packet_notifier() and process an NETDEV_UP event. This race and the fix a

• CVE-2025-38499MedAug 11, 2025
  affected < 8-150500.2.1fixed 8-150500.2.1

  In the Linux kernel, the following vulnerability has been resolved: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns What we want is to verify there is that clone won't expose something hidden by a mount we wouldn't be able to undo. "Wouldn't be

• CVE-2025-38495Jul 28, 2025
  affected < 4-150500.2.1fixed 4-150500.2.1

  In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved report ID When the report ID is not used, the low level transport drivers expect the first byte to be 0. However, currently the allocated b

• CVE-2025-38494Jul 28, 2025
  affected < 4-150500.2.1fixed 4-150500.2.1

  In the Linux kernel, the following vulnerability has been resolved: HID: core: do not bypass hid_hw_raw_request hid_hw_raw_request() is actually useful to ensure the provided buffer and length are valid. Directly calling in the low level transport driver function bypassed those

• CVE-2025-38488Jul 28, 2025
  affected < 15-150500.2.2fixed 15-150500.2.2

  In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in crypt_message when using async crypto The CVE-2024-50047 fix removed asynchronous crypto handling from crypt_message(), assuming all crypto operations are synchronous. However

• CVE-2025-38212HigJul 4, 2025
  affected < 5-150500.2.1fixed 5-150500.2.1

  In the Linux kernel, the following vulnerability has been resolved: ipc: fix to protect IPCS lookups using RCU syzbot reported that it discovered a use-after-free vulnerability, [0] [0]: https://lore.kernel.org/all/67af13f8.050a0220.21dd3.0038.GAE@google.com/ idr_for_each() i

• CVE-2025-38206Jul 4, 2025
  affected < 8-150500.2.1fixed 8-150500.2.1

  In the Linux kernel, the following vulnerability has been resolved: exfat: fix double free in delayed_free The double free could happen in the following path. exfat_create_upcase_table() exfat_create_upcase_table() : return error exfat_free_upcase_table() : fre