suse/kernel-livepatch-SLE15-SP5_Update_27&distro=SUSE Linux Enterprise Live Patching 15 SP5

Vulnerabilities (218)

• CVE-2022-49793May 1, 2025
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() dev_set_name() allocates memory for name, it need be freed when device_add() fails, call put_device() to give up the reference that hold in

• CVE-2022-49792May 1, 2025
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: iio: adc: mp2629: fix potential array out of bound access Add sentinel at end of maps to avoid potential array out of bound access in iio core.

• CVE-2022-49790May 1, 2025
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: Input: iforce - invert valid length check when fetching device IDs syzbot is reporting uninitialized value at iforce_init_device() [1], for commit 6ac0aec6b0a6 ("Input: iforce - allow callers supply data buffer

• CVE-2022-49789May 1, 2025
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: zfcp: Fix double free of FSF request when qdio send fails We used to use the wrong type of integer in 'zfcp_fsf_req_send()' to cache the FSF request ID when sending a new FSF request. This is used in case

• CVE-2022-49788May 1, 2025
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() `struct vmci_event_qp` allocated by qp_notify_peer() contains padding, which may carry uninitialized data to the userspace, as observed by KMSAN

• CVE-2022-49787May 1, 2025
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() pci_get_device() will increase the reference count for the returned pci_dev. We need to use pci_dev_put() to decrease the reference count

• CVE-2022-49786May 1, 2025
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: properly pin the parent in blkcg_css_online blkcg_css_online is supposed to pin the blkcg of the parent, but 397c9f46ee4d refactored things and along the way, changed it to pin the css instead. Thi

• CVE-2022-49784May 1, 2025
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/uncore: Fix memory leak for events array When a CPU comes online, the per-CPU NB and LLC uncore contexts are freed but not the events array within the context structure. This causes a memory leak a

• CVE-2022-49783May 1, 2025
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Drop fpregs lock before inheriting FPU permissions Mike Galbraith reported the following against an old fork of preempt-rt but the same issue also applies to the current preempt-rt tree. BUG: sleep

• CVE-2022-49781May 1, 2025
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: Fix crash due to race between amd_pmu_enable_all, perf NMI and throttling amd_pmu_enable_all() does: if (!test_bit(idx, cpuc->active_mask)) continue; amd_pmu_enable_eve

• CVE-2022-49779May 1, 2025
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case In __unregister_kprobe_top(), if the currently unregistered probe has post_handler but other child probes of the aggrprobe do not have po

• CVE-2022-49777May 1, 2025
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: Input: i8042 - fix leaking of platform device on module removal Avoid resetting the module-wide i8042_platform_device pointer in i8042_probe() or i8042_remove(), so that the device can be properly destroyed by

• CVE-2022-49776May 1, 2025
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: macvlan: enforce a consistent minimal mtu macvlan should enforce a minimal mtu of 68, even at link creation. This patch avoids the current behavior (which could lead to crashes in ipv6 stack if the link is bro

• CVE-2022-49775May 1, 2025
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: tcp: cdg: allow tcp_cdg_release() to be called multiple times Apparently, mptcp is able to call tcp_disconnect() on an already disconnected flow. This is generally fine, unless current congestion control is CDG

• CVE-2022-49773May 1, 2025
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix optc2_configure warning on dcn314 [Why] dcn314 uses optc2_configure_crc() that wraps optc1_configure_crc() + set additional registers not applicable to dcn314. It's not critical but when us

• CVE-2022-49772May 1, 2025
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() snd_usbmidi_output_open() has a check of the NULL port with snd_BUG_ON(). snd_BUG_ON() was used as this shouldn't have happened, but in reality

• CVE-2022-49771May 1, 2025
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: dm ioctl: fix misbehavior if list_versions races with module loading __list_versions will first estimate the required space using the "dm_target_iterate(list_version_get_needed, &needed)" call and then will fil

• CVE-2022-49770May 1, 2025
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: ceph: avoid putting the realm twice when decoding snaps fails When decoding the snaps fails it maybe leaving the 'first_realm' and 'realm' pointing to the same snaprealm memory. And then it'll put it twice and

• CVE-2022-49769May 1, 2025
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: gfs2: Check sb_bsize_shift after reading superblock Fuzzers like to scribble over sb_bsize_shift but in reality it's very unlikely that this field would be corrupted on its own. Nevertheless it should be checke

• CVE-2022-49763May 1, 2025
  affected < 1-150500.11.7.1fixed 1-150500.11.7.1

  In the Linux kernel, the following vulnerability has been resolved: ntfs: fix use-after-free in ntfs_attr_find() Patch series "ntfs: fix bugs about Attribute", v2. This patchset fixes three bugs relative to Attribute in record: Patch 1 adds a sanity check to ensure that, attr