suse/kernel-livepatch-SLE15-SP5_Update_32&distro=SUSE Linux Enterprise Live Patching 15 SP5

Vulnerabilities (197)

• CVE-2023-53675HigOct 7, 2025
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix possible desc_ptr out-of-bounds accesses Sanitize possible desc_ptr out-of-bounds accesses in ses_enclosure_data_process().

• CVE-2023-53674HigOct 7, 2025
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: clk: Fix memory leak in devm_clk_notifier_register() devm_clk_notifier_register() allocates a devres resource for clk notifier but didn't register that to the device, so the notifier didn't get unregistered on

• CVE-2023-53673HigOct 7, 2025
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: call disconnect callback before deleting conn In hci_cs_disconnect, we do hci_conn_del even if disconnection failed. ISO, L2CAP and SCO connections refer to the hci_conn without hci_conn_

• CVE-2023-53670MedOct 7, 2025
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: nvme-core: fix dev_pm_qos memleak Call dev_pm_qos_hide_latency_tolerance() in the error unwind patch to avoid following kmemleak:- blktests (master) # kmemleak-clear; ./check nvme/044; blktests (master) # kmem

• CVE-2023-53668HigOct 7, 2025
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix deadloop issue on reading trace_pipe Soft lockup occurs when reading file 'trace_pipe': watchdog: BUG: soft lockup - CPU#6 stuck for 22s! [cat:4488] [...] RIP: 0010:ring_buffer_empty_cpu

• CVE-2023-53667MedOct 7, 2025
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize Currently in cdc_ncm_check_tx_max(), if dwNtbOutMaxSize is lower than the calculated "min" value, but greater than zero, the logic sets tx_max to dwNtbO

• CVE-2023-53662MedOct 7, 2025
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} If the filename casefolding fails, we'll be leaking memory from the fscrypt_name struct, namely from the 'crypto_buf.name' member. Make sure

• CVE-2023-53659HigOct 7, 2025
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: iavf: Fix out-of-bounds when setting channels on remove If we set channels greater during iavf_remove(), and waiting reset done would be timeout, then returned with error but changed num_active_queues directly,

• CVE-2023-53658MedOct 7, 2025
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: spi: bcm-qspi: return error if neither hif_mspi nor mspi is available If neither a "hif_mspi" nor "mspi" resource is present, the driver will just early exit in probe but still return success. Apart from not do

• CVE-2023-53651HigOct 7, 2025
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: Input: exc3000 - properly stop timer on shutdown We need to stop the timer on driver unbind or probe failures, otherwise we get UAF/Oops.

• CVE-2023-53650MedOct 7, 2025
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() If 'mipid_detect()' fails, we must free 'md' to avoid a memory leak.

• CVE-2023-53648MedOct 7, 2025
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer smatch error: sound/pci/ac97/ac97_codec.c:2354 snd_ac97_mixer() error: we previously assumed 'rac97' could be null (see line 2072) remove redundant a

• CVE-2023-53644MedOct 7, 2025
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: media: radio-shark: Add endpoint checks The syzbot fuzzer was able to provoke a WARNING from the radio-shark2 driver: ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 1 != type 3 WARNING: CPU

• CVE-2023-53641MedOct 7, 2025
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: hif_usb: fix memory leak of remain_skbs hif_dev->remain_skb is allocated and used exclusively in ath9k_hif_usb_rx_stream(). It is implied that an allocated remain_skb is processed and subsequently

• CVE-2023-53640HigOct 7, 2025
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: ASoC: lpass: Fix for KASAN use_after_free out of bounds When we run syzkaller we get below Out of Bounds error. "KASAN: slab-out-of-bounds Read in regcache_flat_read" Below is the backtrace of the issue: BUG

• CVE-2023-53639MedOct 7, 2025
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: reduce WARN to dev_dbg() in callback The warn is triggered on a known race condition, documented in the code above the test, that is correctly handled. Using WARN() hinders automated testing. Red

• CVE-2023-53637MedOct 7, 2025
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov772x: Fix memleak in ov772x_probe() A memory leak was reported when testing ov772x with bpf mock device: AssertionError: unreferenced object 0xffff888109afa7a8 (size 8): comm "python3", pid 279

• CVE-2023-53631MedOct 7, 2025
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-sysman: Fix reference leak If a duplicate attribute is found using kset_find_obj(), a reference to that attribute is returned. This means that we need to dispose it accordingly. Use kobject_p

• CVE-2023-53626HigOct 7, 2025
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix possible double unlock when moving a directory

• CVE-2023-53625MedOct 7, 2025
  affected < 1-150500.11.3.1fixed 1-150500.11.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/i915/gvt: fix vgpu debugfs clean in remove Check carefully on root debugfs available when destroying vgpu, e.g in remove case drm minor's debugfs root might already be destroyed, which led to kernel oops li