suse/kernel-livepatch-SLE15-SP6-RT_Update_1&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (834)

• CVE-2024-36944May 30, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: Reapply "drm/qxl: simplify qxl_fence_wait" This reverts commit 07ed11afb68d94eadd4ffc082b97c2331307c5ea. Stephen Rostedt reports: "I went to run my tests on my VMs and the tests hung on boot up. Unfortunate

• CVE-2024-36938May 30, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue Fix NULL pointer data-races in sk_psock_skb_ingress_enqueue() which syzbot reported [1]. [1] BUG: KCSAN: data-race in sk_psock_drop / sk

• CVE-2024-36937May 30, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: xdp: use flags field to disambiguate broadcast redirect When redirecting a packet using XDP, the bpf_redirect_map() helper will set up the redirect destination information in struct bpf_redirect_info (using the

• CVE-2024-36936May 30, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: efi/unaccepted: touch soft lockup during memory accept Commit 50e782a86c98 ("efi/unaccepted: Fix soft lockups caused by parallel memory acceptance") has released the spinlock so other CPUs can do memory accepta

• CVE-2024-36935May 30, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: ice: ensure the copied buf is NUL terminated Currently, we allocate a count-sized kernel buffer and copy count bytes from userspace to that buffer. Later, we use sscanf on this buffer but we don't ensure that t

• CVE-2024-36934May 30, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: bna: ensure the copied buf is NUL terminated Currently, we allocate a nbytes-sized kernel buffer and copy nbytes from userspace to that buffer. Later, we use sscanf on this buffer but we don't ensure that the s

• CVE-2024-36931May 30, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: s390/cio: Ensure the copied buf is NUL terminated Currently, we allocate a lbuf-sized kernel buffer and copy lbuf from userspace to that buffer. Later, we use scanf on this buffer but we don't ensure that the s

• CVE-2024-36930May 30, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: spi: fix null pointer dereference within spi_sync If spi_sync() is called with the non-empty queue and the same spi_message is then reused, the complete callback for the message remains set while the context is

• CVE-2024-36928May 30, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: s390/qeth: Fix kernel panic after setting hsuid Symptom: When the hsuid attribute is set for the first time on an IQD Layer3 device while the corresponding network interface is already UP, the kernel will try t

• CVE-2024-36926May 30, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE At the time of LPAR boot up, partition firmware provides Open Firmware property ibm,dma-window for the PE. This property is provided on the PCI

• CVE-2024-36924May 30, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() lpfc_worker_wake_up() calls the lpfc_work_done() routine, which takes the hbalock. Thus, lpfc_worker_wake_up() should not be called while holdin

• CVE-2024-36922May 30, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: read txq->read_ptr under lock If we read txq->read_ptr without lock, we can read the same value twice, then obtain the lock, and reclaim from there to two different places, but crucially reclaim

• CVE-2024-36921May 30, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: guard against invalid STA ID on removal Guard against invalid station IDs in iwl_mvm_mld_rm_sta_id as that would result in out-of-bounds array accesses. This prevents issues should the drive

• CVE-2024-36919May 30, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload The session resources are used by FW and driver when session is offloaded, once session is uploaded these resources are not used. The loc

• CVE-2024-36918May 30, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: Check bloom filter map value size This patch adds a missing check to bloom filter creating, rejecting values above KMALLOC_MAX_SIZE. This brings the bloom map in line with many other map types. The lack o

• CVE-2024-36917May 30, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: block: fix overflow in blk_ioctl_discard() There is no check for overflow of 'start + len' in blk_ioctl_discard(). Hung task occurs if submit an discard ioctl with the following param: start = 0x80000000000ff

• CVE-2024-36915May 30, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies syzbot reported unsafe calls to copy_from_sockptr() [1] Use copy_safe_from_sockptr() instead. [1] BUG: KASAN: slab-out-of-bounds in copy_from_sockptr_offset

• CVE-2024-36914May 30, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip on writeback when it's not applicable [WHY] dynamic memory safety error detector (KASAN) catches and generates error messages "BUG: KASAN: slab-out-of-bounds" as writeback connector does n

• CVE-2024-36913May 30, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails In CoCo VMs it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is returned

• CVE-2024-36912May 30, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl In CoCo VMs it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is returned and t