suse/kernel-livepatch-SLE15-SP6-RT_Update_1&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (834)

• CVE-2023-52856May 21, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: drm/bridge: lt8912b: Fix crash on bridge detach The lt8912b driver, in its bridge detach function, calls drm_connector_unregister() and drm_connector_cleanup(). drm_connector_unregister() should be called only

• CVE-2023-52855May 21, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency In _dwc2_hcd_urb_enqueue(), "urb->hcpriv = NULL" is executed without holding the lock "hsotg->lock". In _dwc2_hcd_urb_dequeue():

• CVE-2023-52854May 21, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: padata: Fix refcnt handling in padata_free_shell() In a high-load arm64 environment, the pcrypt_aead01 test in LTP can lead to system UAF (Use-After-Free) issues. Due to the lengthy analysis of the pcrypt_aead0

• CVE-2023-52853May 21, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: hid: cp2112: Fix duplicate workqueue initialization Previously the cp2112 driver called INIT_DELAYED_WORK within cp2112_gpio_irq_startup, resulting in duplicate initilizations of the workqueue on subsequent IRQ

• CVE-2023-52851May 21, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix init stage error handling to avoid double free of same QP and UAF In the unlikely event that workqueue allocation fails and returns NULL in mlx5_mkey_cache_init(), delete the call to mlx5r_umr_reso

• CVE-2023-52850May 21, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: media: hantro: Check whether reset op is defined before use The i.MX8MM/N/P does not define the .reset op since reset of the VPU is done by genpd. Check whether the .reset op is defined before calling it to avo

• CVE-2023-52849May 21, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: cxl/mem: Fix shutdown order Ira reports that removing cxl_mock_mem causes a crash with the following trace: BUG: kernel NULL pointer dereference, address: 0000000000000044 [..] RIP: 0010:cxl_region_decode_r

• CVE-2023-52847May 21, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: media: bttv: fix use after free error due to btv->timeout timer There may be some a race condition between timer function bttv_irq_timeout and bttv_remove. The timer is setup in probe and there is no timer_dele

• CVE-2023-52845May 21, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING syzbot reported the following uninit-value access issue [1]: ===================================================== BUG: KMSAN: uninit-value in

• CVE-2023-52844May 21, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: media: vidtv: psi: Add check for kstrdup Add check for the return value of kstrdup() and return the error if it fails in order to avoid NULL pointer dereference.

• CVE-2023-52843May 21, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: llc: verify mac len before reading mac header LLC reads the mac header with eth_hdr without verifying that the skb has an Ethernet header. Syzbot was able to enter llc_rcv on a tun device. Tun can insert packe

• CVE-2023-52842May 21, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt() KMSAN reported the following uninit-value access issue: ===================================================== BUG: KMSAN: uninit-value in virtio_tr

• CVE-2023-52841May 21, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: media: vidtv: mux: Add check and kfree for kstrdup Add check for the return value of kstrdup() and return the error if it fails in order to avoid NULL pointer dereference. Moreover, use kfree() in the later err

• CVE-2023-52840May 21, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() The put_device() calls rmi_release_function() which frees "fn" so the dereference on the next line "fn->num_of_irqs" is a use after free.

• CVE-2023-52838May 21, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: fbdev: imsttfb: fix a resource leak in probe I've re-written the error handling but the bug is that if init_imstt() fails we need to call iounmap(par->cmap_regs).

• CVE-2023-52837May 21, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: nbd: fix uaf in nbd_open Commit 4af5f2e03013 ("nbd: use blk_mq_alloc_disk and blk_cleanup_disk") cleans up disk by blk_cleanup_disk() and it won't set disk->private_data as NULL as before. UAF may be triggered

• CVE-2023-52836May 21, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: locking/ww_mutex/test: Fix potential workqueue corruption In some cases running with the test-ww_mutex code, I was seeing odd behavior where sometimes it seemed flush_workqueue was returning before all the work

• CVE-2023-52835May 21, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: perf/core: Bail out early if the request AUX area is out of bound When perf-record with a large AUX area, e.g 4GB, it fails with: #perf record -C 0 -m ,4G -e arm_spe_0// -- sleep 1 failed to mmap with

• CVE-2023-52834May 21, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: atl1c: Work around the DMA RX overflow issue This is based on alx driver commit 881d0327db37 ("net: alx: Work around the DMA RX overflow issue"). The alx and atl1c drivers had RX overflow error which was why a

• CVE-2023-52833May 21, 2024
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: Add date->evt_skb is NULL check fix crash because of null pointers [ 6104.969662] BUG: kernel NULL pointer dereference, address: 00000000000000c8 [ 6104.969667] #PF: supervisor read access in