suse/kernel-livepatch-SLE15-SP6-RT_Update_11&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (351)

• CVE-2025-37841May 9, 2025
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: pm: cpupower: bench: Prevent NULL dereference on malloc failure If malloc returns NULL due to low memory, 'config' pointer can be NULL. Add a check to prevent NULL dereference.

• CVE-2025-37840May 9, 2025
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: brcmnand: fix PM resume warning Fixed warning on PM resume as shown below caused due to uninitialized struct nand_operation that checks chip select field : WARN_ON(op->cs >= nanddev_ntargets(&chip

• CVE-2025-37839May 9, 2025
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: jbd2: remove wrong sb->s_sequence check Journal emptiness is not determined by sb->s_sequence == 0 but rather by sb->s_start == 0 (which is set a few lines above). Furthermore 0 is a valid transaction ID so the

• CVE-2025-37836May 9, 2025
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: PCI: Fix reference leak in pci_register_host_bridge() If device_register() fails, call put_device() to give up the reference to avoid a memory leak, per the comment at device_register(). Found by code review.

• CVE-2025-37833May 8, 2025
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads Fix niu_try_msix() to not cause a fatal trap on sparc systems. Set PCI_DEV_FLAGS_MSIX_TOUCH_ENTRY_DATA_FIRST on the struct pci_dev to work

• CVE-2025-37831May 8, 2025
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() cpufreq_cpu_get_raw() can return NULL when the target CPU is not present in the policy->cpus mask. apple_soc_cpufreq_get_rate() does not ch

• CVE-2025-37830May 8, 2025
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() cpufreq_cpu_get_raw() can return NULL when the target CPU is not present in the policy->cpus mask. scmi_cpufreq_get_rate() does not check for this ca

• CVE-2025-37829May 8, 2025
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() cpufreq_cpu_get_raw() can return NULL when the target CPU is not present in the policy->cpus mask. scpi_cpufreq_get_rate() does not check for this ca

• CVE-2025-37824May 8, 2025
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL pointer dereference in tipc_mon_reinit_self() syzbot reported: tipc: Node number set to 1055423674 Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1

• CVE-2025-37823May 8, 2025
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too Similarly to the previous patch, we need to safe guard hfsc_dequeue() too. But for this one, we don't have a reliable reproducer.

• CVE-2025-37820May 8, 2025
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() The function xdp_convert_buff_to_frame() may return NULL if it fails to correctly convert the XDP buffer into an XDP frame due to memory constra

• CVE-2025-37819May 8, 2025
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() With ACPI in place, gicv2m_get_fwnode() is registered with the pci subsystem as pci_msi_get_fwnode_cb(), which may get invoked at runtime during a

• CVE-2025-37815May 8, 2025
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration Resolve kernel panic while accessing IRQ handler associated with the generated IRQ. This is done by acquiring the spinlock and storing

• CVE-2025-37812May 8, 2025
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: Fix deadlock when using NCM gadget The cdns3 driver has the same NCM deadlock as fixed in cdnsp by commit 58f2fcb3a845 ("usb: cdnsp: Fix deadlock issue during using NCM gadget"). Under PREEMPT_RT t

• CVE-2025-37810May 8, 2025
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event count does not exceed event buffer length The event count is read from register DWC3_GEVNTCOUNT. There is a check for the count being zero, but not for exceeding the event bu

• CVE-2025-37809May 8, 2025
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: usb: typec: class: Fix NULL pointer access Concurrent calls to typec_partner_unlink_device can lead to a NULL pointer dereference. This patch adds a mutex to protect USB device pointers and prevent this issue.

• CVE-2025-37805May 8, 2025
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: sound/virtio: Fix cancel_sync warnings on uninitialized work_structs Betty reported hitting the following warning: [ 8.709131][ T221] WARNING: CPU: 2 PID: 221 at kernel/workqueue.c:4182 ... [ 8.713282][

• CVE-2025-37803May 8, 2025
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix a buf size overflow issue during udmabuf creation by casting size_limit_mb to u64 when calculate pglimit.

• CVE-2024-58237May 5, 2025
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: bpf: consider that tail calls invalidate packet pointers Tail-called programs could execute any of the helpers that invalidate packet pointers. Hence, conservatively assume that each tail call invalidates packe

• CVE-2024-58100May 5, 2025
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: bpf: check changes_pkt_data property for extension programs When processing calls to global sub-programs, verifier decides whether to invalidate all packet pointers in current state depending on the changes_pkt