suse/kernel-livepatch-SLE15-SP6-RT_Update_13&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (109)

• CVE-2025-37945MedMay 20, 2025
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY DSA has 2 kinds of drivers: 1. Those who call dsa_switch_suspend() and dsa_switch_resume() from their device PM ops: qc

• CVE-2025-37961May 20, 2025
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: ipvs: fix uninit-value for saddr in do_output_route4 syzbot reports for uninit-value for the saddr argument [1]. commit 4754957f04f5 ("ipvs: do not use random local source address for tunnels") already implies

• CVE-2025-37946May 20, 2025
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs With commit bcb5d6c76903 ("s390/pci: introduce lock to synchronize state of zpci_dev's") the code to ignore power off of a PF that h

• CVE-2025-37938May 20, 2025
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: tracing: Verify event formats that have "%*p.." The trace event verifier checks the formats of trace events to make sure that they do not point at memory that is not in the trace event itself or in data that wi

• CVE-2025-37936May 20, 2025
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value. When generating the MSR_IA32_PEBS_ENABLE value that will be loaded on VM-Entry to a KVM guest, mask the value with the vCPU's desired PE

• CVE-2025-37933May 20, 2025
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: octeon_ep: Fix host hang issue during device reboot When the host loses heartbeat messages from the device, the driver calls the device-specific ndo_stop function, which frees the resources. If the driver is un

• CVE-2025-37927May 20, 2025
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid There is a string parsing logic error which can lead to an overflow of hid or uid buffers. Comparing ACPIID_LEN against a total string length doesn

• CVE-2025-37923May 20, 2025
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: tracing: Fix oob write in trace_seq_to_buffer() syzbot reported this bug: ================================================================== BUG: KASAN: slab-out-of-bounds in trace_seq_to_buffer kernel/trace/tr

• CVE-2025-37921May 20, 2025
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: vxlan: vnifilter: Fix unlocked deletion of default FDB entry When a VNI is deleted from a VXLAN device in 'vnifilter' mode, the FDB entry associated with the default remote (assuming one was configured) is dele

• CVE-2025-37917May 20, 2025
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll Use spin_lock_irqsave and spin_unlock_irqrestore instead of spin_lock and spin_unlock in mtk_star_emac driver to avoid spinlock recursio

• CVE-2025-37909May 20, 2025
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Fix memleak issue when GSO enabled Always map the `skb` to the LS descriptor. Previously skb was mapped to EXT descriptor when the number of fragments is zero with GSO enabled. Mapping the skb to

• CVE-2025-37884May 9, 2025
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: Fix deadlock between rcu_tasks_trace and event_mutex. Fix the following deadlock: CPU A _free_event() perf_kprobe_destroy() mutex_lock(&event_mutex) perf_trace_event_unreg() synchronize

• CVE-2025-37874May 9, 2025
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: net: ngbe: fix memory leak in ngbe_probe() error path When ngbe_sw_init() is called, memory is allocated for wx->rss_key in wx_init_rss_key(). However, in ngbe_probe() function, the subsequent error paths after

• CVE-2025-37865May 9, 2025
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported Russell King reports that on the ZII dev rev B, deleting a bridge VLAN from a user port fails with -ENOENT: https://lore.kernel.org/ne

• CVE-2025-37862May 9, 2025
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: HID: pidff: Fix null pointer dereference in pidff_find_fields This function triggered a null pointer dereference if used to search for a report that isn't implemented on the device. This happened both for optio

• CVE-2025-37859May 9, 2025
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: page_pool: avoid infinite loop to schedule delayed worker We noticed the kworker in page_pool_release_retry() was waken up repeatedly and infinitely in production because of the buggy driver causing the infligh

• CVE-2025-37844May 9, 2025
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: cifs: avoid NULL pointer dereference in dbg call cifs_server_dbg() implies server to be non-NULL so move call under condition to avoid NULL pointer dereference. Found by Linux Verification Center (linuxtesting

• CVE-2025-37811May 8, 2025
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: ci_hdrc_imx: fix usbmisc handling usbmisc is an optional device property so it is totally valid for the corresponding data->usbmisc_data to have a NULL value. Check that before dereferencing the

• CVE-2025-37801May 8, 2025
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: spi: spi-imx: Add check for spi_imx_setupxfer() Add check for the return value of spi_imx_setupxfer(). spi_imx->rx and spi_imx->tx function pointer can be NULL when spi_imx_setupxfer() return error, and make NU

• CVE-2025-37800May 8, 2025
  affected < 1-150600.1.5.1fixed 1-150600.1.5.1

  In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential NULL pointer dereference in dev_uevent() If userspace reads "uevent" device attribute at the same time as another threads unbinds the device from its driver, change to dev->driver fro