suse/kernel-livepatch-SLE15-SP6-RT_Update_15&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (98)

• CVE-2025-38515Aug 16, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/sched: Increment job count before swapping tail spsc queue A small race exists between spsc_queue_push and the run-job worker, in which spsc_queue_push may return not-first while the run-job worker has alre

• CVE-2025-38513Aug 16, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() There is a potential NULL pointer dereference in zd_mac_tx_to_dev(). For example, the following is possible: T0 T1 zd_m

• CVE-2025-38512Aug 16, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: prevent A-MSDU attacks in mesh networks This patch is a mitigation to prevent the A-MSDU spoofing vulnerability for mesh networks. The initial update to the IEEE 802.11 standard, in response to the FragAt

• CVE-2025-38510Aug 16, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: kasan: remove kasan_find_vm_area() to prevent possible deadlock find_vm_area() couldn't be called in atomic_context. If find_vm_area() is called to reports vm area information, kasan can trigger deadlock like:

• CVE-2025-38506Aug 16, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: KVM: Allow CPU to reschedule while setting per-page memory attributes When running an SEV-SNP guest with a sufficiently large amount of memory (1TB+), the host can experience CPU soft lockups when running an op

• CVE-2025-38503Aug 16, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: btrfs: fix assertion when building free space tree When building the free space tree with the block group tree feature enabled, we can hit an assertion failure like this: BTRFS info (device loop0 state M): r

• CVE-2025-38500Aug 12, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collect_md xfrm interface collect_md property on xfrm interfaces can only be set on device creation, thus xfrmi_changelink() should fail when called on such in

• CVE-2025-38499MedAug 11, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns What we want is to verify there is that clone won't expose something hidden by a mount we wouldn't be able to undo. "Wouldn't be

• CVE-2024-58238Aug 9, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test This fixes the tx timeout issue seen while running a stress test on btnxpuart for couple of hours, such that the interval between two HCI

• CVE-2025-38491MedJul 28, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: mptcp: make fallback action and fallback decision atomic Syzkaller reported the following splat: WARNING: CPU: 1 PID: 7704 at net/mptcp/protocol.h:1223 __mptcp_do_fallback net/mptcp/protocol.h:1223 [inline]

• CVE-2025-38490Jul 28, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: net: libwx: remove duplicate page_pool_put_full_page() page_pool_put_full_page() should only be invoked when freeing Rx buffers or building a skb if the size is too short. At other times, the pages need to be r

• CVE-2025-38472Jul 28, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry A crash in conntrack was reported while trying to unlink the conntrack entry from the hash bucket list: [exception RIP: __nf_ct_delet

• CVE-2025-38464Jul 25, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipc_conn_close(). syzbot reported a null-ptr-deref in tipc_conn_close() during netns dismantle. [0] tipc_topsrv_stop() iterates tipc_net(net)->topsrv->conn_idr and calls tipc_conn_

• CVE-2025-38459Jul 25, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix infinite recursive call of clip_push(). syzbot reported the splat below. [0] This happens if we call ioctl(ATMARP_MKIP) more than once. During the first call, clip_mkip() sets clip_push() to vc

• CVE-2025-38458Jul 25, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix NULL pointer dereference in vcc_sendmsg() atmarpd_dev_ops does not implement the send method, which may cause crash as bellow. BUG: kernel NULL pointer dereference, address: 0000000000000000 PGD

• CVE-2025-38445Jul 25, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: md/raid1: Fix stack memory use after return in raid1_reshape In the raid1_reshape function, newpool is allocated on the stack and assigned to conf->r1bio_pool. This results in conf->r1bio_pool.wait.head pointin

• CVE-2025-38444Jul 25, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: raid10: cleanup memleak at raid10_make_request If raid10_read_request or raid10_write_request registers a new request and the REQ_NOWAIT flag is set, the code does not free the malloc from the mempool. unrefer

• CVE-2025-38441Jul 25, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() syzbot found a potential access to uninit-value in nf_flow_pppoe_proto() Blamed commit forgot the Ethernet header. BUG: KMSAN: uninit

• CVE-2025-38439Jul 25, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT When transmitting an XDP_REDIRECT packet, call dma_unmap_len_set() with the proper length instead of 0. This bug triggers this warning on a system with IOM

• CVE-2025-38360Jul 25, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add more checks for DSC / HUBP ONO guarantees [WHY] For non-zero DSC instances it's possible that the HUBP domain required to drive it for sequential ONO ASICs isn't met, potentially causing th