suse/kernel-livepatch-SLE15-SP6-RT_Update_15&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (98)

• CVE-2025-38670HigAug 22, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack() `cpu_switch_to()` and `call_on_irq_stack()` manipulate SP to change to different stacks along with the Shadow Call Stack if it is enabled. Those tw

• CVE-2025-38671Aug 22, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: i2c: qup: jump out of the loop in case of timeout Original logic only sets the return value but doesn't jump out of the loop if the bus is kept active by a client. This is not expected. A malicious or buggy i2c

• CVE-2025-38665Aug 22, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode Andrei Lalaev reported a NULL pointer deref when a CAN device is restarted from Bus Off and the driver does not implement t

• CVE-2025-38663Aug 22, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject invalid file types when reading inodes To prevent inodes with invalid file types from tripping through the vfs and causing malfunctions or assertion failures, add a missing sanity check when read

• CVE-2025-38656Aug 22, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() Preserve the error code if iwl_setup_deferred_work() fails. The current code returns ERR_PTR(0) (which is NULL) on this path. I believe the missing err

• CVE-2025-38650Aug 22, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: hfsplus: remove mutex_lock check in hfsplus_free_extents Syzbot reported an issue in hfsplus filesystem: ------------[ cut here ]------------ WARNING: CPU: 0 PID: 4400 at fs/hfsplus/extents.c:346 hfsplus_free

• CVE-2025-38646Aug 22, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band With a quite rare chance, RX report might be problematic to make SW think a packet is received on 6 GHz band even if the

• CVE-2025-38644Aug 22, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject TDLS operations when station is not associated syzbot triggered a WARN in ieee80211_tdls_oper() by sending NL80211_TDLS_ENABLE_LINK immediately after NL80211_CMD_CONNECT, before associati

• CVE-2025-38635Aug 22, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: clk: davinci: Add NULL check in davinci_lpsc_clk_register() devm_kasprintf() returns NULL when memory allocation fails. Currently, davinci_lpsc_clk_register() does not check for this case, which results in a NU

• CVE-2025-38634Aug 22, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-charger: Fix null check for power_supply_get_by_name In the cpcap_usb_detect() function, the power_supply_get_by_name() function may return `NULL` instead of an error pointer. To prevent po

• CVE-2025-38632Aug 22, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: pinmux: fix race causing mux_owner NULL with active mux_usecount commit 5a3e85c3c397 ("pinmux: Use sequential access to access desc->pinmux data") tried to address the issue when two client of the same gpio cal

• CVE-2025-38630Aug 22, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref fb_add_videomode() can fail with -ENOMEM when its internal kmalloc() cannot allocate a struct fb_modelist. If that happens, the modelist stays emp

• CVE-2025-38624Aug 22, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: PCI: pnv_php: Clean up allocated IRQs on unplug When the root of a nested PCIe bridge configuration is unplugged, the pnv_php driver leaked the allocated IRQ resources for the child bridges' hotplug event notif

• CVE-2025-38621Aug 22, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: md: make rdev_addable usable for rcu mode Our testcase trigger panic: BUG: kernel NULL pointer dereference, address: 00000000000000e0 ... Oops: Oops: 0000 [#1] SMP NOPTI CPU: 2 UID: 0 PID: 85 Comm: kworker/2:1

• CVE-2025-38618Aug 22, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: vsock: Do not allow binding to VMADDR_PORT_ANY It is possible for a vsock to autobind to VMADDR_PORT_ANY. This can cause a use-after-free when a connection is made to the bound socket. The socket returned by ac

• CVE-2025-38617Aug 22, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: net/packet: fix a race in packet_set_ring() and packet_notifier() When packet_set_ring() releases po->bind_lock, another thread can run packet_notifier() and process an NETDEV_UP event. This race and the fix a

• CVE-2024-58239Aug 22, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: tls: stop recv() if initial process_rx_list gave us non-DATA If we have a non-DATA record on the rx_list and another record of the same type still on the queue, we will end up merging them: - process_rx_list c

• CVE-2025-38612Aug 19, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() In the error paths after fb_info structure is successfully allocated, the memory allocated in fb_deferred_io_init() for info->pagerefs is n

• CVE-2025-38610Aug 19, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw() The get_pd_power_uw() function can crash with a NULL pointer dereference when em_cpu_get() returns NULL. This occurs when a CPU becomes impo

• CVE-2025-38609Aug 19, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Check governor before using governor->name Commit 96ffcdf239de ("PM / devfreq: Remove redundant governor_name from struct devfreq") removes governor_name and uses governor->name to replace it. But