suse/kernel-livepatch-SLE15-SP6-RT_Update_17&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (190)

• CVE-2023-53646Oct 7, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/i915/perf: add sentinel to xehp_oa_b_counters Arrays passed to reg_in_range_table should end with empty record. The patch solves KASAN detected bug with signature: BUG: KASAN: global-out-of-bounds in xehp_

• CVE-2023-53645Oct 7, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: Make bpf_refcount_acquire fallible for non-owning refs This patch fixes an incorrect assumption made in the original bpf_refcount series [0], specifically that the BPF program calling bpf_refcount_acquire

• CVE-2023-53638Oct 7, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: octeon_ep: cancel queued works in probe error path If it fails to get the devices's MAC address, octep_probe exits while leaving the delayed work intr_poll_task queued. When the work later runs, it's a use afte

• CVE-2023-53633Oct 7, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Fix a leak in map_user_pages() If get_user_pages_fast() allocates some pages but not as many as we wanted, then the current code leaks those pages. Call put_page() on the pages before returning.

• CVE-2023-53632Oct 7, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Take RTNL lock when needed before calling xdp_set_features() Hold RTNL lock when calling xdp_set_features() with a registered netdev, as the call triggers the netdev notifiers. This could happen when

• CVE-2023-53631Oct 7, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-sysman: Fix reference leak If a duplicate attribute is found using kset_find_obj(), a reference to that attribute is returned. This means that we need to dispose it accordingly. Use kobject_p

• CVE-2023-53622Oct 7, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix possible data races in gfs2_show_options() Some fields such as gt_logd_secs of the struct gfs2_tune are accessed without holding the lock gt_spin in gfs2_show_options(): val = sdp->sd_tune.gt_logd_

• CVE-2023-53621Oct 7, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: memcontrol: ensure memcg acquired by id is properly set up In the eviction recency check, we attempt to retrieve the memcg to which the folio belonged when it was evicted, by the memcg id stored in the shadow e

• CVE-2023-53619Oct 7, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free If nf_conntrack_init_start() fails (for example due to a register_nf_conntrack_bpf() failure), the nf_conntrack_helper_fini() clean-up path frees th

• CVE-2023-53618Oct 7, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: btrfs: reject invalid reloc tree root keys with stack dump [BUG] Syzbot reported a crash that an ASSERT() got triggered inside prepare_to_merge(). That ASSERT() makes sure the reloc tree is properly pointed ba

• CVE-2023-53617Oct 7, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: socinfo: Add kfree for kstrdup Add kfree() in the later error handling in order to avoid memory leak.

• CVE-2023-53550MedOct 4, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate: fix global sysfs attribute type In commit 3666062b87ec ("cpufreq: amd-pstate: move to use bus_get_dev_root()") the "amd_pstate" attributes where moved from a dedicated kobject to the cpu ro

• CVE-2023-53540MedOct 4, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: reject auth/assoc to AP with our address If the AP uses our own address as its MLD address or BSSID, then clearly something's wrong. Reject such connections so we don't try and fail later.

• CVE-2023-53616Oct 4, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount syzbot found an invalid-free in diUnmount: BUG: KASAN: double-free in slab_free mm/slub.c:3661 [inline] BUG: KASAN: double-free in __kmem_cache_free

• CVE-2023-53615Oct 4, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix deletion race condition System crash when using debug kernel due to link list corruption. The cause of the link list corruption is due to session deletion was allowed to queue up twice. Here

• CVE-2023-53613Oct 4, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: dax: Fix dax_mapping_release() use after free A CONFIG_DEBUG_KOBJECT_RELEASE test of removing a device-dax region provider (like modprobe -r dax_hmem) yields: kobject: 'mapping0' (ffff93eb460e8800): kobject_r

• CVE-2023-53611Oct 4, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: ipmi_si: fix a memleak in try_smi_init() Kmemleak reported the following leak info in try_smi_init(): unreferenced object 0xffff00018ecf9400 (size 1024): comm "modprobe", pid 2707763, jiffies 4300851415 (age

• CVE-2023-53603Oct 4, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Avoid fcport pointer dereference Klocwork reported warning of NULL pointer may be dereferenced. The routine exits when sa_ctl is NULL and fcport is allocated after the exit call thus causing NUL

• CVE-2023-53602Oct 4, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix memory leak in WMI firmware stats Memory allocated for firmware pdev, vdev and beacon statistics are not released during rmmod. Fix it by calling ath11k_fw_stats_free() function before hardwa

• CVE-2023-53601Oct 4, 2025
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: bonding: do not assume skb mac_header is set Drivers must not assume in their ndo_start_xmit() that skbs have their mac_header set. skb->data is all what is needed. bonding seems to be one of the last offender