suse/kernel-livepatch-SLE15-SP6-RT_Update_2&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (428)

• CVE-2024-40920HigJul 12, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state I converted br_mst_set_state to RCU to avoid a vlan use-after-free but forgot to change the vlan group dereference helper. Switch to vlan group RCU

• CVE-2024-40916MedJul 12, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found When reading EDID fails and driver reports no modes available, the DRM core adds an artificial 1024x786 mode to the connector. Unfortu

• CVE-2024-40913HigJul 12, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: cachefiles: defer exposing anon_fd until after copy_to_user() succeeds After installing the anonymous fd, we can now see it in userland and close it. However, at this point we may not have gotten the reference

• CVE-2024-40912MedJul 12, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() The ieee80211_sta_ps_deliver_wakeup() function takes sta->ps_lock to synchronizes with ieee80211_tx_h_unicast_ps_buf() which is called from soft

• CVE-2024-40911HigJul 12, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Lock wiphy in cfg80211_get_station Wiphy should be locked before calling rdev_get_station() (see lockdep assert in ieee80211_get_station()). This fixes the following kernel NULL dereference:

• CVE-2024-40910HigJul 12, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: ax25: Fix refcount imbalance on inbound connections When releasing a socket in ax25_release(), we call netdev_put() to decrease the refcount on the associated ax.25 device. However, the execution path for accep

• CVE-2024-40909HigJul 12, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a potential use-after-free in bpf_link_free() After commit 1a80dbcb2dba, bpf_link can be freed by link->ops->dealloc_deferred, but the code still tests and uses link->ops->dealloc afterward, which lead

• CVE-2024-40905MedJul 12, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible race in __fib6_drop_pcpu_from() syzbot found a race in __fib6_drop_pcpu_from() [1] If compiler reads more than once (*ppcpu_rt), second read could read NULL, if another cpu clears the value

• CVE-2024-40904MedJul 12, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages The syzbot fuzzer found that the interrupt-URB completion callback in the cdc-wdm driver was taking too long, and the driver's immediate resu

• CVE-2024-40903HigJul 12, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps There could be a potential use-after-free case in tcpm_register_source_caps(). This could happen when: * new (say invalid) source caps are

• CVE-2024-40902HigJul 12, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: jfs: xattr: fix buffer overflow for invalid xattr When an xattr size is not what is expected, it is printed out to the kernel log in hex format as a form of debugging. But when that xattr size is bigger than t

• CVE-2024-40900HigJul 12, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: cachefiles: remove requests from xarray during flushing requests Even with CACHEFILES_DEAD set, we can still read the requests, so in the following concurrency the request may be used after it has been freed:

• CVE-2024-40899HigJul 12, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd() We got the following issue in a fuzz test of randomly issuing the restore command: ==========================================================

• CVE-2024-39510HigJul 12, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read() We got the following issue in a fuzz test of randomly issuing the restore command: =====================================================

• CVE-2024-39509MedJul 12, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: HID: core: remove unnecessary WARN_ON() in implement() Syzkaller hit a warning [1] in a call to implement() when trying to write a value into a field of smaller size in an output report. Since implement() alre

• CVE-2024-39508HigJul 12, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: Use set_bit() and test_bit() at worker->flags Utilize set_bit() and test_bit() on worker->flags within io_uring/io-wq to address potential data races. The structure io_worker->flags may be acce

• CVE-2024-39506MedJul 12, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet In lio_vf_rep_copy_packet() pg_info->page is compared to a NULL value, but then it is unconditionally passed to skb_add_rx_frag() which lo

• CVE-2024-39505MedJul 12, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: drm/komeda: check for error-valued pointer komeda_pipeline_get_state() may return an error-valued pointer, thus check the pointer for negative or null value before dereferencing.

• CVE-2024-39500HigJul 12, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: sock_map: avoid race between sock_map_close and sk_psock_put sk_psock_get will return NULL if the refcount of psock has gone to 0, which will happen when the last call of sk_psock_put is done. However, sk_psock

• CVE-2024-39499HigJul 12, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: vmci: prevent speculation leaks by sanitizing event in event_deliver() Coverity spotted that event_msg is controlled by user-space, event_msg->event_data.event is passed to event_deliver() and used as an index