suse/kernel-livepatch-SLE15-SP6-RT_Update_2&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (428)

• CVE-2024-39497Jul 12, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE) Lack of check for copy-on-write (COW) mapping in drm_gem_shmem_mmap allows users to call mmap with PROT_WRITE and MAP_PRIVATE flag causing a kerne

• CVE-2024-39493MedJul 10, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak Using completion_done to determine whether the caller has gone away only works after a complete call. Furthermore it's still possible that the caller has not ye

• CVE-2024-39489MedJul 10, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix memleak in seg6_hmac_init_algo seg6_hmac_init_algo returns without cleaning up the previous allocations if one fails, so it's going to leak all that memory and the crypto tfms. Update seg6_hmac_e

• CVE-2024-39491Jul 10, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l56: Fix lifetime of cs_dsp instance The cs_dsp instance is initialized in the driver probe() so it should be freed in the driver remove(). Also fix a missing call to cs_dsp_remove() in the error

• CVE-2024-39488Jul 10, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY When CONFIG_DEBUG_BUGVERBOSE=n, we fail to add necessary padding bytes to bug_table entries, and as a result the last entry in a bug table will be ignored,

• CVE-2024-39486Jul 6, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: drm/drm_file: Fix pid refcounting race <maarten.lankhorst@linux.intel.com>, Maxime Ripard <mripard@kernel.org>, Thomas Zimmermann <tzimmermann@suse.de> filp->pid is supposed to be a refcounted pointer; however

• CVE-2024-39484Jul 5, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: mmc: davinci: Don't strip remove function when driver is builtin Using __exit for the remove function results in the remove callback being discarded with CONFIG_MMC_DAVINCI=y. When such a device gets unbound (e

• CVE-2024-39483Jul 5, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked When requesting an NMI window, WARN on vNMI support being enabled if and only if NMIs are actually masked, i.e. if the vCPU is already handling a

• CVE-2024-39476Jul 5, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING Xiao reported that lvm2 test lvconvert-raid-takeover.sh can hang with small possibility, the root cause is exactly the same as

• CVE-2024-38662MedJun 21, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: bpf: Allow delete from sockmap/sockhash only if update is allowed We have seen an influx of syzkaller reports where a BPF program attached to a tracepoint triggers a locking rule violation by performing a map_d

• CVE-2024-36288MedJun 21, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix loop termination condition in gss_free_in_token_pages() The in_token->pages[] array is not NULL terminated. This results in the following KASAN splat: KASAN: maybe wild-memory-access in range [0x

• CVE-2024-36489MedJun 21, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: tls: fix missing memory barrier in tls_init In tls_init(), a write memory barrier is missing, and store-store reordering may cause NULL dereference in tls_{setsockopt,getsockopt}. CPU0

• CVE-2024-36286MedJun 21, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() syzbot reported that nf_reinject() could be called without rcu_read_lock() : WARNING: suspicious RCU usage 6.9.0-rc7-syzkaller-0206

• CVE-2024-36270MedJun 21, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: netfilter: tproxy: bail out if IP has been disabled on the device syzbot reports: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr

• CVE-2024-31076Jun 21, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline The absence of IRQD_MOVE_PCNTXT prevents immediate effectiveness of interrupt affinity reconfiguration via procfs. Instead, the change is de

• CVE-2024-38609Jun 19, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: connac: check for null before dereferencing The wcid can be NULL. It should be checked for validity before dereferencing it to avoid crash.

• CVE-2024-38563Jun 19, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix potential memory leakage when reading chip temperature Without this commit, reading chip temperature will cause memory leakage.

• CVE-2024-38548Jun 19, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference In cdns_mhdp_atomic_enable(), the return value of drm_mode_duplicate() is assigned to mhdp_state->current_mode, and there is a dereference of it

• CVE-2024-36979Jun 19, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: fix vlan use-after-free syzbot reported a suspicious rcu usage[1] in bridge's mst code. While fixing it I noticed that nothing prevents a vlan to be freed while walking the list from the same

• CVE-2024-36970Jun 8, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: Use request_module_nowait This appears to work around a deadlock regression that came in with the LED merge in 6.9. The deadlock happens on my system with 24 iwlwifi radios, so maybe it somethin