suse/kernel-livepatch-SLE15-SP6-RT_Update_5&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (323)

• CVE-2024-50008MedOct 21, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() Replace one-element array with a flexible-array member in `struct host_cmd_ds_802_11_scan_ext`. With this, fix the foll

• CVE-2024-50007HigOct 21, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access ASIHPI driver stores some values in the static array upon a response from the driver, and its index depends on the firmware. We shouldn't trust it blindly. This pa

• CVE-2024-50002MedOct 21, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: static_call: Handle module init failure correctly in static_call_del_module() Module insertion invokes static_call_add_module() to initialize the static calls in a module. static_call_add_module() invokes __sta

• CVE-2024-50001HigOct 21, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix error path in multi-packet WQE transmit Remove the erroneous unmap in case no DMA mapping was established The multi-packet WQE transmit code attempts to obtain a DMA mapping for the skb. This cou

• CVE-2024-50000MedOct 21, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() In mlx5e_tir_builder_alloc() kvzalloc() may return NULL which is dereferenced on the next line in a reference to the modify field. Found by Linux Verifica

• CVE-2024-49996CriOct 21, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: cifs: Fix buffer overflow when parsing NFS reparse points ReparseDataLength is sum of the InodeType size and DataBuffer size. So to get DataBuffer size it is needed to subtract InodeType's size from ReparseData

• CVE-2024-49991HigOct 21, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer Pass pointer reference to amdgpu_bo_unref to clear the correct pointer, otherwise amdgpu_bo_unref clear the local variable, the original pointer not set

• CVE-2024-49986HigOct 21, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors x86_android_tablet_remove() frees the pdevs[] array, so it should not be used after calling x86_android_tablet_remove()

• CVE-2024-49985MedOct 21, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume In case there is any sort of clock controller attached to this I2C bus controller, for example Versaclock or even an AIC32x4 I2C codec,

• CVE-2024-49982HigOct 21, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in more places For fixing CVE-2023-6270, f98364e92662 ("aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts") makes tx() calling dev_put() instead of d

• CVE-2024-49981HigOct 21, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: media: venus: fix use after free bug in venus_remove due to race condition in venus_probe, core->work is bound with venus_sys_error_handler, which is used to handle error. The code use core->sys_err_done to mak

• CVE-2024-49974MedOct 21, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: NFSD: Limit the number of concurrent async COPY operations Nothing appears to limit the number of concurrent async COPY operations that clients can start. In addition, AFAICT each async COPY can copy an unlimit

• CVE-2024-49973HigOct 21, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: r8169: add tally counter fields added with RTL8125 RTL8125 added fields to the tally counter, what may result in the chip dma'ing these new fields to unallocated memory. Therefore make sure that the allocated m

• CVE-2024-49972MedOct 21, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Deallocate DML memory if allocation fails [Why] When DC state create DML memory allocation fails, memory is not deallocated subsequently, resulting in uninitialized structure that is not NULL.

• CVE-2024-49969HigOct 21, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in DCN30 color transformation This commit addresses a potential index out of bounds issue in the `cm3_helper_translate_curve_to_hw_format` function in the DCN30 color ma

• CVE-2024-49966HigOct 21, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: cancel dqi_sync_work before freeing oinfo ocfs2_global_read_info() will initialize and schedule dqi_sync_work at the end, if error occurs after successfully reading global quota, it will trigger the foll

• CVE-2024-49965HigOct 21, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: remove unreasonable unlock in ocfs2_read_blocks Patch series "Misc fixes for ocfs2_read_blocks", v5. This series contains 2 fixes for ocfs2_read_blocks(). The first patch fix the issue reported by syzb

• CVE-2024-49963MedOct 21, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: mailbox: bcm2835: Fix timeout during suspend mode During noirq suspend phase the Raspberry Pi power driver suffer of firmware property timeouts. The reason is that the IRQ of the underlying BCM2835 mailbox is d

• CVE-2024-49962MedOct 21, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() ACPICA commit 4d4547cf13cca820ff7e0f859ba83e1a610b9fd0 ACPI_ALLOCATE_ZEROED() may fail, elements might be NULL and will cause

• CVE-2024-49961MedOct 21, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: media: i2c: ar0521: Use cansleep version of gpiod_set_value() If we use GPIO reset from I2C port expander, we must use *_cansleep() variant of GPIO functions. This was not done in ar0521_power_on()/ar0521_power