suse/kernel-livepatch-SLE15-SP6-RT_Update_8&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (265)

• CVE-2024-56694HigDec 28, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: fix recursive lock when verdict program return SK_PASS When the stream_verdict program returns SK_PASS, it places the received skb into its own receive queue, but a recursive lock eventually occurs, leadin

• CVE-2024-56693HigDec 28, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: brd: defer automatic disk creation until module initialization succeeds My colleague Wupeng found the following problems during fault injection: BUG: unable to handle page fault for address: fffffbfff809d073 P

• CVE-2024-56691MedDec 28, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device While design wise the idea of converting the driver to use the hierarchy of the IRQ chips is correct, the implementation has (inherited) flaws. Th

• CVE-2024-56690MedDec 28, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY Since commit 8f4f68e788c3 ("crypto: pcrypt - Fix hungtask for PADATA_RESET"), the pcrypt encryption and decryption operations

• CVE-2024-56688HigDec 28, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport Since transport->sock has been set to NULL during reset transport, XPRT_SOCK_UPD_TIMEOUT also needs to be cleared. Otherwise, the xs_tcp_set_socket_timeo

• CVE-2024-56687MedDec 28, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: usb: musb: Fix hardware lockup on first Rx endpoint request There is a possibility that a request's callback could be invoked from usb_ep_queue() (call trace below, supplemented with missing calls): req->compl

• CVE-2024-56683MedDec 28, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Avoid hang with debug registers when suspended Trying to read /sys/kernel/debug/dri/1/hdmi1_regs when the hdmi is disconnected results in a fatal system hang. This is due to the pm suspend code

• CVE-2024-56681HigDec 28, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: crypto: bcm - add error check in the ahash_hmac_init function The ahash_init functions may return fails. The ahash_hmac_init should not return ok when ahash_init returns error. For an example, ahash_init will r

• CVE-2024-56679MedDec 28, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c Add error pointer check after calling otx2_mbox_get_rsp().

• CVE-2024-56678HigDec 28, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: powerpc/mm/fault: Fix kfence page fault reporting copy_from_kernel_nofault() can be called when doing read of /proc/kcore. /proc/kcore can have some unmapped kfence objects which when read via copy_from_kernel_

• CVE-2024-56677HigDec 28, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init() During early init CMA_MIN_ALIGNMENT_BYTES can be PAGE_SIZE, since pageblock_order is still zero and it gets initialized later during ini

• CVE-2024-56675HigDec 27, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors Uprobes always use bpf_prog_run_array_uprobe() under tasks-trace-RCU protection. But it is possible to attach a non-sleepable BPF program to a uprobe

• CVE-2024-56672HigDec 27, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix UAF in blkcg_unpin_online() blkcg_unpin_online() walks up the blkcg hierarchy putting the online pin. To walk up, it uses blkcg_parent(blkcg) but it was calling that after blkcg_destroy_blkgs(bl

• CVE-2024-56670MedDec 27, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer Considering that in some extreme cases, when u_serial driver is accessed by multiple threads, Thread A is executing th

• CVE-2024-56665MedDec 27, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog Syzbot reported [1] crash that happens for following tracing scenario: - create tracepoint perf event with attr.inherit=1, attach it to t

• CVE-2024-56664HigDec 27, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix race between element replace and close() Element replace (with a socket different from the one stored) may race with socket's close() link popping & unlinking. __sock_map_delete() unconditiona

• CVE-2024-56663HigDec 27, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one Since the netlink attribute range validation provides inclusive checking, the *max* of attribute NL80211_ATTR_MLO_LINK_ID should be IEEE80211_MLD_MAX_NUM_L

• CVE-2024-56662HigDec 27, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl Fix an issue detected by syzbot with KASAN: BUG: KASAN: vmalloc-out-of-bounds in cmd_to_func drivers/acpi/nfit/ core.c:416 [inline] BUG: KASAN: vmalloc-o

• CVE-2024-56661MedDec 27, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL deref in cleanup_bearer() syzbot found [1] that after blamed commit, ub->ubsock->sk was NULL when attempting the atomic_dec() : atomic_dec(&tipc_net(sock_net(ub->ubsock->sk))->wq_count); Fix th

• CVE-2024-56660MedDec 27, 2024
  affected < 1-150600.1.3.1fixed 1-150600.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, prevent potential error pointer dereference The dr_domain_add_vport_cap() function generally returns NULL on error but sometimes we want it to return ERR_PTR(-EBUSY) so the caller can retry. The