suse/kernel-livepatch-SLE15-SP6-RT_Update_9&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (80)

• CVE-2024-53147Dec 24, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: exfat: fix out-of-bounds access of directory entries In the case of the directory size is greater than or equal to the cluster size, if start_clu becomes an EOF cluster(an invalid cluster) due to file system co

• CVE-2024-53123Dec 2, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: mptcp: error out earlier on disconnect Eric reported a division by zero splat in the MPTCP protocol: Oops: divide error: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 1 UID: 0 PID: 6094 Comm: syz-executor317 Not tainte

• CVE-2024-50294Nov 19, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix missing locking causing hanging calls If a call gets aborted (e.g. because kafs saw a signal) between it being queued for connection and the I/O thread picking up the call, the abort will be prioriti

• CVE-2024-50185Nov 8, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: mptcp: handle consistently DSS corruption Bugged peer implementation can send corrupted DSS options, consistently hitting a few warning in the data path. Use DEBUG_NET assertions, to avoid the splat on some bui

• CVE-2024-50142MedNov 7, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: xfrm: validate new SA's prefixlen using SA family when sel.family is unset This expands the validation introduced in commit 07bf7908950a ("xfrm: Validate address prefix lengths in the xfrm selector.") syzbot c

• CVE-2024-50115Nov 5, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory Ignore nCR3[4:0] when loading PDPTEs from memory for nested SVM, as bits 4:0 of CR3 are ignored when PAE paging is used, and thus VMRUN doesn't enforc

• CVE-2024-50085Oct 29, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow Syzkaller reported this splat: ================================================================== BUG: KASAN: slab-use-after-free in mptcp_pm_nl_rm

• CVE-2024-50073Oct 29, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: Fix use-after-free in gsm_cleanup_mux BUG: KASAN: slab-use-after-free in gsm_cleanup_mux+0x77b/0x7b0 drivers/tty/n_gsm.c:3160 [n_gsm] Read of size 8 at addr ffff88815fe99c00 by task poc/3379 CPU: 0

• CVE-2024-50036Oct 21, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: net: do not delay dst_entries_add() in dst_release() dst_entries_add() uses per-cpu data that might be freed at netns dismantle from ip6_route_net_exit() calling dst_entries_destroy() Before ip6_route_net_exit

• CVE-2024-50029Oct 21, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync This checks if the ACL connection remains valid as it could be destroyed while hci_enhanced_setup_sync is pending on cmd_sync leading to the following tra

• CVE-2024-49884HigOct 21, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix slab-use-after-free in ext4_split_extent_at() We hit the following use-after-free: ================================================================== BUG: KASAN: slab-use-after-free in ext4_split_ext

• CVE-2024-49950Oct 21, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix uaf in l2cap_connect [Syzbot reported] BUG: KASAN: slab-use-after-free in l2cap_connect.constprop.0+0x10d8/0x1270 net/bluetooth/l2cap_core.c:3949 Read of size 8 at addr ffff8880241e9800 by

• CVE-2024-47701HigOct 21, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: ext4: avoid OOB when system.data xattr changes underneath the filesystem When looking up for an entry in an inlined directory, if e_value_offs is changed underneath the filesystem by some change in the block de

• CVE-2024-45010Sep 11, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only mark 'subflow' endp as available Adding the following warning ... WARN_ON_ONCE(msk->pm.local_addr_used == 0) ... before decrementing the local_addr_used counter helped to find a bug when run

• CVE-2024-45009Sep 11, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only decrement add_addr_accepted for MPJ req Adding the following warning ... WARN_ON_ONCE(msk->pm.add_addr_accepted == 0) ... before decrementing the add_addr_accepted counter helped to find a b

• CVE-2024-44974HigSep 4, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: avoid possible UaF when selecting endp select_local_address() and select_signal_address() both select an endpoint entry from the list inside an RCU protected section, but return a reference to it, to

• CVE-2024-41055Jul 29, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: mm: prevent derefencing NULL ptr in pfn_section_valid() Commit 5ec8e8ea8b77 ("mm/sparsemem: fix race in accessing memory_section->usage") changed pfn_section_valid() to add a READ_ONCE() call around "ms->usage"

• CVE-2024-40980MedJul 12, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: drop_monitor: replace spin_lock by raw_spin_lock trace_drop_common() is called with preemption disabled, and it acquires a spin_lock. This is problematic for RT kernels because spin_locks are sleeping locks in

• CVE-2024-26810MedApr 5, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Lock external INTx masking ops Mask operations through config space changes to DisINTx may race INTx configuration changes via ioctl. Create wrappers that add locking for paths outside of the core in

• CVE-2024-26708Apr 3, 2024
  affected < 1-150600.1.3.2fixed 1-150600.1.3.2

  In the Linux kernel, the following vulnerability has been resolved: mptcp: really cope with fastopen race Fastopen and PM-trigger subflow shutdown can race, as reported by syzkaller. In my first attempt to close such race, I missed the fact that the subflow status can change a