suse/kernel-livepatch-SLE15-SP6_Update_1&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (425)

• CVE-2024-35796MedMay 17, 2024
  affected < 1-150600.13.3.7fixed 1-150600.13.3.7

  In the Linux kernel, the following vulnerability has been resolved: net: ll_temac: platform_get_resource replaced by wrong function The function platform_get_resource was replaced with devm_platform_ioremap_resource_byname and is called using 0 as name. This eventually ends up

• CVE-2024-35795MedMay 17, 2024
  affected < 1-150600.13.3.7fixed 1-150600.13.3.7

  In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix deadlock while reading mqd from debugfs An errant disk backup on my desktop got into debugfs and triggered the following deadlock scenario in the amdgpu debugfs files. The machine also hard-rese

• CVE-2023-52673MedMay 17, 2024
  affected < 1-150600.13.3.7fixed 1-150600.13.3.7

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix a debugfs null pointer error [WHY & HOW] Check whether get_subvp_en() callback exists before calling it.

• CVE-2023-52671MedMay 17, 2024
  affected < 1-150600.13.3.7fixed 1-150600.13.3.7

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix hang/underflow when transitioning to ODM4:1 [Why] Under some circumstances, disabling an OPTC and attempting to reclaim its OPP(s) for a different OPTC could cause a hang/underflow due to O

• CVE-2023-52670MedMay 17, 2024
  affected < 1-150600.13.3.7fixed 1-150600.13.3.7

  In the Linux kernel, the following vulnerability has been resolved: rpmsg: virtio: Free driver_override when rpmsg_remove() Free driver_override when rpmsg_remove(), otherwise the following memory leak will occur: unreferenced object 0xffff0000d55d7080 (size 128): comm "kwor

• CVE-2023-52669HigMay 17, 2024
  affected < 1-150600.13.3.7fixed 1-150600.13.3.7

  In the Linux kernel, the following vulnerability has been resolved: crypto: s390/aes - Fix buffer overread in CTR mode When processing the last block, the s390 ctr code will always read a whole block, even if there isn't a whole block of data left. Fix this by using the actual

• CVE-2023-52667HigMay 17, 2024
  affected < 1-150600.13.3.7fixed 1-150600.13.3.7

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix a potential double-free in fs_any_create_groups When kcalloc() for ft->g succeeds but kvzalloc() for in fails, fs_any_create_groups() will free ft->g. However, its caller fs_any_create_table() wi

• CVE-2023-52664HigMay 17, 2024
  affected < 1-150600.13.3.7fixed 1-150600.13.3.7

  In the Linux kernel, the following vulnerability has been resolved: net: atlantic: eliminate double free in error handling logic Driver has a logic leak in ring data allocation/free, where aq_ring_free could be called multiple times on same ring, if system is under stress and g

• CVE-2023-52663MedMay 17, 2024
  affected < 1-150600.13.3.7fixed 1-150600.13.3.7

  In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe() Driver uses kasprintf() to initialize fw_{code,data}_bin members of struct acp_dev_data, but kfree() is never called to deallocate the memory, which result

• CVE-2023-52662HigMay 17, 2024
  affected < 1-150600.13.3.7fixed 1-150600.13.3.7

  In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node When ida_alloc_max fails, resources allocated before should be freed, including *res allocated by kmalloc and ttm_resource_init.

• CVE-2023-52661MedMay 17, 2024
  affected < 1-150600.13.3.7fixed 1-150600.13.3.7

  In the Linux kernel, the following vulnerability has been resolved: drm/tegra: rgb: Fix missing clk_put() in the error handling paths of tegra_dc_rgb_probe() If clk_get_sys(..., "pll_d2_out0") fails, the clk_get_sys() call must be undone. Add the missing clk_put and a new 'put

• CVE-2024-35794MedMay 17, 2024
  affected < 1-150600.13.3.7fixed 1-150600.13.3.7

  In the Linux kernel, the following vulnerability has been resolved: dm-raid: really frozen sync_thread during suspend 1) commit f52f5c71f3d4 ("md: fix stopping sync thread") remove MD_RECOVERY_FROZEN from __md_stop_writes() and doesn't realize that dm-raid relies on __md_

• CVE-2024-35791HigMay 17, 2024
  affected < 1-150600.13.3.7fixed 1-150600.13.3.7

  In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() Do the cache flush of converted pages in svm_register_enc_region() before dropping kvm->lock to fix use-after-free issues where regi

• CVE-2024-35790MedMay 17, 2024
  affected < 1-150600.13.3.7fixed 1-150600.13.3.7

  In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group The DisplayPort driver's sysfs nodes may be present to the userspace before typec_altmode_set_drvdata() completes

• CVE-2024-35789HigMay 17, 2024
  affected < 1-150600.13.3.7fixed 1-150600.13.3.7

  In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes When moving a station out of a VLAN and deleting the VLAN afterwards, the fast_rx entry still holds a pointer to the VLAN's netdev, which can c

• CVE-2024-35786MedMay 17, 2024
  affected < 1-150600.13.3.7fixed 1-150600.13.3.7

  In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix stale locked mutex in nouveau_gem_ioctl_pushbuf If VM_BIND is enabled on the client the legacy submission ioctl can't be used, however if a client tries to do so regardless it will return an er

• CVE-2024-35784MedMay 17, 2024
  affected < 1-150600.13.3.7fixed 1-150600.13.3.7

  In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock with fiemap and extent locking While working on the patchset to remove extent locking I got a lockdep splat with fiemap and pagefaulting with my new extent lock replacement lock. This deadl

• CVE-2024-27436MedMay 17, 2024
  affected < 1-150600.13.3.7fixed 1-150600.13.3.7

  In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Stop parsing channels bits when all channels are found. If a usb audio device sets more bits than the amount of channels it could write outside of the map array.

• CVE-2024-27435HigMay 17, 2024
  affected < 1-150600.13.3.7fixed 1-150600.13.3.7

  In the Linux kernel, the following vulnerability has been resolved: nvme: fix reconnection fail due to reserved tag allocation We found a issue on production environment while using NVMe over RDMA, admin_q reconnect failed forever while remote target and network is ok. After di

• CVE-2024-27434HigMay 17, 2024
  affected < 1-150600.13.3.7fixed 1-150600.13.3.7

  In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK The firmware doesn't need the MFP flag for the GTK, it can even make the firmware crash. in case the AP is configured with: group cipher TKIP and MFPC. We