suse/kernel-livepatch-SLE15-SP6_Update_10&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (239)

• CVE-2024-57981MedFeb 27, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix NULL pointer dereference on certain command aborts If a command is queued to the final usable TRB of a ring segment, the enqueue pointer is advanced to the subsequent link TRB and no further. If

• CVE-2024-57980HigFeb 27, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix double free in error path If the uvc_status_init() function fails to allocate the int_urb, it will free the dev->status pointer but doesn't reset the pointer to NULL. This results in the kf

• CVE-2024-57979HigFeb 27, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: pps: Fix a use-after-free On a board running ntpd and gpsd, I'm seeing a consistent use-after-free in sys_exit() from gpsd when rebooting: pps pps1: removed ------------[ cut here ]------------ kob

• CVE-2024-57978MedFeb 27, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Fix potential error pointer dereference in detach_pm() The proble is on the first line: if (jpeg->pd_dev[i] && !pm_runtime_suspended(jpeg->pd_dev[i])) If jpeg->pd_dev[i] is an error pointer,

• CVE-2024-57974MedFeb 27, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: udp: Deal with race between UDP socket address change and rehash If a UDP socket changes its local address while it's receiving datagrams, as a result of connect(), there is a period during which a lookup opera

• CVE-2024-57973HigFeb 27, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: rdma/cxgb4: Prevent potential integer overflow on 32bit The "gl->tot_len" variable is controlled by the user. It comes from process_responses(). On 32bit systems, the "gl->tot_len + sizeof(struct cpl_pass_acc

• CVE-2023-52926HigFeb 24, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: IORING_OP_READ did not correctly consume the provided buffer list when read i/o returned < 0 (except for -EAGAIN and -EIOCBQUEUED return). This can lead to a potential use-after-free when the completion via io_r

• CVE-2025-21704HigFeb 22, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: usb: cdc-acm: Check control transfer buffer size before access If the first fragment is shorter than struct usb_cdc_notification, we can't calculate an expected_size. Log an error and discard the notification i

• CVE-2025-21703HigFeb 18, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() qdisc_tree_reduce_backlog() notifies parent qdisc only if child qdisc becomes empty, therefore we need to reduce the backlog of the child qdisc befor

• CVE-2025-21702HigFeb 18, 2025
  affected < 3-150600.2.1fixed 3-150600.2.1

  In the Linux kernel, the following vulnerability has been resolved: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 Expected behaviour: In case we reach scheduler's limit, pfifo_tail_enqueue() will drop a packet in scheduler's queue and decrease scheduler's qlen by one

• CVE-2025-21701HigFeb 13, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: net: avoid race between device unregistration and ethnl ops The following trace can be seen if a device is being unregistered while its number of channels are being modified. DEBUG_LOCKS_WARN_ON(lock->magic

• CVE-2025-21693HigFeb 10, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: mm: zswap: properly synchronize freeing resources during CPU hotunplug In zswap_compress() and zswap_decompress(), the per-CPU acomp_ctx of the current CPU at the beginning of the operation is retrieved and use

• CVE-2025-21671HigJan 31, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: zram: fix potential UAF of zram table If zram_meta_alloc failed early, it frees allocated zram->table without setting it NULL. Which will potentially cause zram_meta_free to access the table if user reset an f

• CVE-2024-57947CriJan 23, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_set_pipapo: fix initial map fill The initial buffer has to be inited to all-ones, but it must restrict it to the size of the first field, not the total field size. After each round in the map sea

• CVE-2025-21659HigJan 21, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: netdev: prevent accessing NAPI instances from another namespace The NAPI IDs were not fully exposed to user space prior to the netlink API, so they were never namespaced. The netlink API must ensure that at the

• CVE-2025-21635MedJan 19, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsisten

• CVE-2025-21631HigJan 19, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() Our syzkaller report a following UAF for v6.6: BUG: KASAN: slab-use-after-free in bfq_init_rq+0x175d/0x17a0 block/bfq-iosched.c:6958 Read of size 8 at addr

• CVE-2024-57900HigJan 15, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: ila: serialize calls to nf_register_net_hooks() syzbot found a race in ila_add_mapping() [1] commit 031ae72825ce ("ila: call nf_unregister_net_hooks() sooner") attempted to fix a similar issue. Looking at the

• CVE-2024-57807MedJan 11, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: megaraid_sas: Fix for a potential deadlock This fixes a 'possible circular locking dependency detected' warning CPU0 CPU1 ---- ---- lock(&instance->reset

• CVE-2024-54683MedJan 11, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: IDLETIMER: Fix for possible ABBA deadlock Deletion of the last rule referencing a given idletimer may happen at the same time as a read of its file in sysfs: | ======================================