suse/kernel-livepatch-SLE15-SP6_Update_10&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (239)

• CVE-2024-58006CriFeb 27, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() In commit 4284c88fff0e ("PCI: designware-ep: Allow pci_epc_set_bar() update inbound map address") set_bar() was modified to support dynamically

• CVE-2024-58005MedFeb 27, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: tpm: Change to kvalloc() in eventlog/acpi.c The following failure was reported on HPE ProLiant D320: [ 10.693310][ T1] tpm_tis STM0925:00: 2.0 TPM (device-id 0x3, rev-id 0) [ 10.848132][ T1] --------

• CVE-2024-58002HigFeb 27, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Remove dangling pointers When an async control is written, we copy a pointer to the file handle that started the operation. That pointer will be used when the device is done. Which could be any

• CVE-2024-57834MedFeb 27, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread syzbot report a null-ptr-deref in vidtv_mux_stop_thread. [1] If dvb->mux is not initialized successfully by vidtv_mux_init() in the vidtv_start_strea

• CVE-2024-52559HigFeb 27, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit() The "submit->cmd[i].size" and "submit->cmd[i].offset" variables are u32 values that come from the user via the submit_lookup_cmds() function. This

• CVE-2025-21731HigFeb 27, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: nbd: don't allow reconnect after disconnect Following process can cause nbd_config UAF: 1) grab nbd_config temporarily; 2) nbd_genl_disconnect() flush all recv_work() and release the initial reference: nbd

• CVE-2025-21727HigFeb 27, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: padata: fix UAF in padata_reorder A bug was found when run ltp test: BUG: KASAN: slab-use-after-free in padata_find_next+0x29/0x1a0 Read of size 4 at addr ffff88bbfe003524 by task kworker/u113:2/3039206 CPU:

• CVE-2025-21726HigFeb 27, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: padata: avoid UAF for reorder_work Although the previous patch can avoid ps and ps UAF for _do_serial, it can not avoid potential UAF issue for reorder_work. This issue can happen just as below: crypto_request

• CVE-2025-21723MedFeb 27, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix possible crash when setting up bsg fails If bsg_setup_queue() fails, the bsg_queue is assigned a non-NULL value. Consequently, in mpi3mr_bsg_exit(), the condition "if(!mrioc->bsg_queue)" will

• CVE-2025-21718HigFeb 27, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: net: rose: fix timer races against user threads Rose timers only acquire the socket spinlock, without checking if the socket is owned by one user thread. Add a check and rearm the timers if needed. BUG: KASAN

• CVE-2025-21714HigFeb 27, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix implicit ODP use after free Prevent double queueing of implicit ODP mr destroy work by using __xa_cmpxchg() to make sure this is the only time we are destroying this specific mr. Without this ch

• CVE-2025-21711MedFeb 27, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: net/rose: prevent integer overflows in rose_setsockopt() In case of possible unpredictably large arguments passed to rose_setsockopt() and multiplied by extra values on top of that, integer overflows may occur.

• CVE-2025-21708MedFeb 27, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: enable basic endpoint checking Syzkaller reports [1] encountering a common issue of utilizing a wrong usb endpoint type during URB submitting stage. This, in turn, triggers a warning shown be

• CVE-2025-21706MedFeb 27, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only set fullmesh for subflow endp With the in-kernel path-manager, it is possible to change the 'fullmesh' flag. The code in mptcp_pm_nl_fullmesh() expects to change it only on 'subflow' endpoints,

• CVE-2024-57999HigFeb 27, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW Power Hypervisor can possibily allocate MMIO window intersecting with Dynamic DMA Window (DDW) range, which is over 32-bit addressing. These MMI

• CVE-2024-57997HigFeb 27, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix channel survey memory allocation size KASAN reported a memory allocation issue in wcn->chan_survey due to incorrect size calculation. This commit uses kcalloc to allocate memory for wcn->chan

• CVE-2024-57996HigFeb 27, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: don't allow 1 packet limit The current implementation does not work correctly with a limit of 1. iproute2 actually checks for this and this patch adds the check in kernel as well. This fixe

• CVE-2024-57993MedFeb 27, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check syzbot has found a type mismatch between a USB pipe and the transfer endpoint, which is triggered by the hid-thrustmaster driver

• CVE-2024-57990HigFeb 27, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix off by one in mt7925_load_clc() This comparison should be >= instead of > to prevent an out of bounds read and write.

• CVE-2024-57986HigFeb 27, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections A report in 2019 by the syzbot fuzzer was found to be connected to two errors in the HID core associated with Resolution Mult