suse/kernel-livepatch-SLE15-SP6_Update_14&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (264)

• CVE-2025-38312MedJul 10, 2025
  affected < 1-150600.13.3.4fixed 1-150600.13.3.4

  In the Linux kernel, the following vulnerability has been resolved: fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() In fb_find_mode_cvt(), iff mode->refresh somehow happens to be 0x80000000, cvt.f_refresh will become 0 when multiplying it by 2 due to overflow. It's

• CVE-2025-38310MedJul 10, 2025
  affected < 1-150600.13.3.4fixed 1-150600.13.3.4

  In the Linux kernel, the following vulnerability has been resolved: seg6: Fix validation of nexthop addresses The kernel currently validates that the length of the provided nexthop address does not exceed the specified length. This can lead to the kernel reading uninitialized m

• CVE-2025-38307MedJul 10, 2025
  affected < 1-150600.13.3.4fixed 1-150600.13.3.4

  In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Verify content returned by parse_int_array() The first element of the returned array stores its length. If it is 0, any manipulation beyond the element at index 0 ends with null-ptr-deref.

• CVE-2025-38305MedJul 10, 2025
  affected < 1-150600.13.3.4fixed 1-150600.13.3.4

  In the Linux kernel, the following vulnerability has been resolved: ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() There is no disagreement that we should check both ptp->is_virtual_clock and ptp->n_vclocks to check if the ptp virtual clock is in use. However, w

• CVE-2025-38304MedJul 10, 2025
  affected < 1-150600.13.3.4fixed 1-150600.13.3.4

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix NULL pointer deference on eir_get_service_data The len parameter is considered optional so it can be NULL so it cannot be used for skipping to next entry of EIR_SERVICE_DATA.

• CVE-2025-38303HigJul 10, 2025
  affected < 1-150600.13.3.4fixed 1-150600.13.3.4

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix possible crashes on eir_create_adv_data eir_create_adv_data may attempt to add EIR_FLAGS and EIR_TX_POWER without checking if that would fit.

• CVE-2025-38300MedJul 10, 2025
  affected < 1-150600.13.3.4fixed 1-150600.13.3.4

  In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare() Fix two DMA cleanup issues on the error path in sun8i_ce_cipher_prepare(): 1] If dma_map_sg() fails for areq->dst, the device driver wo

• CVE-2025-38293HigJul 10, 2025
  affected < 1-150600.13.3.4fixed 1-150600.13.3.4

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix node corruption in ar->arvifs list In current WLAN recovery code flow, ath11k_core_halt() only reinitializes the "arvifs" list head. This will cause the list node immediately following the lis

• CVE-2025-38292HigJul 10, 2025
  affected < 1-150600.13.3.4fixed 1-150600.13.3.4

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix invalid access to memory In ath12k_dp_rx_msdu_coalesce(), rxcb is fetched from skb and boolean is_continuation is part of rxcb. Currently, after freeing the skb, the rxcb->is_continuation acce

• CVE-2025-38290HigJul 10, 2025
  affected < 1-150600.13.3.4fixed 1-150600.13.3.4

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix node corruption in ar->arvifs list In current WLAN recovery code flow, ath12k_core_halt() only reinitializes the "arvifs" list head. This will cause the list node immediately following the lis

• CVE-2025-38289HigJul 10, 2025
  affected < 1-150600.13.3.4fixed 1-150600.13.3.4

  In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk Smatch detected a potential use-after-free of an ndlp oject in dev_loss_tmo_callbk during driver unload or fatal error handling. Fix by re

• CVE-2025-38286HigJul 10, 2025
  affected < 1-150600.13.3.4fixed 1-150600.13.3.4

  In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91: Fix possible out-of-boundary access at91_gpio_probe() doesn't check that given OF alias is not available or something went wrong when trying to get it. This might have consequences when accessing

• CVE-2025-38283HigJul 10, 2025
  affected < 1-150600.13.3.4fixed 1-150600.13.3.4

  In the Linux kernel, the following vulnerability has been resolved: hisi_acc_vfio_pci: bugfix live migration function without VF device driver If the VF device driver is not loaded in the Guest OS and we attempt to perform device data migration, the address of the migrated data

• CVE-2025-38279HigJul 10, 2025
  affected < 1-150600.13.3.4fixed 1-150600.13.3.4

  In the Linux kernel, the following vulnerability has been resolved: bpf: Do not include stack ptr register in precision backtracking bookkeeping Yi Lai reported an issue ([1]) where the following warning appears in kernel dmesg: [ 60.643604] verifier backtracking bug [

• CVE-2025-38277MedJul 10, 2025
  affected < 1-150600.13.3.4fixed 1-150600.13.3.4

  In the Linux kernel, the following vulnerability has been resolved: mtd: nand: ecc-mxic: Fix use of uninitialized variable ret If ctx->steps is zero, the loop processing ECC steps is skipped, and the variable ret remains uninitialized. It is later checked and returned, which le

• CVE-2025-38275MedJul 10, 2025
  affected < 1-150600.13.3.4fixed 1-150600.13.3.4

  In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug The qmp_usb_iomap() helper function currently returns the raw result of devm_ioremap() for non-exclusive mappings. Since devm_ioremap() may return a NULL pointer a

• CVE-2025-38273HigJul 10, 2025
  affected < 1-150600.13.3.4fixed 1-150600.13.3.4

  In the Linux kernel, the following vulnerability has been resolved: net: tipc: fix refcount warning in tipc_aead_encrypt syzbot reported a refcount warning [1] caused by calling get_net() on a network namespace that is being destroyed (refcount=0). This happens when a TIPC disc

• CVE-2025-38272MedJul 10, 2025
  affected < 1-150600.13.3.4fixed 1-150600.13.3.4

  In the Linux kernel, the following vulnerability has been resolved: net: dsa: b53: do not enable EEE on bcm63xx BCM63xx internal switches do not support EEE, but provide multiple RGMII ports where external PHYs may be connected. If one of these PHYs are EEE capable, we may try

• CVE-2025-38264CriJul 9, 2025
  affected < 1-150600.13.3.4fixed 1-150600.13.3.4

  In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: sanitize request list handling Validate the request in nvme_tcp_handle_r2t() to ensure it's not part of any list, otherwise a malicious R2T PDU might inject a loop in request list processing.

• CVE-2025-38259HigJul 9, 2025
  affected < 1-150600.13.3.4fixed 1-150600.13.3.4

  In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd9335: Fix missing free of regulator supplies Driver gets and enables all regulator supplies in probe path (wcd9335_parse_dt() and wcd9335_power_on_reset()), but does not cleanup in final error