suse/kernel-livepatch-SLE15-SP6_Update_15&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (115)

• CVE-2025-38503Aug 16, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: btrfs: fix assertion when building free space tree When building the free space tree with the block group tree feature enabled, we can hit an assertion failure like this: BTRFS info (device loop0 state M): r

• CVE-2025-38500Aug 12, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collect_md xfrm interface collect_md property on xfrm interfaces can only be set on device creation, thus xfrmi_changelink() should fail when called on such in

• CVE-2025-38499MedAug 11, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns What we want is to verify there is that clone won't expose something hidden by a mount we wouldn't be able to undo. "Wouldn't be

• CVE-2024-58238Aug 9, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test This fixes the tx timeout issue seen while running a stress test on btnxpuart for couple of hours, such that the interval between two HCI

• CVE-2025-38491MedJul 28, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: mptcp: make fallback action and fallback decision atomic Syzkaller reported the following splat: WARNING: CPU: 1 PID: 7704 at net/mptcp/protocol.h:1223 __mptcp_do_fallback net/mptcp/protocol.h:1223 [inline]

• CVE-2025-38490Jul 28, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: net: libwx: remove duplicate page_pool_put_full_page() page_pool_put_full_page() should only be invoked when freeing Rx buffers or building a skb if the size is too short. At other times, the pages need to be r

• CVE-2025-38488Jul 28, 2025
  affected < 7-150600.2.1fixed 7-150600.2.1

  In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in crypt_message when using async crypto The CVE-2024-50047 fix removed asynchronous crypto handling from crypt_message(), assuming all crypto operations are synchronous. However

• CVE-2025-38472Jul 28, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry A crash in conntrack was reported while trying to unlink the conntrack entry from the hash bucket list: [exception RIP: __nf_ct_delet

• CVE-2025-38464Jul 25, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipc_conn_close(). syzbot reported a null-ptr-deref in tipc_conn_close() during netns dismantle. [0] tipc_topsrv_stop() iterates tipc_net(net)->topsrv->conn_idr and calls tipc_conn_

• CVE-2025-38459Jul 25, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix infinite recursive call of clip_push(). syzbot reported the splat below. [0] This happens if we call ioctl(ATMARP_MKIP) more than once. During the first call, clip_mkip() sets clip_push() to vc

• CVE-2025-38458Jul 25, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix NULL pointer dereference in vcc_sendmsg() atmarpd_dev_ops does not implement the send method, which may cause crash as bellow. BUG: kernel NULL pointer dereference, address: 0000000000000000 PGD

• CVE-2025-38445Jul 25, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: md/raid1: Fix stack memory use after return in raid1_reshape In the raid1_reshape function, newpool is allocated on the stack and assigned to conf->r1bio_pool. This results in conf->r1bio_pool.wait.head pointin

• CVE-2025-38444Jul 25, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: raid10: cleanup memleak at raid10_make_request If raid10_read_request or raid10_write_request registers a new request and the REQ_NOWAIT flag is set, the code does not free the malloc from the mempool. unrefer

• CVE-2025-38441Jul 25, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() syzbot found a potential access to uninit-value in nf_flow_pppoe_proto() Blamed commit forgot the Ethernet header. BUG: KMSAN: uninit

• CVE-2025-38439Jul 25, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT When transmitting an XDP_REDIRECT packet, call dma_unmap_len_set() with the proper length instead of 0. This bug triggers this warning on a system with IOM

• CVE-2025-38360Jul 25, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add more checks for DSC / HUBP ONO guarantees [WHY] For non-zero DSC instances it's possible that the HUBP domain required to drive it for sequential ONO ASICs isn't met, potentially causing th

• CVE-2025-38251Jul 9, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: atm: clip: prevent NULL deref in clip_push() Blamed commit missed that vcc_destroy_socket() calls clip_push() with a NULL skb. If clip_devs is NULL, clip_push() then crashes when reading skb->truesize.

• CVE-2025-38245Jul 9, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). syzbot reported a warning below during atm_dev_register(). [0] Before creating a new device and procfs/sysfs for it, atm_dev_register()

• CVE-2025-38208Jul 4, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: smb: client: add NULL check in automount_fullpath page is checked for null in __build_path_from_dentry_optional_prefix when tcon->origin_fullpath is not set. However, the check is missing when it is set. Add a

• CVE-2025-38205Jul 4, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 [Why] If the dummy values in `populate_dummy_dml_surface_cfg()` aren't updated then they can lead to a divide by zero in downstream callers