suse/kernel-livepatch-SLE15-SP6_Update_17&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (205)

• CVE-2023-53697Oct 22, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: nvdimm: Fix memleak of pmu attr_groups in unregister_nvdimm_pmu() Memory pointed by 'nd_pmu->pmu.attr_groups' is allocated in function 'register_nvdimm_pmu' and is lost after 'kfree(nd_pmu)' call in function 'u

• CVE-2023-53693Oct 22, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix the memory leak in raw_gadget driver Currently, increasing raw_dev->count happens before invoke the raw_queue_event(), if the raw_queue_event() return error, invoke raw_release() will not trigg

• CVE-2025-40016Oct 20, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID Per UVC 1.1+ specification 3.7.2, units and terminals must have a non-zero unique ID. ``` Each Unit and Terminal within the video function i

• CVE-2025-40013Oct 20, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: audioreach: fix potential null pointer dereference It is possible that the topology parsing function audioreach_widget_load_module_common() could return NULL or an error pointer. Add missing NULL ch

• CVE-2025-40011Oct 20, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: drm/gma500: Fix null dereference in hdmi teardown pci_set_drvdata sets the value of pdev->driver_data to NULL, after which the driver_data obtained from the same dev is dereferenced in oaktrail_hdmi_i2c_exit, a

• CVE-2025-40010Oct 20, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: afs: Fix potential null pointer dereference in afs_put_server afs_put_server() accessed server->debug_id before the NULL check, which could lead to a null pointer dereference. Move the debug_id assignment, ensu

• CVE-2025-40005Oct 20, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: Implement refcount to handle unbind during busy driver support indirect read and indirect write operation with assumption no force device removal(unbind) operation. However force device re

• CVE-2025-40000Oct 15, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() There is a bug observed when rtw89_core_tx_kick_off_and_wait() tries to access already freed skb_data: BUG: KFENCE: use-after-free write in

• CVE-2025-39997Oct 15, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free The previous commit 0718a78f6a9f ("ALSA: usb-audio: Kill timer properly at removal") patched a UAF issue caused by the error timer. However, becau

• CVE-2025-39996Oct 15, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove The original code uses cancel_delayed_work() in flexcop_pci_remove(), which does not guarantee that the delayed work item irq_chec

• CVE-2025-39995Oct 15, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe The state->timer is a cyclic timer that schedules work_i2c_poll and delayed_work_enable_hotplug, while rearming itself. Using timer_

• CVE-2025-39994Oct 15, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: media: tuner: xc5000: Fix use-after-free in xc5000_release The original code uses cancel_delayed_work() in xc5000_release(), which does not guarantee that the delayed work item timer_sleep has fully completed i

• CVE-2025-39993Oct 15, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: media: rc: fix races with imon_disconnect() Syzbot reports a KASAN issue as below: BUG: KASAN: use-after-free in __create_pipe include/linux/usb.h:1945 [inline] BUG: KASAN: use-after-free in send_packet+0xa2d/0

• CVE-2025-39991Oct 15, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load() If ab->fw.m3_data points to data, then fw pointer remains null. Further, if m3_mem is not allocated, then fw is dereferenced to be passed to ath11k_err

• CVE-2025-39988Oct 15, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow Sending an PF_PACKET allows to bypass the CAN framework logic and to directly reach the xmit() function of a CAN driver. The only check whic

• CVE-2025-39987Oct 15, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: can: hi311x: populate ndo_change_mtu() to prevent buffer overflow Sending an PF_PACKET allows to bypass the CAN framework logic and to directly reach the xmit() function of a CAN driver. The only check which is

• CVE-2025-39986Oct 15, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow Sending an PF_PACKET allows to bypass the CAN framework logic and to directly reach the xmit() function of a CAN driver. The only check which

• CVE-2025-39985Oct 15, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow Sending an PF_PACKET allows to bypass the CAN framework logic and to directly reach the xmit() function of a CAN driver. The only check which

• CVE-2025-39982Oct 15, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync This fixes the following UFA in hci_acl_create_conn_sync where a connection still pending is command submission (conn->state == BT_OPEN) maybe freed, al

• CVE-2025-39981Oct 15, 2025
  affected < 1-150600.13.5.1fixed 1-150600.13.5.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible UAFs This attemps to fix possible UAFs caused by struct mgmt_pending being freed while still being processed like in the following trace, in order to fix mgmt_pending_valid is intr