suse/kernel-livepatch-SLE15-SP6_Update_4&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (460)

• CVE-2024-26851MedApr 17, 2024
  affected < 1-150600.13.3.3fixed 1-150600.13.3.3

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: Add protection for bmp length out of range UBSAN load reports an exception of BRK#5515 SHIFT_ISSUE:Bitwise shifts that are out of bounds for their data type. vmlinux get_bitmap(

• CVE-2024-26849MedApr 17, 2024
  affected < 1-150600.13.3.3fixed 1-150600.13.3.3

  In the Linux kernel, the following vulnerability has been resolved: netlink: add nla be16/32 types to minlen array BUG: KMSAN: uninit-value in nla_validate_range_unsigned lib/nlattr.c:222 [inline] BUG: KMSAN: uninit-value in nla_validate_int_range lib/nlattr.c:336 [inline] BUG:

• CVE-2024-26837Apr 17, 2024
  affected < 1-150600.13.3.3fixed 1-150600.13.3.3

  In the Linux kernel, the following vulnerability has been resolved: net: bridge: switchdev: Skip MDB replays of deferred events on offload Before this change, generation of the list of MDB events to replay would race against the creation of new group memberships, either from th

• CVE-2024-26835Apr 17, 2024
  affected < 1-150600.13.3.3fixed 1-150600.13.3.3

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: set dormant flag on hook register failure We need to set the dormant flag again if we fail to register the hooks. During memory pressure hook registration can fail and we end up with a ta

• CVE-2024-27437MedApr 5, 2024
  affected < 1-150600.13.3.3fixed 1-150600.13.3.3

  In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Disable auto-enable of exclusive INTx IRQ Currently for devices requiring masking at the irqchip for INTx, ie. devices without DisINTx support, the IRQ is enabled in request_irq() and subsequently dis

• CVE-2024-26812MedApr 5, 2024
  affected < 1-150600.13.3.3fixed 1-150600.13.3.3

  In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Create persistent INTx handler A vulnerability exists where the eventfd for INTx signaling can be deconfigured, which unregisters the IRQ handler but still allows eventfds to be signaled with a NULL c

• CVE-2024-26809Apr 4, 2024
  affected < 1-150600.13.3.3fixed 1-150600.13.3.3

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: release elements in clone only from destroy path Clone already always provides a current view of the lookup table, use it to destroy the set, otherwise it is possible to destroy eleme

• CVE-2024-26808Apr 4, 2024
  affected < 1-150600.13.3.3fixed 1-150600.13.3.3

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain Remove netdevice from inet/ingress basechain in case NETDEV_UNREGISTER event is reported, otherwise a stale reference to netdevic

• CVE-2024-26735Apr 3, 2024
  affected < 1-150600.13.3.3fixed 1-150600.13.3.3

  In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix possible use-after-free and null-ptr-deref The pernet operations structure for the subsystem must be registered before registering the generic netlink family.

• CVE-2024-26691Apr 3, 2024
  affected < 1-150600.13.3.3fixed 1-150600.13.3.3

  In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix circular locking dependency The rule inside kvm enforces that the vcpu->mutex is taken *inside* kvm->lock. The rule is violated by the pkvm_create_hyp_vm() which acquires the kvm->lock while alr

• CVE-2024-26683Apr 2, 2024
  affected < 1-150600.13.3.3fixed 1-150600.13.3.3

  In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: detect stuck ECSA element in probe resp We recently added some validation that we don't try to connect to an AP that is currently in a channel switch process, since that might want the channel t

• CVE-2024-26682Apr 2, 2024
  affected < 1-150600.13.3.3fixed 1-150600.13.3.3

  In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: improve CSA/ECSA connection refusal As mentioned in the previous commit, we pretty quickly found that some APs have ECSA elements stuck in their probe response, so using that to not attempt to c

• CVE-2024-26677Apr 2, 2024
  affected < 1-150600.13.3.3fixed 1-150600.13.3.3

  In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix delayed ACKs to not set the reference serial number Fix the construction of delayed ACKs to not set the reference serial number as they can't be used as an RTT reference.

• CVE-2024-26669Apr 2, 2024
  affected < 1-150600.13.3.3fixed 1-150600.13.3.3

  In the Linux kernel, the following vulnerability has been resolved: net/sched: flower: Fix chain template offload When a qdisc is deleted from a net device the stack instructs the underlying driver to remove its flow offload callback from the associated filter block using the '

• CVE-2024-26668Apr 2, 2024
  affected < 1-150600.13.3.3fixed 1-150600.13.3.3

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_limit: reject configurations that cause integer overflow Reject bogus configs where internal token counter wraps around. This only occurs with very very large requests, such as 17gbyte/s. Its be

• CVE-2024-26637Mar 18, 2024
  affected < 1-150600.13.3.3fixed 1-150600.13.3.3

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: rely on mac80211 debugfs handling for vif mac80211 started to delete debugfs entries in certain cases, causing a ath11k to crash when it tried to delete the entries later. Fix this by relying on m

• CVE-2024-26631Mar 18, 2024
  affected < 1-150600.13.3.3fixed 1-150600.13.3.3

  In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work idev->mc_ifc_count can be written over without proper locking. Originally found by syzbot [1], fix this issue by encapsulating calls to mld_ifc_stop_wo

• CVE-2023-52581Mar 2, 2024
  affected < 1-150600.13.3.3fixed 1-150600.13.3.3

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix memleak when more than 255 elements expired When more than 255 elements expired we're supposed to switch to a new gc container structure. This never happens: u8 type will wrap before

• CVE-2023-52489Feb 29, 2024
  affected < 1-150600.13.3.3fixed 1-150600.13.3.3

  In the Linux kernel, the following vulnerability has been resolved: mm/sparsemem: fix race in accessing memory_section->usage The below race is observed on a PFN which falls into the device memory region with the system memory configuration where PFN's are such that [ZONE_NORMA

• CVE-2024-26590Feb 22, 2024
  affected < 1-150600.13.3.3fixed 1-150600.13.3.3

  In the Linux kernel, the following vulnerability has been resolved: erofs: fix inconsistent per-file compression format EROFS can select compression algorithms on a per-file basis, and each per-file compression algorithm needs to be marked in the on-disk superblock for initiali