suse/kernel-livepatch-SLE15-SP6_Update_6&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (559)

• CVE-2024-50117Nov 5, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: drm/amd: Guard against bad data for ATIF ACPI method If a BIOS provides bad data in response to an ATIF method call this causes a NULL pointer dereference in the caller. ``` ? show_regs (arch/x86/kernel/dumpst

• CVE-2024-50116Nov 5, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix kernel bug due to missing clearing of buffer delay flag Syzbot reported that after nilfs2 reads a corrupted file system image and degrades to read-only, the BUG_ON check for the buffer delay flag in

• CVE-2024-50115Nov 5, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory Ignore nCR3[4:0] when loading PDPTEs from memory for nested SVM, as bits 4:0 of CR3 are ignored when PAE paging is used, and thus VMRUN doesn't enforc

• CVE-2024-50110Nov 5, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: xfrm: fix one more kernel-infoleak in algo dumping During fuzz testing, the following issue was discovered: BUG: KMSAN: kernel-infoleak in _copy_to_iter+0x598/0x2a30 _copy_to_iter+0x598/0x2a30 __skb_datagram

• CVE-2024-50108Nov 5, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too Stuart Hayhurst has found that both at bootup and fullscreen VA-API video is leading to black screens for around 1 second and kernel WARNING [1] traces w

• CVE-2024-50103Nov 5, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe() A devm_kzalloc() in asoc_qcom_lpass_cpu_platform_probe() could possibly return NULL pointer. NULL Pointer Dereference may be triggerred w

• CVE-2024-50102Nov 5, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: x86: fix user address masking non-canonical speculation issue It turns out that AMD has a "Meltdown Lite(tm)" issue with non-canonical accesses in kernel space. And so using just the high bit to decide whether

• CVE-2024-50101Nov 5, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices Previously, the domain_context_clear() function incorrectly called pci_for_each_dma_alias() to set up context entries for non-PCI devices.

• CVE-2024-50100Nov 5, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: USB: gadget: dummy-hcd: Fix "task hung" problem The syzbot fuzzer has been encountering "task hung" problems ever since the dummy-hcd driver was changed to use hrtimers instead of regular timers. It turns out

• CVE-2024-50099Nov 5, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: arm64: probes: Remove broken LDR (literal) uprobe support The simulate_ldr_literal() and simulate_ldrsw_literal() functions are unsafe to use for uprobes. Both functions were originally written for use with kpr

• CVE-2024-50098Nov 5, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down There is a history of deadlock if reboot is performed at the beginning of booting. SDEV_QUIESCE was set for all LU's scsi_devices by UFS shutdown, and at

• CVE-2024-50096Nov 5, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error The `nouveau_dmem_copy_one` function ensures that the copy push command is sent to the device firmware but does not track whether it was execute

• CVE-2024-50093Nov 5, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: thermal: intel: int340x: processor: Fix warning during module unload The processor_thermal driver uses pcim_device_enable() to enable a PCI device, which means the device will be automatically disabled on drive

• CVE-2023-52920MedNov 5, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: bpf: support non-r10 register spill/fill to/from stack in precision tracking Use instruction (jump) history to record instructions that performed register spill/fill to/from stack, regardless if this was done t

• CVE-2024-50088Oct 29, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: btrfs: fix uninitialized pointer free in add_inode_ref() The add_inode_ref() function does not initialize the "name" struct when it is declared. If any of the following calls to "read_one_inode() returns NULL,

• CVE-2024-50087Oct 29, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: btrfs: fix uninitialized pointer free on read_alloc_one_name() error The function read_alloc_one_name() does not initialize the name field of the passed fscrypt_str struct if kmalloc fails to allocate the corre

• CVE-2024-50084Oct 29, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test() Commit a3c1e45156ad ("net: microchip: vcap: Fix use-after-free error in kunit test") fixed the use-after-free error, but introduced belo

• CVE-2024-50082Oct 29, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race We're seeing crashes from rq_qos_wake_function that look like this: BUG: unable to handle page fault for address: ffffafe180a40084 #PF: su

• CVE-2024-50081Oct 29, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: blk-mq: setup queue ->tag_set before initializing hctx Commit 7b815817aa58 ("blk-mq: add helper for checking if one CPU is mapped to specified hctx") needs to check queue mapping via tag set in hctx's cpuhp han

• CVE-2024-50080Oct 29, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: ublk: don't allow user copy for unprivileged device UBLK_F_USER_COPY requires userspace to call write() on ublk char device for filling request buffer, and unprivileged device can't be trusted. So don't allow