suse/kernel-livepatch-SLE15-SP6_Update_6&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (559)

• CVE-2024-50015MedOct 21, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: ext4: dax: fix overflowing extents beyond inode size when partially writing The dax_iomap_rw() does two things in each iteration: map written blocks and copy user data to blocks. If the process is killed by use

• CVE-2024-50012MedOct 21, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: cpufreq: Avoid a bad reference count on CPU node In the parse_perf_domain function, if the call to of_parse_phandle_with_args returns an error, then the reference to the CPU device node that was acquired at the

• CVE-2024-50008MedOct 21, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() Replace one-element array with a flexible-array member in `struct host_cmd_ds_802_11_scan_ext`. With this, fix the foll

• CVE-2024-50007HigOct 21, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access ASIHPI driver stores some values in the static array upon a response from the driver, and its index depends on the firmware. We shouldn't trust it blindly. This pa

• CVE-2024-50006MedOct 21, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix i_data_sem unlock order in ext4_ind_migrate() Fuzzing reports a possible deadlock in jbd2_log_wait_commit. This issue is triggered when an EXT4_IOC_MIGRATE ioctl is set to require synchronous updates

• CVE-2024-50017Oct 21, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: x86/mm/ident_map: Use gbpages only where full GB page should be mapped. When ident_pud_init() uses only GB pages to create identity maps, large ranges of addresses not actually requested can be included in the

• CVE-2024-50014Oct 21, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix access to uninitialised lock in fc replay path The following kernel trace can be triggered with fstest generic/629 when executed against a filesystem with fast-commit feature enabled: INFO: trying to

• CVE-2024-50013Oct 21, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: exfat: fix memory leak in exfat_load_bitmap() If the first directory entry in the root directory is not a bitmap directory entry, 'bh' will not be released and reassigned, which will cause a memory leak.

• CVE-2024-50009Oct 21, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value cpufreq_cpu_get may return NULL. To avoid NULL-dereference check it and return in case of error. Found by Linux Verification Center (linuxtesti

• CVE-2024-50004Oct 21, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: update DML2 policy EnhancedPrefetchScheduleAccelerationFinal DCN35 [WHY & HOW] Mismatch in DCN35 DML2 cause bw validation failed to acquire unexpected DPP pipe to cause grey screen and system h

• CVE-2024-50003Oct 21, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix system hang while resume with TBT monitor [Why] Connected with a Thunderbolt monitor and do the suspend and the system may hang while resume. The TBT monitor HPD will be triggered during t

• CVE-2024-50001MedOct 21, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix error path in multi-packet WQE transmit Remove the erroneous unmap in case no DMA mapping was established The multi-packet WQE transmit code attempts to obtain a DMA mapping for the skb. This cou

• CVE-2024-49996HigOct 21, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: cifs: Fix buffer overflow when parsing NFS reparse points ReparseDataLength is sum of the InodeType size and DataBuffer size. So to get DataBuffer size it is needed to subtract InodeType's size from ReparseData

• CVE-2024-49991HigOct 21, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer Pass pointer reference to amdgpu_bo_unref to clear the correct pointer, otherwise amdgpu_bo_unref clear the local variable, the original pointer not set

• CVE-2024-49989HigOct 21, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix double free issue during amdgpu module unload Flexible endpoints use DIGs from available inflexible endpoints, so only the encoders of inflexible links need to be freed. Otherwise, a double

• CVE-2024-49986HigOct 21, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors x86_android_tablet_remove() frees the pdevs[] array, so it should not be used after calling x86_android_tablet_remove()

• CVE-2024-49973MedOct 21, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: r8169: add tally counter fields added with RTL8125 RTL8125 added fields to the tally counter, what may result in the chip dma'ing these new fields to unallocated memory. Therefore make sure that the allocated m

• CVE-2024-49966HigOct 21, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: cancel dqi_sync_work before freeing oinfo ocfs2_global_read_info() will initialize and schedule dqi_sync_work at the end, if error occurs after successfully reading global quota, it will trigger the foll

• CVE-2024-49960HigOct 21, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix timer use-after-free on failed mount Syzbot has found an ODEBUG bug in ext4_fill_super The del_timer_sync function cancels the s_err_report timer, which reminds about filesystem errors daily. We shou

• CVE-2024-49955MedOct 21, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: ACPI: battery: Fix possible crash when unregistering a battery hook When a battery hook returns an error when adding a new battery, then the battery hook is automatically unregistered. However the battery hook