suse/kernel-livepatch-SLE15-SP6_Update_6&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (559)

• CVE-2025-38396Jul 25, 2025
  affected < 14-150600.2.1fixed 14-150600.2.1

  In the Linux kernel, the following vulnerability has been resolved: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass Export anon_inode_make_secure_inode() to allow KVM guest_memfd to create anonymous inodes with proper security context. This replaces the c

• CVE-2025-38212HigJul 4, 2025
  affected < 11-150600.2.1fixed 11-150600.2.1

  In the Linux kernel, the following vulnerability has been resolved: ipc: fix to protect IPCS lookups using RCU syzbot reported that it discovered a use-after-free vulnerability, [0] [0]: https://lore.kernel.org/all/67af13f8.050a0220.21dd3.0038.GAE@google.com/ idr_for_each() i

• CVE-2025-38206Jul 4, 2025
  affected < 14-150600.2.1fixed 14-150600.2.1

  In the Linux kernel, the following vulnerability has been resolved: exfat: fix double free in delayed_free The double free could happen in the following path. exfat_create_upcase_table() exfat_create_upcase_table() : return error exfat_free_upcase_table() : fre

• CVE-2025-38110Jul 3, 2025
  affected < 14-150600.2.1fixed 14-150600.2.1

  In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access When using publicly available tools like 'mdio-tools' to read/write data from/to network interface and its PHY via C45 (clause 45) mdiobus, t

• CVE-2025-38089Jun 30, 2025
  affected < 13-150600.2.1fixed 13-150600.2.1

  In the Linux kernel, the following vulnerability has been resolved: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error tianshuo han reported a remotely-triggerable crash if the client sends a kernel RPC server a specially crafted packet. If decoding the RPC rep

• CVE-2025-38087Jun 30, 2025
  affected < 11-150600.2.1fixed 11-150600.2.1

  In the Linux kernel, the following vulnerability has been resolved: net/sched: fix use-after-free in taprio_dev_notifier Since taprio’s taprio_dev_notifier() isn’t protected by an RCU read-side critical section, a race with advance_sched() can lead to a use-after-free. Adding

• CVE-2025-38083MedJun 20, 2025
  affected < 10-150600.2.1fixed 10-150600.2.1

  In the Linux kernel, the following vulnerability has been resolved: net_sched: prio: fix a race in prio_tune() Gerrard Tai reported a race condition in PRIO, whenever SFQ perturb timer fires at the wrong time. The race is as follows: CPU 0 CPU

• CVE-2025-38079HigJun 18, 2025
  affected < 10-150600.2.1fixed 10-150600.2.1

  In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - fix double free in hash_accept If accept(2) is called on socket type algif_hash with MSG_MORE flag set and crypto_ahash_import fails, sk2 is freed. However, it is also freed in af_alg_relea

• CVE-2025-38001Jun 6, 2025
  affected < 11-150600.2.1fixed 11-150600.2.1

  In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice Savino says: "We are writing to report that this recent patch (141d34391abbb315d68556b7c67ad97885407547) [1] can be bypassed,

• CVE-2025-38000Jun 6, 2025
  affected < 11-150600.2.1fixed 11-150600.2.1

  In the Linux kernel, the following vulnerability has been resolved: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() When enqueuing the first packet to an HFSC class, hfsc_enqueue() calls the child qdisc's peek() operation before incrementing sch->q.qlen and

• CVE-2025-37890May 16, 2025
  affected < 11-150600.2.1fixed 11-150600.2.1

  In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc As described in Gerrard's report [1], we have a UAF case when an hfsc class has a netem child qdisc. The crux of the issue is that hfs

• CVE-2025-23145May 1, 2025
  affected < 16-150600.2.1fixed 16-150600.2.1

  In the Linux kernel, the following vulnerability has been resolved: mptcp: fix NULL pointer in can_accept_new_subflow When testing valkey benchmark tool with MPTCP, the kernel panics in 'mptcp_can_accept_new_subflow' because subflow_req->msk is NULL. Call trace: mptcp_can_a

• CVE-2025-22115Apr 16, 2025
  affected < 8-150600.2.1fixed 8-150600.2.1

  In the Linux kernel, the following vulnerability has been resolved: btrfs: fix block group refcount race in btrfs_create_pending_block_groups() Block group creation is done in two phases, which results in a slightly unintuitive property: a block group can be allocated/deallocat

• CVE-2025-21999Apr 3, 2025
  affected < 11-150600.2.1fixed 11-150600.2.1

  In the Linux kernel, the following vulnerability has been resolved: proc: fix UAF in proc_get_inode() Fix race between rmmod and /proc/XXX's inode instantiation. The bug is that pde->proc_ops don't belong to /proc, it belongs to a module, therefore dereferencing it after /proc

• CVE-2025-21971Apr 1, 2025
  affected < 14-150600.2.1fixed 14-150600.2.1

  In the Linux kernel, the following vulnerability has been resolved: net_sched: Prevent creation of classes with TC_H_ROOT The function qdisc_tree_reduce_backlog() uses TC_H_ROOT as a termination condition when traversing up the qdisc tree to update parent backlog counters. Howe

• CVE-2025-21772HigFeb 27, 2025
  affected < 8-150600.2.1fixed 8-150600.2.1

  In the Linux kernel, the following vulnerability has been resolved: partitions: mac: fix handling of bogus partition table Fix several issues in partition probing: - The bailout for a bad partoffset must use put_dev_sector(), since the preceding read_part_sector() succeede

• CVE-2025-21791Feb 27, 2025
  affected < 13-150600.2.1fixed 13-150600.2.1

  In the Linux kernel, the following vulnerability has been resolved: vrf: use RCU protection in l3mdev_l3_out() l3mdev_l3_out() can be called without RCU being held: raw_sendmsg() ip_push_pending_frames() ip_send_skb() ip_local_out() __ip_local_out() l3mdev_ip_ou

• CVE-2024-57996MedFeb 27, 2025
  affected < 6-150600.2.2fixed 6-150600.2.2

  In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: don't allow 1 packet limit The current implementation does not work correctly with a limit of 1. iproute2 actually checks for this and this patch adds the check in kernel as well. This fixe

• CVE-2024-58013Feb 27, 2025
  affected < 6-150600.2.2fixed 6-150600.2.2

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync This fixes the following crash: ================================================================== BUG: KASAN: slab-use-after-free

• CVE-2025-21701MedFeb 13, 2025
  affected < 11-150600.2.1fixed 11-150600.2.1

  In the Linux kernel, the following vulnerability has been resolved: net: avoid race between device unregistration and ethnl ops The following trace can be seen if a device is being unregistered while its number of channels are being modified. DEBUG_LOCKS_WARN_ON(lock->magic