suse/kernel-livepatch-SLE15-SP6_Update_6&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (559)

• CVE-2024-53076HigNov 19, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table() If per_time_scales[i] or per_time_gains[i] kcalloc fails in the for loop of iio_gts_build_avail_scale_table(), the err_f

• CVE-2024-53074MedNov 19, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't leak a link on AP removal Release the link mapping resource in AP removal. This impacted devices that do not support the MLD API (9260 and down). On those devices, we couldn't start th

• CVE-2024-53072MedNov 19, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Detect when STB is not available Loading the amd_pmc module as: amd_pmc enable_stb=1 ...can result in the following messages in the kernel ring buffer: amd_pmc AMDI0009:00: SMU

• CVE-2024-53068HigNov 19, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() The scmi_dev->name is released prematurely in __scmi_device_destroy(), which causes slab-use-after-free when accessing scmi_dev->name in scmi_b

• CVE-2024-53066CriNov 19, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: nfs: Fix KMSAN warning in decode_getfattr_attrs() Fix the following KMSAN warning: CPU: 1 UID: 0 PID: 7651 Comm: cp Tainted: G B Tainted: [B]=BAD_PAGE Hardware name: QEMU Standard PC (Q35 + ICH9, 2009) ====

• CVE-2024-53063HigNov 19, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: prevent the risk of out of memory access The dvbdev contains a static variable used to store dvb minors. The behavior of it depends if CONFIG_DVB_DYNAMIC_MINORS is set or not. When not set, dvb_

• CVE-2024-53061HigNov 19, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: media: s5p-jpeg: prevent buffer overflows The current logic allows word to be less than 2. If this happens, there will be buffer overflows, as reported by smatch. Add extra checks to prevent it. While here, re

• CVE-2024-53060MedNov 19, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported acpi_evaluate_object() may return AE_NOT_FOUND (failure), which would result in dereferencing buffer.pointer (obj) while being NULL. Althou

• CVE-2024-53059HigNov 19, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() 1. The size of the response packet is not validated. 2. The response buffer is not freed. Resolve these issues by switching to iwl_mvm_s

• CVE-2024-53058CriNov 19, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data In case the non-paged data of a SKB carries protocol header and protocol payload to be transmitted on a certain platform that the DMA AXI ad

• CVE-2024-53056MedNov 19, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() In mtk_crtc_create(), if the call to mbox_request_channel() fails then we set the "mtk_crtc->cmdq_client.chan" pointer to NULL. In that situat

• CVE-2024-53055MedNov 19, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix 6 GHz scan construction If more than 255 colocated APs exist for the set of all APs found during 2.4/5 GHz scanning, then the 6 GHz scan construction will loop forever since the loop var

• CVE-2024-53052MedNov 19, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write When io_uring starts a write, it'll call kiocb_start_write() to bump the super block rwsem, preventing any freezes from happening while that write

• CVE-2024-53051MedNov 19, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability Sometimes during hotplug scenario or suspend/resume scenario encoder is not always initialized when intel_hdcp_get_capability add a check to avoid k

• CVE-2024-53048MedNov 19, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: ice: fix crash on probe for DPLL enabled E810 LOM The E810 Lan On Motherboard (LOM) design is vendor specific. Intel provides the reference design, but it is up to vendor on the final product design. For some c

• CVE-2024-53045MedNov 19, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: ASoC: dapm: fix bounds checker error in dapm_widget_list_create The widgets array in the snd_soc_dapm_widget_list has a __counted_by attribute attached to it, which points to the num_widgets variable. This attr

• CVE-2024-53043MedNov 19, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: mctp i2c: handle NULL header address daddr can be NULL if there is no neighbour table entry present, in that case the tx packet should be dropped. saddr will usually be set by MCTP core, but check for NULL in

• CVE-2024-53042MedNov 19, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() There are code paths from which the function is called without holding the RCU read lock, resulting in a suspicious RCU usage warning [

• CVE-2024-50302MedKEVNov 19, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak k

• CVE-2024-50301HigNov 19, 2024
  affected < 1-150600.13.3.5fixed 1-150600.13.3.5

  In the Linux kernel, the following vulnerability has been resolved: security/keys: fix slab-out-of-bounds in key_task_permission KASAN reports an out of bounds read: BUG: KASAN: slab-out-of-bounds in __kuid_val include/linux/uidgid.h:36 BUG: KASAN: slab-out-of-bounds in uid_eq