suse/kernel-livepatch-SLE15-SP6_Update_8&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (281)

• CVE-2025-38111HigJul 3, 2025
  affected < 13-150600.2.1fixed 13-150600.2.1

  In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds read/write access When using publicly available tools like 'mdio-tools' to read/write data from/to network interface and its PHY via mdiobus, there is no verification of

• CVE-2025-38129Jul 3, 2025
  affected < 14-150600.2.1fixed 14-150600.2.1

  In the Linux kernel, the following vulnerability has been resolved: page_pool: Fix use-after-free in page_pool_recycle_in_ring syzbot reported a uaf in page_pool_recycle_in_ring: BUG: KASAN: slab-use-after-free in lock_release+0x151/0xa30 kernel/locking/lockdep.c:5862 Read of

• CVE-2025-38109Jul 3, 2025
  affected < 7-150600.2.1fixed 7-150600.2.1

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix ECVF vports unload on shutdown flow Fix shutdown flow UAF when a virtual function is created on the embedded chip (ECVF) of a BlueField device. In such case the vport acl ingress table is not prop

• CVE-2025-38083MedJun 20, 2025
  affected < 5-150600.2.1fixed 5-150600.2.1

  In the Linux kernel, the following vulnerability has been resolved: net_sched: prio: fix a race in prio_tune() Gerrard Tai reported a race condition in PRIO, whenever SFQ perturb timer fires at the wrong time. The race is as follows: CPU 0 CPU

• CVE-2025-38079HigJun 18, 2025
  affected < 5-150600.2.1fixed 5-150600.2.1

  In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - fix double free in hash_accept If accept(2) is called on socket type algif_hash with MSG_MORE flag set and crypto_ahash_import fails, sk2 is freed. However, it is also freed in af_alg_relea

• CVE-2024-57996MedFeb 27, 2025
  affected < 2-150600.2.2fixed 2-150600.2.2

  In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: don't allow 1 packet limit The current implementation does not work correctly with a limit of 1. iproute2 actually checks for this and this patch adds the check in kernel as well. This fixe

• CVE-2024-58013Feb 27, 2025
  affected < 2-150600.2.2fixed 2-150600.2.2

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync This fixes the following crash: ================================================================== BUG: KASAN: slab-use-after-free

• CVE-2025-21678MedJan 31, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: gtp: Destroy device along with udp socket's netns dismantle. gtp_newlink() links the device to a list in dev_net(dev) instead of src_net, where a udp tunnel socket is created. Even when src_net is removed, the

• CVE-2025-21669MedJan 31, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: discard packets if the transport changes If the socket has been de-assigned or assigned to another transport, we must discard any packets received because they are not expected and would cause iss

• CVE-2025-21666MedJan 31, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] Recent reports have shown how we sometimes call vsock_*_has_data() when a vsock socket has been de-assigned from a transport (see attached links), bu

• CVE-2025-21682Jan 31, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: always recalculate features after XDP clearing, fix null-deref Recalculate features when XDP is detached. Before: # ip li set dev eth0 xdp obj xdp_dummy.bpf.o sec xdp # ip li set dev eth0 xdp of

• CVE-2025-21680Jan 31, 2025
  affected < 2-150600.2.2fixed 2-150600.2.2

  In the Linux kernel, the following vulnerability has been resolved: pktgen: Avoid out-of-bounds access in get_imix_entries Passing a sufficient amount of imix entries leads to invalid access to the pkt_dev->imix_entries array because of the incorrect boundary check. UBSAN: arr

• CVE-2025-21676Jan 31, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: net: fec: handle page_pool_dev_alloc_pages error The fec_enet_update_cbd function calls page_pool_dev_alloc_pages but did not handle the case when it returned NULL. There was a WARN_ON(!new_page) but it would s

• CVE-2025-21675Jan 31, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Clear port select structure when fail to create Clear the port select structure on error so no stale values left after definers are destroyed. That's because the mlx5_lag_destroy_definers() always try

• CVE-2025-21674Jan 31, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel Attempt to enable IPsec packet offload in tunnel mode in debug kernel generates the following kernel panic, which is happening due to two

• CVE-2025-21670Jan 31, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: vsock/bpf: return early if transport is not assigned Some of the core functions can only be called if the transport has been assigned. As Michal reported, a socket might have the transport at NULL, for example

• CVE-2025-21664MedJan 21, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: dm thin: make get_first_thin use rcu-safe list first function The documentation in rculist.h explains the absence of list_empty_rcu() and cautions programmers against relying on a list_empty() -> list_first() s

• CVE-2024-57940MedJan 21, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: exfat: fix the infinite loop in exfat_readdir() If the file system is corrupted so that a cluster is linked to itself in the cluster chain, and there is an unused directory entry in the cluster, 'dentry' will n

• CVE-2024-57946Jan 21, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: virtio-blk: don't keep queue frozen during system suspend Commit 4ce6e2db00de ("virtio-blk: Ensure no requests in virtqueues before deleting vqs.") replaces queue quiesce with queue freeze in virtio-blk's PM ca

• CVE-2025-21663Jan 21, 2025
  affected < 1-150600.13.3.2fixed 1-150600.13.3.2

  In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwmac-tegra: Read iommu stream id from device tree Nvidia's Tegra MGBE controllers require the IOMMU "Stream ID" (SID) to be written to the MGBE_WRAP_AXI_ASID0_CTRL register. The current driver is