suse/kernel-livepatch-SLE15-SP7-RT_Update_1&distro=SUSE Linux Enterprise Live Patching 15 SP7

Vulnerabilities (167)

• CVE-2025-37831May 8, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() cpufreq_cpu_get_raw() can return NULL when the target CPU is not present in the policy->cpus mask. apple_soc_cpufreq_get_rate() does not ch

• CVE-2025-37830May 8, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() cpufreq_cpu_get_raw() can return NULL when the target CPU is not present in the policy->cpus mask. scmi_cpufreq_get_rate() does not check for this ca

• CVE-2025-37829May 8, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() cpufreq_cpu_get_raw() can return NULL when the target CPU is not present in the policy->cpus mask. scpi_cpufreq_get_rate() does not check for this ca

• CVE-2025-37824May 8, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL pointer dereference in tipc_mon_reinit_self() syzbot reported: tipc: Node number set to 1055423674 Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1

• CVE-2025-37823May 8, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too Similarly to the previous patch, we need to safe guard hfsc_dequeue() too. But for this one, we don't have a reliable reproducer.

• CVE-2025-37820May 8, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() The function xdp_convert_buff_to_frame() may return NULL if it fails to correctly convert the XDP buffer into an XDP frame due to memory constra

• CVE-2025-37809May 8, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: usb: typec: class: Fix NULL pointer access Concurrent calls to typec_partner_unlink_device can lead to a NULL pointer dereference. This patch adds a mutex to protect USB device pointers and prevent this issue.

• CVE-2025-37803May 8, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix a buf size overflow issue during udmabuf creation by casting size_limit_mb to u64 when calculate pglimit.

• CVE-2025-37799May 3, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp vmxnet3 driver's XDP handling is buggy for packet sizes using ring0 (that is, packet sizes between 128 - 3k bytes). We noticed MTU-related connectivi

• CVE-2025-37798May 2, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() After making all ->qlen_notify() callbacks idempotent, now it is safe to remove the check of qlen!=0 from both fq_codel_dequeue() and codel_qdi

• CVE-2025-37797May 2, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a UAF vulnerability in class handling This patch fixes a Use-After-Free vulnerability in the HFSC qdisc class handling. The issue occurs due to a time-of-check/time-of-use condition in hfsc

• CVE-2025-23160MedMay 1, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization On Mediatek devices with a system companion processor (SCP) the mtk_scp structure has to be removed explicitly to avoi

• CVE-2025-37790May 1, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: net: mctp: Set SOCK_RCU_FREE Bind lookup runs under RCU, so ensure that a socket doesn't go away in the middle of a lookup.

• CVE-2025-37789May 1, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix nested key length validation in the set() action It's not safe to access nla_len(ovs_key) if the data is smaller than the netlink header. Check that the attribute is OK first.

• CVE-2025-37787May 1, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered Russell King reports that a system with mv88e6xxx dereferences a NULL pointer when unbinding this driver: https://lore.kernel

• CVE-2025-37780May 1, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: isofs: Prevent the use of too small fid syzbot reported a slab-out-of-bounds Read in isofs_fh_to_parent. [1] The handle_bytes value passed in by the reproducing program is equal to 12. In handle_to_path(), onl

• CVE-2025-37773May 1, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: virtiofs: add filesystem context source name check In certain scenarios, for example, during fuzz testing, the source name may be NULL, which could lead to a kernel panic. Therefore, an extra check for the sour

• CVE-2025-37755May 1, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: net: libwx: handle page_pool_dev_alloc_pages error page_pool_dev_alloc_pages could return NULL. There was a WARN_ON(!page) but it would still proceed to use the NULL pointer and then crash. This is similar to

• CVE-2025-37752May 1, 2025
  affected < 2-150700.2.1fixed 2-150700.2.1

  In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: move the limit validation It is not sufficient to directly validate the limit on the data that the user passes as it can be updated based on how the other parameters are changed. Move the c

• CVE-2025-37750May 1, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in decryption with multichannel After commit f7025d861694 ("smb: client: allocate crypto only for primary server") and commit b0abcd65ec54 ("smb: client: fix UAF in async decryption"), the