suse/kernel-livepatch-SLE15-SP7-RT_Update_5&distro=SUSE Linux Enterprise Live Patching 15 SP7

Vulnerabilities (104)

• CVE-2025-39718MedSep 5, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Validate length in packet header before skb_put() When receiving a vsock packet in the guest, only the virtqueue buffer size is validated prior to virtio_vsock_skb_rx_put(). Unfortunately, virtio_

• CVE-2025-39703MedSep 5, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: net, hsr: reject HSR frame if skb can't hold tag Receiving HSR frame with insufficient space to hold HSR tag in the skb can result in a crash (kernel BUG): [ 45.390915] skbuff: skb_under_panic: text:ffffffff

• CVE-2025-39691HigSep 5, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: fs/buffer: fix use-after-free when call bh_read() helper There's issue as follows: BUG: KASAN: stack-out-of-bounds in end_buffer_read_sync+0xe3/0x110 Read of size 8 at addr ffffc9000168f7f8 by task swapper/3/0

• CVE-2025-39682HigSep 5, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (any number of them) - one non-DATA record If the next record has different type

• CVE-2025-39681MedSep 5, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper Since 923f3a2b48bd ("x86/resctrl: Query LLC monitoring properties once during boot") resctrl_cpu_detect() has been moved from common CPU in

• CVE-2025-38732MedSep 5, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject: don't leak dst refcount for loopback packets recent patches to add a WARN() when replacing skb dst entry found an old bug: WARNING: include/linux/skbuff.h:1165 skb_dst_check_unset include

• CVE-2025-39711Sep 5, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls Both the ACE and CSI driver are missing a mei_cldev_disable() call in their remove() function. This causes the mei_cl client to stay

• CVE-2025-39707Sep 5, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities HUBBUB structure is not initialized on DCE hardware, so check if it is NULL to avoid null dereference while accessing amdgpu_dm_capabilities

• CVE-2025-39705Sep 5, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix a Null pointer dereference vulnerability [Why] A null pointer dereference vulnerability exists in the AMD display driver's (DC module) cleanup function dc_destruct(). When display control c

• CVE-2025-39695Sep 5, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Flush delayed SKBs while releasing RXE resources When skb packets are sent out, these skb packets still depends on the rxe resources, for example, QP, sk, when these packets are destroyed. If these r

• CVE-2025-39678Sep 5, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL If metric table address is not allocated, accessing metrics_bin will result in a NULL pointer dereference, so add a check.

• CVE-2025-39677Sep 5, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix backlog accounting in qdisc_dequeue_internal This issue applies for the following qdiscs: hhf, fq, fq_codel, and fq_pie, and occurs in their change handlers when adjusting to the new limit. The p

• CVE-2025-38721MedSep 4, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: fix refcount leak on table dump There is a reference count leak in ctnetlink_dump_table(): if (res < 0) { nf_conntrack_get(&ct->ct_general); // HERE c

• CVE-2025-38710MedSep 4, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: gfs2: Validate i_depth for exhash directories A fuzzer test introduced corruption that ends up with a depth of 0 in dir_e_read(), causing an undefined shift by 32 at: index = hash >> (32 - dip->i_depth); As

• CVE-2025-38701MedSep 4, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr A syzbot fuzzed image triggered a BUG_ON in ext4_update_inline_data() when an inode had the INLINE_DATA_FL flag set but was missing the system.data e

• CVE-2025-38684MedSep 4, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: use old 'nbands' while purging unused classes Shuang reported sch_ets test-case [1] crashing in ets_class_qlen_notify() after recent changes from Lion [2]. The problem is: in ets_qdisc_change()

• CVE-2025-38679HigSep 4, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: media: venus: Fix OOB read due to missing payload bound check Currently, The event_seq_changed() handler processes a variable number of properties sent by the firmware. The number of properties is indicated by

• CVE-2025-38730Sep 4, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: io_uring/net: commit partial buffers on retry Ring provided buffers are potentially only valid within the single execution context in which they were acquired. io_uring deals with this and invalidates them on r

• CVE-2025-38722Sep 4, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: habanalabs: fix UAF in export_dmabuf() As soon as we'd inserted a file reference into descriptor table, another thread could close it. That's fine for the case when all we are doing is returning that descripto

• CVE-2025-38709Sep 4, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: loop: Avoid updating block size under exclusive owner Syzbot came up with a reproducer where a loop device block size is changed underneath a mounted filesystem. This causes a mismatch between the block device