suse/kernel-livepatch-SLE15-SP7-RT_Update_8&distro=SUSE Linux Enterprise Live Patching 15 SP7

Vulnerabilities (410)

• CVE-2025-68192Dec 16, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup Raw IP packets have no MAC header, leaving skb->mac_header uninitialized. This can trigger kernel panics on ARM64 when xfrm or other subsystem

• CVE-2025-68190Dec 16, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() kcalloc() may fail. When WS is non-zero and allocation fails, ectx.ws remains NULL while ectx.ws_size is set, leading to a po

• CVE-2025-68185Dec 16, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing Theoretically it's an oopsable race, but I don't believe one can manage to hit it on real hardware; might become doable on a KVM,

• CVE-2025-68184Dec 16, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Disable AFBC support on Mediatek DRM driver Commit c410fa9b07c3 ("drm/mediatek: Add AFBC support to Mediatek DRM driver") added AFBC support to Mediatek DRM and enabled the 32x8/split/sparse modif

• CVE-2025-68183Dec 16, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr Currently when both IMA and EVM are in fix mode, the IMA signature will be reset to IMA hash if a program first stores IMA signature in se

• CVE-2025-68181Dec 16, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Remove calls to drm_put_dev() Since the allocation of the drivers main structure was changed to devm_drm_dev_alloc() drm_put_dev()'ing to trigger it to be free'd should be done by devres. However,

• CVE-2025-68180Dec 16, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL deref in debugfs odm_combine_segments When a connector is connected but inactive (e.g., disabled by desktop environments), pipe_ctx->stream_res.tg will be destroyed. Then, reading odm_

• CVE-2025-68176Dec 16, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: PCI: cadence: Check for the existence of cdns_pcie::ops before using it cdns_pcie::ops might not be populated by all the Cadence glue drivers. This is going to be true for the upcoming Sophgo platform which doe

• CVE-2025-68172Dec 16, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: crypto: aspeed - fix double free caused by devm The clock obtained via devm_clk_get_enabled() is automatically managed by devres and will be disabled and freed on driver detach. Manually calling clk_disable_unp

• CVE-2025-68170Dec 16, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Do not kfree() devres managed rdev Since the allocation of the drivers main structure was changed to devm_drm_dev_alloc() rdev is managed by devres and we shouldn't be calling kfree() on it. This f

• CVE-2025-68168Dec 16, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: jfs: fix uninitialized waitqueue in transaction manager The transaction manager initialization in txInit() was not properly initializing TxBlock[0].waitor waitqueue, causing a crash when txEnd(0) is called on r

• CVE-2025-40360Dec 16, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: Do not dereference NULL pointer in plane reset The plane state in __drm_gem_reset_shadow_plane() can be NULL. Do not deref that pointer, but forward NULL to the other plane-reset helpers. Clears plan

• CVE-2025-40359Dec 16, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix KASAN global-out-of-bounds warning When running "perf mem record" command on CWF, the below KASAN global-out-of-bounds warning is seen. ===================================================

• CVE-2025-40357Dec 16, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: net/smc: fix general protection fault in __smc_diag_dump The syzbot report a crash: Oops: general protection fault, probably for non-canonical address 0xfbd5a5d5a0000003: 0000 [#1] SMP KASAN NOPTI KASAN: m

• CVE-2025-40354Dec 16, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: increase max link count and fix link->enc NULL pointer access [why] 1.) dc->links[MAX_LINKS] array size smaller than actual requested. max_connector + max_dpia + 4 virtual = 14. increase from 1

• CVE-2025-40351Dec 16, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat() The syzbot reported issue in hfsplus_delete_cat(): [ 70.682285][ T9333] ===================================================== [ 70.682943][ T93

• CVE-2025-40349Dec 16, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: hfs: validate record offset in hfsplus_bmap_alloc hfsplus_bmap_alloc can trigger a crash if a record offset or length is larger than node_size [ 15.264282] BUG: KASAN: slab-out-of-bounds in hfsplus_bmap_allo

• CVE-2025-40347Dec 16, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix the deadlock of enetc_mdio_lock After applying the workaround for err050089, the LS1028A platform experiences RCU stalls on RT kernel. This issue is caused by the recursive acquisition of the re

• CVE-2025-40346Dec 16, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() Fix incorrect use of PTR_ERR_OR_ZERO() in topology_parse_cpu_capacity() which causes the code to proceed with NULL clock pointers. The c

• CVE-2025-68223Dec 16, 2025
  affected < 1-150700.1.3.1fixed 1-150700.1.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/radeon: delete radeon_fence_process in is_signaled, no deadlock Delete the attempt to progress the queue when checking if fence is signaled. This avoids deadlock. dma-fence_ops::signaled can be called with