suse/kernel-livepatch-SLE15-SP7_Update_2&distro=SUSE Linux Enterprise Live Patching 15 SP7

Vulnerabilities (284)

• CVE-2025-37754May 1, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/i915/huc: Fix fence not released on early probe errors HuC delayed loading fence, introduced with commit 27536e03271da ("drm/i915/huc: track delayed HuC load with a fence"), is registered with object tracke

• CVE-2025-37752May 1, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: move the limit validation It is not sufficient to directly validate the limit on the data that the user passes as it can be updated based on how the other parameters are changed. Move the c

• CVE-2025-37747May 1, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: perf: Fix hang while freeing sigtrap event Perf can hang while freeing a sigtrap event if a related deferred signal hadn't managed to be sent before the file got closed: perf_event_overflow() task_work_add(

• CVE-2025-37743May 1, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Avoid memory leak while enabling statistics Driver uses monitor destination rings for extended statistics mode and standalone monitor mode. In extended statistics mode, TLVs are parsed from the bu

• CVE-2025-37742May 1, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uninit-value access of imap allocated in the diMount() function syzbot reports that hex_dump_to_buffer is using uninit-value: ===================================================== BUG: KMSAN: uninit-v

• CVE-2025-37741May 1, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: jfs: Prevent copying of nlink with value 0 from disk inode syzbot report a deadlock in diFree. [1] When calling "ioctl$LOOP_SET_STATUS64", the offset value passed in is 4, which does not match the mounted loop

• CVE-2025-37740May 1, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: jfs: add sanity check for agwidth in dbMount The width in dmapctl of the AG is zero, it trigger a divide error when calculating the control page level in dbAllocAG. To avoid this issue, add a check for agwidth

• CVE-2025-37738May 1, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs past end Once inside 'ext4_xattr_inode_dec_ref_all' we should ignore xattrs entries past the 'end' entry. This fixes the following KASAN reported issue: ===================================

• CVE-2025-23162May 1, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Don't try to trigger a full GT reset if VF VFs don't have access to the GDRST(0x941c) register that driver uses to reset a GT. Attempt to trigger a reset using debugfs: $ cat /sys/kernel/debug/dri/

• CVE-2025-23161May 1, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type The access to the PCI config space via pci_ops::read and pci_ops::write is a low-level hardware access. The functions can be accessed with disabled interru

• CVE-2025-23159May 1, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add a check to handle OOB in sfr region sfr->buf_size is in shared memory and can be modified by malicious user. OOB write is possible when the size is made higher than actual sfr data buffer

• CVE-2025-23158May 1, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add check to handle incorrect queue size qsize represents size of shared queued between driver and video firmware. Firmware can modify this value to an invalid large value. In such situation,

• CVE-2025-23157May 1, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi_parser: add check to avoid out of bound access There is a possibility that init_codecs is invoked multiple times during manipulated payload from video firmware. In such case, if codecs_count c

• CVE-2025-23156May 1, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi_parser: refactor hfi packet parsing logic words_count denotes the number of words in total payload, while data points to payload of various property within it. When words_count reaches last wo

• CVE-2025-23155May 1, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Fix accessing freed irq affinity_hint In stmmac_request_irq_multi_msi(), a pointer to the stack variable cpu_mask is passed to irq_set_affinity_hint(). This value is stored in irq_desc->affinity_hi

• CVE-2025-23151May 1, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Fix race between unprepare and queue_buf A client driver may use mhi_unprepare_from_transfer() to quiesce incoming data during the client driver's tear down. The client driver might also be proc

• CVE-2025-23149May 1, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: tpm: do not start chip while suspended Checking TPM_CHIP_FLAG_SUSPENDED after the call to tpm_find_get_ops() can lead to a spurious tpm_chip_start() call: [35985.503771] i2c i2c-1: Transfer while suspended [35

• CVE-2025-23148May 1, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() soc_dev_attr->revision could be NULL, thus, a pointer check is added to prevent potential NULL pointer dereference. This is similar t

• CVE-2025-23147May 1, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: i3c: Add NULL pointer check in i3c_master_queue_ibi() The I3C master driver may receive an IBI from a target device that has not been probed yet. In such cases, the master calls `i3c_master_queue_ibi()` to queu

• CVE-2025-23146May 1, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: mfd: ene-kb3930: Fix a potential NULL pointer dereference The off_gpios could be NULL. Add missing check in the kb3930_probe(). This is similar to the issue fixed in commit b1ba8bcb2d1f ("backlight: hx8357: Fix