suse/kernel-livepatch-SLE15-SP7_Update_2&distro=SUSE Linux Enterprise Live Patching 15 SP7

Vulnerabilities (284)

• CVE-2025-21805Feb 27, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Add missing deinit() call A warning is triggered when repeatedly connecting and disconnecting the rnbd: list_add corruption. prev->next should be next (ffff88800b13e480), but was ffff88801ecd1338. (

• CVE-2025-21770Feb 27, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: iommu: Fix potential memory leak in iopf_queue_remove_device() The iopf_queue_remove_device() helper removes a device from the per-iommu iopf queue when PRI is disabled on the device. It responds to all outstan

• CVE-2024-58015Feb 27, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix for out-of bound access error Selfgen stats are placed in a buffer using print_array_to_buf_index() function. Array length parameter passed to the function is too big, resulting in possible ou

• CVE-2024-58004Feb 27, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: remove cpu latency qos request on error Fix cpu latency qos list corruption like below. It happens when we do not remove cpu latency request on error path and free corresponding memory. [

• CVE-2025-21720Feb 27, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: xfrm: delete intermediate secpath entry in packet offload mode Packets handled by hardware have added secpath as a way to inform XFRM core code that this path was already handled. That secpath is not needed at

• CVE-2025-21713Feb 27, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: Don't unset window if it was never set On pSeries, when user attempts to use the same vfio container used by different iommu group, the spapr_tce_set_window() returns -EPERM and the subse

• CVE-2024-57995Feb 27, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() In ath12k_mac_assign_vif_to_vdev(), if arvif is created on a different radio, it gets deleted from that radio through a call to ath12

• CVE-2024-57988Feb 27, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() devm_kstrdup() can return a NULL pointer on failure,but this returned value in btbcm_get_board_name() is not checked. Add NULL check in btbcm_get_board

• CVE-2024-57987Feb 27, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() If insert an USB dongle which chip is not maintained in ic_id_table, it will hit the NULL point accessed. Add a null point check to avoid the Kernel Oop

• CVE-2024-57982Feb 27, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: xfrm: state: fix out-of-bounds read during lookup lookup and resize can run in parallel. The xfrm_state_hash_generation seqlock ensures a retry, but the hash functions can observe a hmask value that is too lar

• CVE-2025-21658Jan 21, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid NULL pointer dereference if no valid extent tree [BUG] Syzbot reported a crash with the following call trace: BTRFS info (device loop0): scrub: started on devid 1 BUG: kernel NULL pointer dere

• CVE-2025-21629Jan 15, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets The blamed commit disabled hardware offoad of IPv6 packets with extension headers on devices that advertise NETIF_F_IPV6_CSUM, based on the definition

• CVE-2024-49568Jan 11, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg When receiving proposal msg in server, the fields v2_ext_offset/ eid_cnt/ism_gid_cnt in proposal msg are from the remote client and c

• CVE-2024-56699Dec 28, 2024
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix potential double remove of hotplug slot In commit 6ee600bfbe0f ("s390/pci: remove hotplug slot when releasing the device") the zpci_exit_slot() was moved from zpci_device_reserved() to zpci_releas

• CVE-2024-56613Dec 27, 2024
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: sched/numa: fix memory leak due to the overwritten vma->numab_state [Problem Description] When running the hackbench program of LTP, the following memory leak is reported by kmemleak. # /opt/ltp/testcases/bi

• CVE-2024-56541Dec 27, 2024
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix use-after-free in ath12k_dp_cc_cleanup() During ath12k module removal, in ath12k_core_deinit(), ath12k_mac_destroy() un-registers ah->hw from mac80211 and frees the ah->hw as well as all the a

• CVE-2024-50293Nov 19, 2024
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: net/smc: do not leave a dangling sk pointer in __smc_create() Thanks to commit 4bbd360a5084 ("socket: Print pf->create() when it does not clear sock->sk on failure."), syzbot found an issue with AF_SMC: smc_cr

• CVE-2024-50106Nov 5, 2024
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: nfsd: fix race between laundromat and free_stateid There is a race between laundromat handling of revoked delegations and a client sending free_stateid operation. Laundromat thread finds that delegation has exp

• CVE-2024-50034Oct 21, 2024
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: net/smc: fix lacks of icsk_syn_mss with IPPROTO_SMC Eric report a panic on IPPROTO_SMC, and give the facts that when INET_PROTOSW_ICSK was set, icsk->icsk_sync_mss must be set too. Bug: Unable to handle kernel

• CVE-2024-43869Aug 21, 2024
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: perf: Fix event leak upon exec and file release The perf pending task work is never waited upon the matching event release. In the case of a child event, released via free_event() directly, this can potentially