suse/kernel-livepatch-SLE15-SP7_Update_3&distro=SUSE Linux Enterprise Live Patching 15 SP7

Vulnerabilities (274)

• CVE-2025-38455Jul 25, 2025
  affected < 1-150700.15.3.4fixed 1-150700.15.3.4

  In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight Reject migration of SEV{-ES} state if either the source or destination VM is actively creating a vCPU, i.e. if kvm_vm_ioctl_create_vc

• CVE-2025-38453Jul 25, 2025
  affected < 1-150700.15.3.4fixed 1-150700.15.3.4

  In the Linux kernel, the following vulnerability has been resolved: io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU syzbot reports that defer/local task_work adding via msg_ring can hit a request that has been freed: CPU: 1 UID: 0 PID: 19356 Comm: iou-wrk-19354

• CVE-2025-38449Jul 25, 2025
  affected < 1-150700.15.3.4fixed 1-150700.15.3.4

  In the Linux kernel, the following vulnerability has been resolved: drm/gem: Acquire references on GEM handles for framebuffers A GEM handle can be released while the GEM buffer object is attached to a DRM framebuffer. This leads to the release of the dma-buf backing the buffer

• CVE-2025-38448Jul 25, 2025
  affected < 1-150700.15.3.4fixed 1-150700.15.3.4

  In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_serial: Fix race condition in TTY wakeup A race condition occurs when gs_start_io() calls either gs_start_rx() or gs_start_tx(), as those functions briefly drop the port_lock for usb_ep_queue().

• CVE-2025-38443Jul 25, 2025
  affected < 1-150700.15.3.4fixed 1-150700.15.3.4

  In the Linux kernel, the following vulnerability has been resolved: nbd: fix uaf in nbd_genl_connect() error path There is a use-after-free issue in nbd: block nbd6: Receive control failed (result -104) block nbd6: shutting down sockets ========================================

• CVE-2025-38436MedJul 25, 2025
  affected < 1-150700.15.3.4fixed 1-150700.15.3.4

  In the Linux kernel, the following vulnerability has been resolved: drm/scheduler: signal scheduled fence when kill job When an entity from application B is killed, drm_sched_entity_kill() removes all jobs belonging to that entity through drm_sched_entity_kill_jobs_work(). If a

• CVE-2025-38430MedJul 25, 2025
  affected < 1-150700.15.3.4fixed 1-150700.15.3.4

  In the Linux kernel, the following vulnerability has been resolved: nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request If the request being processed is not a v4 compound request, then examining the cstate can have undefined results. This patch adds a check

• CVE-2025-38429Jul 25, 2025
  affected < 1-150700.15.3.4fixed 1-150700.15.3.4

  In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Update read pointer only after buffer is written Inside mhi_ep_ring_add_element, the read pointer (rd_offset) is updated before the buffer is written, potentially causing race conditions where the

• CVE-2025-38428Jul 25, 2025
  affected < 1-150700.15.3.4fixed 1-150700.15.3.4

  In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - check record size in ims_pcu_flash_firmware() The "len" variable comes from the firmware and we generally do trust firmware, but it's always better to double check. If the "len" is too large i

• CVE-2025-38427Jul 25, 2025
  affected < 1-150700.15.3.4fixed 1-150700.15.3.4

  In the Linux kernel, the following vulnerability has been resolved: video: screen_info: Relocate framebuffers behind PCI bridges Apply PCI host-bridge window offsets to screen_info framebuffers. Fixes invalid access to I/O memory. Resources behind a PCI host bridge can be relo

• CVE-2025-38426Jul 25, 2025
  affected < 1-150700.15.3.4fixed 1-150700.15.3.4

  In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add basic validation for RAS header If RAS header read from EEPROM is corrupted, it could result in trying to allocate huge memory for reading the records. Add some validation to header fields.

• CVE-2025-38425Jul 25, 2025
  affected < 1-150700.15.3.4fixed 1-150700.15.3.4

  In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: check msg length in SMBUS block read For SMBUS block read, do not continue to read if the message length passed from the device is '0' or greater than the maximum allowed bytes.

• CVE-2025-38424Jul 25, 2025
  affected < 1-150700.15.3.4fixed 1-150700.15.3.4

  In the Linux kernel, the following vulnerability has been resolved: perf: Fix sample vs do_exit() Baisheng Gao reported an ARM64 crash, which Mark decoded as being a synchronous external abort -- most likely due to trying to access MMIO in bad ways. The crash further shows per

• CVE-2025-38420Jul 25, 2025
  affected < 1-150700.15.3.4fixed 1-150700.15.3.4

  In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: do not ping device which has failed to load firmware Syzkaller reports [1, 2] crashes caused by an attempts to ping the device which has failed to load firmware. Since such a device doesn't pass

• CVE-2025-38417Jul 25, 2025
  affected < 1-150700.15.3.4fixed 1-150700.15.3.4

  In the Linux kernel, the following vulnerability has been resolved: ice: fix eswitch code memory leak in reset scenario Add simple eswitch mode checker in attaching VF procedure and allocate required port representor memory structures only in switchdev mode. The reset flows tri

• CVE-2025-38416Jul 25, 2025
  affected < 1-150700.15.3.4fixed 1-150700.15.3.4

  In the Linux kernel, the following vulnerability has been resolved: NFC: nci: uart: Set tty->disc_data only in success path Setting tty->disc_data before opening the NCI device means we need to clean it up on error paths. This also opens some short window if device starts send

• CVE-2025-38415Jul 25, 2025
  affected < 1-150700.15.3.4fixed 1-150700.15.3.4

  In the Linux kernel, the following vulnerability has been resolved: Squashfs: check return result of sb_min_blocksize Syzkaller reports an "UBSAN: shift-out-of-bounds in squashfs_bio_read" bug. Syzkaller forks multiple processes which after mounting the Squashfs filesystem, is

• CVE-2025-38414Jul 25, 2025
  affected < 1-150700.15.3.4fixed 1-150700.15.3.4

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 GCC_GCC_PCIE_HOT_RST is wrongly defined for WCN7850, causing kernel crash on some specific platforms. Since this register is divergent for WCN7850

• CVE-2025-38412Jul 25, 2025
  affected < 1-150700.15.3.4fixed 1-150700.15.3.4

  In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks After retrieving WMI data blocks in sysfs callbacks, check for the validity of them before dereferencing their content.

• CVE-2025-38410Jul 25, 2025
  affected < 1-150700.15.3.4fixed 1-150700.15.3.4

  In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix a fence leak in submit error path In error paths, we could unref the submit without calling drm_sched_entity_push_job(), so msm_job_free() will never get called. Since drm_sched_job_cleanup() will