suse/kernel-livepatch-SLE15-SP7_Update_8&distro=SUSE Linux Enterprise Live Patching 15 SP7

Vulnerabilities (405)

• CVE-2025-68303Dec 16, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel: punit_ipc: fix memory corruption This passes the address of the pointer "&punit_ipcdev" when the intent was to pass the pointer itself "punit_ipcdev" (without the ampersand). This means tha

• CVE-2025-68302Dec 16, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: fix potential NULL dereference in sxgbe_rx() Currently, when skb is null, the driver prints an error and then dereferences skb on the next line. To fix this, let's add a 'break' after the error mes

• CVE-2025-68298Dec 16, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Avoid btusb_mtk_claim_iso_intf() NULL deref In btusb_mtk_setup(), we set `btmtk_data->isopkt_intf` to: usb_ifnum_to_if(data->udev, MTK_ISO_IFNUM) That function can return NULL in

• CVE-2025-68290Dec 16, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: most: usb: fix double free on late probe failure The MOST subsystem has a non-standard registration function which frees the interface on registration failures and on deregistration. This unsurprisingly leads

• CVE-2025-68289Dec 16, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_eem: Fix memory leak in eem_unwrap The existing code did not handle the failure case of usb_ep_queue in the command path, potentially leading to memory leaks. Improve error handling to free all

• CVE-2025-68287Dec 16, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths This patch addresses a race condition caused by unsynchronized execution of multiple call paths invoking `dwc3_remove_requests(

• CVE-2025-68286Dec 16, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check NULL before accessing [WHAT] IGT kms_cursor_legacy's long-nonblocking-modeset-vs-cursor-atomic fails with NULL pointer dereference. This can be reproduced with both an eDP panel and a DP

• CVE-2025-68285Dec 16, 2025
  affected < 2-150700.2.1fixed 2-150700.2.1

  In the Linux kernel, the following vulnerability has been resolved: libceph: fix potential use-after-free in have_mon_and_osd_map() The wait loop in __ceph_open_session() can race with the client receiving a new monmap or osdmap shortly after the initial map is received. Both

• CVE-2025-68284Dec 16, 2025
  affected < 2-150700.2.1fixed 2-150700.2.1

  In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() The len field originates from untrusted network packets. Boundary checks have been added to prevent potential out-of-bounds writes wh

• CVE-2025-68264Dec 16, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: refresh inline data size before write operations The cached ei->i_inline_size can become stale between the initial size check and when ext4_update_inline_data()/ext4_create_inline_data() use it. Although

• CVE-2025-68259Dec 16, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced When re-injecting a soft interrupt from an INT3, INT0, or (select) INTn instruction, discard the exception and retry the instruction if the co

• CVE-2025-68258Dec 16, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: comedi: multiq3: sanitize config options in multiq3_attach() Syzbot identified an issue [1] in multiq3_attach() that induces a task timeout due to open() or COMEDI_DEVCONFIG ioctl operations, specifically, in t

• CVE-2025-68257Dec 16, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: comedi: check device's attached status in compat ioctls Syzbot identified an issue [1] that crashes kernel, seemingly due to unexistent callback dev->get_valid_routes(). By all means, this should not occur as s

• CVE-2025-68255Dec 16, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing The Supported Rates IE length from an incoming Association Request frame was used directly as the memcpy() length when copying into a fixed

• CVE-2025-68252Dec 16, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookup In fastrpc_map_lookup, dma_buf_get is called to obtain a reference to the dma_buf for comparison purposes. However, this reference is never released

• CVE-2025-68249Dec 16, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: most: usb: hdm_probe: Fix calling put_device() before device initialization The early error path in hdm_probe() can jump to err_free_mdev before &mdev->dev has been initialized with device_initialize(). Calling

• CVE-2025-68244Dec 16, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD On completion of i915_vma_pin_ww(), a synchronous variant of dma_fence_work_commit() is called. When pinning a VMA to GGTT address space on a

• CVE-2025-68239Dec 16, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: restore write access before closing files opened by open_exec() bm_register_write() opens an executable file using open_exec(), which internally calls do_open_execat() and denies write access on th

• CVE-2025-68238Dec 16, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: fix DMA device NULL pointer dereference The DMA device pointer `dma_dev` was being dereferenced before ensuring that `cdns_ctrl->dmac` is properly initialized. Move the assignment of `dm

• CVE-2025-68237Dec 16, 2025
  affected < 1-150700.15.3.1fixed 1-150700.15.3.1

  In the Linux kernel, the following vulnerability has been resolved: mtdchar: fix integer overflow in read/write ioctls The "req.start" and "req.len" variables are u64 values that come from the user at the start of the function. We mask away the high 32 bits of "req.len" so tha