suse/kernel-obs-build&distro=SUSE Linux Enterprise Module for Development Tools 15 SP5

Vulnerabilities (2,437)

• CVE-2024-49870MedOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix dentry leak in cachefiles_open_file() A dentry leak may be caused when a lookup cookie and a cull are concurrent: P1 | P2 -----------------------------------

• CVE-2024-49868MedOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion [BUG] Syzbot reported a NULL pointer dereference with the following crash: FAULT_INJECTION: forcing a failure. start_transactio

• CVE-2024-49867HigOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: btrfs: wait for fixup workers before stopping cleaner kthread during umount During unmount, at close_ctree(), we have the following steps in this order: 1) Park the cleaner kthread - this doesn't destroy the k

• CVE-2024-49866HigOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: tracing/timerlat: Fix a race during cpuhp processing There is another found exception that the "timerlat/1" thread was scheduled on CPU0, and lead to timer corruption finally: ``` ODEBUG: init active (active s

• CVE-2024-49863MedOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() Since commit 3f8ca2e115e5 ("vhost/scsi: Extract common handling code from control queue handler") a null pointer dereference bug can be triggered when gu

• CVE-2024-49861HigOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: Fix helper writes to read-only maps Lonial found an issue that despite user- and BPF-side frozen BPF map (like in case of .rodata), it was still possible to write into it from a BPF program side through sp

• CVE-2024-49860HigOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of _STR method Only buffer objects are valid return values of _STR. If something else is returned description_show() will access invalid memory.

• CVE-2024-49858MedOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption The TPM event log table is a Linux specific construct, where the data produced by the GetEventLog() boot service is cached in memory, and p

• CVE-2024-49855CriOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: nbd: fix race between timeout and normal completion If request timetout is handled by nbd_requeue_cmd(), normal completion has to be stopped for avoiding to complete this requeued request, other use-after-free

• CVE-2024-49852HigOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del() The kref_put() function will call nport->release if the refcount drops to zero. The nport->release release function is _efc_nport_free()

• CVE-2024-49851MedOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: tpm: Clean up TPM space after command failure tpm_dev_transmit prepares the TPM space before attempting command transmission. However if the command fails no rollback of this preparation is done. This can resul

• CVE-2024-49850MedOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos In case of malformed relocation record of kind BPF_CORE_TYPE_ID_LOCAL referencing a non-existing BTF type, function bpf_core_calc_relo_insn would cau

• CVE-2024-47757HigOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential oob read in nilfs_btree_check_delete() The function nilfs_btree_check_delete(), which checks whether degeneration to direct mapping occurs before deleting a b-tree entry, causes memory acc

• CVE-2024-47756MedOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix if-statement expression in ks_pcie_quirk() This code accidentally uses && where || was intended. It potentially results in a NULL dereference. Thus, fix the if-statement expression to use t

• CVE-2024-47749HigOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Added NULL check for lookup_atid The lookup_atid() function can return NULL if the ATID is invalid or does not exist in the identifier table, which could lead to dereferencing a null pointer without

• CVE-2024-47748HigOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: vhost_vdpa: assign irq bypass producer token correctly We used to call irq_bypass_unregister_producer() in vhost_vdpa_setup_vq_irq() which is problematic as we don't know if the token pointer is still valid or

• CVE-2024-47747HigOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition In the ether3_probe function, a timer is initialized with a callback function ether3_ledoff, bound to &prev(dev)->timer. Once t

• CVE-2024-47745HigOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: mm: call the security_mmap_file() LSM hook in remap_file_pages() The remap_file_pages syscall handler calls do_mmap() directly, which doesn't contain the LSM security check. And if the process has called person

• CVE-2024-47742HigOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: firmware_loader: Block path traversal Most firmware names are hardcoded strings, or are constructed from fairly constrained format strings where the dynamic parts are just some hex numbers or such. However, th

• CVE-2024-47739HigOct 21, 2024
  affected < 5.14.21-150500.55.88.1fixed 5.14.21-150500.55.88.1

  In the Linux kernel, the following vulnerability has been resolved: padata: use integer wrap around to prevent deadlock on seq_nr overflow When submitting more than 2^32 padata objects to padata_do_serial, the current sorting implementation incorrectly sorts padata objects with