suse/kernel-obs-build&distro=SUSE Linux Enterprise Module for Development Tools 15 SP6

Vulnerabilities (3,752)

• CVE-2025-39923Oct 1, 2025
  affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

  In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees When we don't have a clock specified in the device tree, we have no way to ensure the BAM is on. This is often the case for remotely-controll

• CVE-2025-39920Oct 1, 2025
  affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

  In the Linux kernel, the following vulnerability has been resolved: pcmcia: Add error handling for add_interval() in do_validate_mem() In the do_validate_mem(), the call to add_interval() does not handle errors. If kmalloc() fails in add_interval(), it could result in a null po

• CVE-2025-39911Oct 1, 2025
  affected < 6.4.0-150600.23.78.1fixed 6.4.0-150600.23.78.1

  In the Linux kernel, the following vulnerability has been resolved: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path If request_irq() in i40e_vsi_request_irq_msix() fails in an iteration later than the first, the error path wants to free the IRQs requested so far.

• CVE-2025-39907Oct 1, 2025
  affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

  In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer Avoid below overlapping mappings by using a contiguous non-cacheable buffer. [ 4.077708] DMA-API: stm32_fmc2_nfc 48810000.nand-controller:

• CVE-2025-39902Oct 1, 2025
  affected < 6.4.0-150600.23.78.1fixed 6.4.0-150600.23.78.1

  In the Linux kernel, the following vulnerability has been resolved: mm/slub: avoid accessing metadata when pointer is invalid in object_err() object_err() reports details of an object for further debugging, such as the freelist pointer, redzone, etc. However, if the pointer is

• CVE-2025-39895Oct 1, 2025
  affected < 6.4.0-150600.23.78.1fixed 6.4.0-150600.23.78.1

  In the Linux kernel, the following vulnerability has been resolved: sched: Fix sched_numa_find_nth_cpu() if mask offline sched_numa_find_nth_cpu() uses a bsearch to look for the 'closest' CPU in sched_domains_numa_masks and given cpus mask. However they might not intersect if a

• CVE-2025-39891Oct 1, 2025
  affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Initialize the chan_stats array to zero The adapter->chan_stats[] array is initialized in mwifiex_init_channel_scan_gap() with vmalloc(), which doesn't zero out memory. The array is filled in mw

• CVE-2025-39889HigSep 24, 2025
  affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: Check encryption key size on incoming connection This is required for passing GAP/SEC/SEM/BI-04-C PTS test case: Security Mode 4 Level 4, Responder - Invalid Encryption Key Size - 128 bit

• CVE-2025-39885Sep 23, 2025
  affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix recursive semaphore deadlock in fiemap call syzbot detected a OCFS2 hang due to a recursive semaphore on a FS_IOC_FIEMAP of the extent list on a specially crafted mmap file. context_switch kernel/sc

• CVE-2025-39882Sep 23, 2025
  affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

  In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: fix potential OF node use-after-free The for_each_child_of_node() helper drops the reference it takes to each node as it iterates over children and an explicit of_node_put() is only needed when ex

• CVE-2025-39881Sep 23, 2025
  affected < 6.4.0-150600.23.78.1fixed 6.4.0-150600.23.78.1

  In the Linux kernel, the following vulnerability has been resolved: kernfs: Fix UAF in polling when open file is released A use-after-free (UAF) vulnerability was identified in the PSI (Pressure Stall Information) monitoring mechanism: BUG: KASAN: slab-use-after-free in psi_tr

• CVE-2025-39876Sep 23, 2025
  affected < 6.4.0-150600.23.78.1fixed 6.4.0-150600.23.78.1

  In the Linux kernel, the following vulnerability has been resolved: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() The function of_phy_find_device may return NULL, so we need to take care before dereferencing phy_dev.

• CVE-2025-39873Sep 23, 2025
  affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

  In the Linux kernel, the following vulnerability has been resolved: can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB can_put_echo_skb() takes ownership of the SKB and it may be freed during or after the call. However, xilinx_can xcan_write_frame() kee

• CVE-2025-39871Sep 23, 2025
  affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

  In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Remove improper idxd_free The call to idxd_free() introduces a duplicate put_device() leading to a reference count underflow: refcount_t: underflow; use-after-free. WARNING: CPU: 15 PID: 4428 a

• CVE-2025-39870Sep 23, 2025
  affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

  In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix double free in idxd_setup_wqs() The clean up in idxd_setup_wqs() has had a couple bugs because the error handling is a bit subtle. It's simpler to just re-write it in a cleaner way. The i

• CVE-2025-39869Sep 23, 2025
  affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

  In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: edma: Fix memory allocation size for queue_priority_map Fix a critical memory allocation bug in edma_setup_from_hw() where queue_priority_map was allocated with insufficient memory. The code decl

• CVE-2025-39866HigSep 19, 2025
  affected < 6.4.0-150600.23.78.1fixed 6.4.0-150600.23.78.1

  In the Linux kernel, the following vulnerability has been resolved: fs: writeback: fix use-after-free in __mark_inode_dirty() An use-after-free issue occurred when __mark_inode_dirty() get the bdi_writeback that was in the progress of switching. CPU: 1 PID: 562 Comm: systemd-r

• CVE-2025-39865MedSep 19, 2025
  affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

  In the Linux kernel, the following vulnerability has been resolved: tee: fix NULL pointer dereference in tee_shm_put tee_shm_put have NULL pointer dereference: __optee_disable_shm_cache --> shm = reg_pair_to_ptr(...);//shm maybe return NULL tee_shm_free(shm); --> te

• CVE-2025-39864HigSep 19, 2025
  affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix use-after-free in cmp_bss() Following bss_free() quirk introduced in commit 776b3580178f ("cfg80211: track hidden SSID networks properly"), adjust cfg80211_update_known_bss() to free the las

• CVE-2025-39860HigSep 19, 2025
  affected < 6.4.0-150600.23.73.1fixed 6.4.0-150600.23.73.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() syzbot reported the splat below without a repro. In the splat, a single thread calling bt_accept_dequeue() freed sk and touched it after that. The