suse/kernel-rt&distro=SUSE Linux Enterprise Micro 5.3

Vulnerabilities (2,986)

• CVE-2022-49177Feb 26, 2025
  affected < 5.14.21-150400.15.115.1fixed 5.14.21-150400.15.115.1

  In the Linux kernel, the following vulnerability has been resolved: hwrng: cavium - fix NULL but dereferenced coccicheck error Fix following coccicheck warning: ./drivers/char/hw_random/cavium-rng-vf.c:182:17-20: ERROR: pdev is NULL but dereferenced.

• CVE-2022-49176Feb 26, 2025
  affected < 5.14.21-150400.15.115.1fixed 5.14.21-150400.15.115.1

  In the Linux kernel, the following vulnerability has been resolved: bfq: fix use-after-free in bfq_dispatch_request KASAN reports a use-after-free report when doing normal scsi-mq test [69832.239032] ================================================================== [69832.241

• CVE-2022-49175Feb 26, 2025
  affected < 5.14.21-150400.15.115.1fixed 5.14.21-150400.15.115.1

  In the Linux kernel, the following vulnerability has been resolved: PM: core: keep irq flags in device_pm_check_callbacks() The function device_pm_check_callbacks() can be called under the spin lock (in the reported case it happens from genpd_add_device() -> dev_pm_domain_set()

• CVE-2022-49174Feb 26, 2025
  affected < 5.14.21-150400.15.115.1fixed 5.14.21-150400.15.115.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit In case of flex_bg feature (which is by default enabled), extents for any given inode might span across blocks from two different block group. ext4_mb_m

• CVE-2022-49165Feb 26, 2025
  affected < 5.14.21-150400.15.115.1fixed 5.14.21-150400.15.115.1

  In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers If the application queues an NV12M jpeg as output buffer, but then queues a single planar capture buffer, the kernel will crash with "Una

• CVE-2022-49164Feb 26, 2025
  affected < 5.14.21-150400.15.115.1fixed 5.14.21-150400.15.115.1

  In the Linux kernel, the following vulnerability has been resolved: powerpc/tm: Fix more userspace r13 corruption Commit cf13435b730a ("powerpc/tm: Fix userspace r13 corruption") fixes a problem in treclaim where a SLB miss can occur on the thread_struct->ckpt_regs while SCRATC

• CVE-2022-49163Feb 26, 2025
  affected < 5.14.21-150400.15.115.1fixed 5.14.21-150400.15.115.1

  In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: fix a bug of accessing array out of bounds When error occurs in parsing jpeg, the slot isn't acquired yet, it may be the default value MXC_MAX_SLOTS. If the driver access the slot using the inc

• CVE-2022-49162Feb 26, 2025
  affected < 5.14.21-150400.15.115.1fixed 5.14.21-150400.15.115.1

  In the Linux kernel, the following vulnerability has been resolved: video: fbdev: sm712fb: Fix crash in smtcfb_write() When the sm712fb driver writes three bytes to the framebuffer, the driver will crash: BUG: unable to handle page fault for address: ffffc90001ffffff R

• CVE-2022-49160Feb 26, 2025
  affected < 5.14.21-150400.15.115.1fixed 5.14.21-150400.15.115.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix crash during module load unload test During purex packet handling the driver was incorrectly freeing a pre-allocated structure. Fix this by skipping that entry. System crashed with the follo

• CVE-2022-49159Feb 26, 2025
  affected < 5.14.21-150400.15.115.1fixed 5.14.21-150400.15.115.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Implement ref count for SRB The timeout handler and the done function are racing. When qla2x00_async_iocb_timeout() starts to run it can be preempted by the normal response path (via the firmware

• CVE-2022-49157Feb 26, 2025
  affected < 5.14.21-150400.15.115.1fixed 5.14.21-150400.15.115.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix premature hw access after PCI error After a recoverable PCI error has been detected and recovered, qla driver needs to check to see if the error condition still persist and/or wait for the OS

• CVE-2022-49156Feb 26, 2025
  affected < 5.14.21-150400.15.115.1fixed 5.14.21-150400.15.115.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix scheduling while atomic The driver makes a call into midlayer (fc_remote_port_delete) which can put the thread to sleep. The thread that originates the call is in interrupt context. The combi

• CVE-2022-49155Feb 26, 2025
  affected < 5.14.21-150400.15.115.1fixed 5.14.21-150400.15.115.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() [ 12.323788] BUG: using smp_processor_id() in preemptible [00000000] code: systemd-udevd/1020 [ 12.332297] caller is qla2xxx_create_qpair+0x3

• CVE-2022-49154Feb 26, 2025
  affected < 5.14.21-150400.15.115.1fixed 5.14.21-150400.15.115.1

  In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: fix panic on out-of-bounds guest IRQ As guest_irq is coming from KVM_IRQFD API call, it may trigger crash in svm_update_pi_irte() due to out-of-bounds: crash> bt PID: 22218 TASK: ffff951a6ad74980 C

• CVE-2022-49153Feb 26, 2025
  affected < 5.14.21-150400.15.115.1fixed 5.14.21-150400.15.115.1

  In the Linux kernel, the following vulnerability has been resolved: wireguard: socket: free skb in send6 when ipv6 is disabled I got a memory leak report: unreferenced object 0xffff8881191fc040 (size 232): comm "kworker/u17:0", pid 23193, jiffies 4295238848 (age 3464.870s)

• CVE-2022-49151Feb 26, 2025
  affected < 5.14.21-150400.15.115.1fixed 5.14.21-150400.15.115.1

  In the Linux kernel, the following vulnerability has been resolved: can: mcba_usb: properly check endpoint type Syzbot reported warning in usb_submit_urb() which is caused by wrong endpoint type. We should check that in endpoint is actually present to prevent this warning. Fou

• CVE-2022-49148Feb 26, 2025
  affected < 5.14.21-150400.15.115.1fixed 5.14.21-150400.15.115.1

  In the Linux kernel, the following vulnerability has been resolved: watch_queue: Free the page array when watch_queue is dismantled Commit 7ea1a0124b6d ("watch_queue: Free the alloc bitmap when the watch_queue is torn down") took care of the bitmap, but not the page array. B

• CVE-2022-49147Feb 26, 2025
  affected < 5.14.21-150400.15.115.1fixed 5.14.21-150400.15.115.1

  In the Linux kernel, the following vulnerability has been resolved: block: Fix the maximum minor value is blk_alloc_ext_minor() ida_alloc_range(..., min, max, ...) returns values from min to max, inclusive. So, NR_EXT_DEVT is a valid idx returned by blk_alloc_ext_minor(). Thi

• CVE-2022-49145Feb 26, 2025
  affected < 5.14.21-150400.15.115.1fixed 5.14.21-150400.15.115.1

  In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Avoid out of bounds access when parsing _CPC data If the NumEntries field in the _CPC return package is less than 2, do not attempt to access the "Revision" element of that package, because it may n

• CVE-2022-49139Feb 26, 2025
  affected < 5.14.21-150400.15.121.1fixed 5.14.21-150400.15.121.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt This event is just specified for SCO and eSCO link types. On the reception of a HCI_Synchronous_Connection_Complete for a BDADDR of an existing LE con