suse/kernel-rt&distro=SUSE Real Time Module 15 SP5

Vulnerabilities (2,442)

• CVE-2023-52462MedFeb 23, 2024
  affected < 5.14.21-150500.13.47.1fixed 5.14.21-150500.13.47.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: fix check for attempt to corrupt spilled pointer When register is spilled onto a stack as a 1/2/4-byte register, we set slot_type[BPF_REG_SIZE - 1] (plus potentially few more below it, depending on actual

• CVE-2023-52458MedFeb 23, 2024
  affected < 5.14.21-150500.13.67.3fixed 5.14.21-150500.13.67.3

  In the Linux kernel, the following vulnerability has been resolved: block: add check that partition length needs to be aligned with block size Before calling add partition or resize partition, there is no check on whether the length is aligned with the logical block size. If th

• CVE-2023-52457HigFeb 23, 2024
  affected < 5.14.21-150500.13.38.1fixed 5.14.21-150500.13.38.1

  In the Linux kernel, the following vulnerability has been resolved: serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed Returning an error code from .remove() makes the driver core emit the little helpful error message: remove callback return

• CVE-2023-52456MedFeb 23, 2024
  affected < 5.14.21-150500.13.38.1fixed 5.14.21-150500.13.38.1

  In the Linux kernel, the following vulnerability has been resolved: serial: imx: fix tx statemachine deadlock When using the serial port as RS485 port, the tx statemachine is used to control the RTS pin to drive the RS485 transceiver TX_EN pin. When the TTY port is closed in th

• CVE-2023-52454MedFeb 23, 2024
  affected < 5.14.21-150500.13.47.1fixed 5.14.21-150500.13.47.1

  In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length If the host sends an H2CData command with an invalid DATAL, the kernel may crash in nvmet_tcp_build_pdu_iovec(). Unable to handle kernel

• CVE-2023-52453MedFeb 23, 2024
  affected < 5.14.21-150500.13.47.1fixed 5.14.21-150500.13.47.1

  In the Linux kernel, the following vulnerability has been resolved: hisi_acc_vfio_pci: Update migration data pointer correctly on saving/resume When the optional PRE_COPY support was added to speed up the device compatibility check, it failed to update the saving/resuming data

• CVE-2024-26593HigFeb 23, 2024
  affected < 5.14.21-150500.13.38.1fixed 5.14.21-150500.13.38.1

  In the Linux kernel, the following vulnerability has been resolved: i2c: i801: Fix block process call transactions According to the Intel datasheets, software must reset the block buffer index twice for block process call transactions: once before writing the outgoing data to t

• CVE-2024-26591MedFeb 22, 2024
  affected < 5.14.21-150500.13.38.1fixed 5.14.21-150500.13.38.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: Fix re-attachment branch in bpf_tracing_prog_attach The following case can cause a crash due to missing attach_btf: 1) load rawtp program 2) load fentry program with rawtp as target_fd 3) create tracing l

• CVE-2024-26589HigFeb 22, 2024
  affected < 5.14.21-150500.13.38.1fixed 5.14.21-150500.13.38.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS For PTR_TO_FLOW_KEYS, check_flow_keys_access() only uses fixed off for validation. However, variable offset ptr alu is not prohibited for this ptr kind. So th

• CVE-2024-26586MedFeb 22, 2024
  affected < 5.14.21-150500.13.38.1fixed 5.14.21-150500.13.38.1

  In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix stack corruption When tc filters are first added to a net device, the corresponding local port gets bound to an ACL group in the device. The group contains a list of ACLs. In turn,

• CVE-2023-52452HigFeb 22, 2024
  affected < 5.14.21-150500.13.38.1fixed 5.14.21-150500.13.38.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: Fix accesses to uninit stack slots Privileged programs are supposed to be able to read uninitialized stack memory (ever since 6715df8d5) but, before this patch, these accesses were permitted inconsistently

• CVE-2023-52451HigFeb 22, 2024
  affected < 5.14.21-150500.13.38.1fixed 5.14.21-150500.13.38.1

  In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/memhp: Fix access beyond end of drmem array dlpar_memory_remove_by_index() may access beyond the bounds of the drmem lmb array when the LMB lookup fails to match an entry with the given DRC inde

• CVE-2023-52450MedFeb 22, 2024
  affected < 5.14.21-150500.13.47.1fixed 5.14.21-150500.13.47.1

  In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology() Get logical socket id instead of physical id in discover_upi_topology() to avoid out-of-bound access on 'upi = &type->topology[ni

• CVE-2023-52449MedFeb 22, 2024
  affected < 5.14.21-150500.13.38.1fixed 5.14.21-150500.13.38.1

  In the Linux kernel, the following vulnerability has been resolved: mtd: Fix gluebi NULL pointer dereference caused by ftl notifier If both ftl.ko and gluebi.ko are loaded, the notifier of ftl triggers NULL pointer dereference when trying to access ‘gluebi->desc’ in gluebi_read

• CVE-2023-52448MedFeb 22, 2024
  affected < 5.14.21-150500.13.38.1fixed 5.14.21-150500.13.38.1

  In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump Syzkaller has reported a NULL pointer dereference when accessing rgd->rd_rgl in gfs2_rgrp_dump(). This can happen when creating rgd->rd_gl fails in r

• CVE-2023-52447MedFeb 22, 2024
  affected < 5.14.21-150500.13.38.1fixed 5.14.21-150500.13.38.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: Defer the free of inner map when necessary When updating or deleting an inner map in map array or map htab, the map may still be accessed by non-sleepable program or sleepable program. However bpf_map_fd_p

• CVE-2023-52445HigFeb 22, 2024
  affected < 5.14.21-150500.13.38.1fixed 5.14.21-150500.13.38.1

  In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix use after free on context disconnection Upon module load, a kthread is created targeting the pvr2_context_thread_func function, which may call pvr2_context_destroy and thus call kfree() on t

• CVE-2023-52443MedFeb 22, 2024
  affected < 5.14.21-150500.13.38.1fixed 5.14.21-150500.13.38.1

  In the Linux kernel, the following vulnerability has been resolved: apparmor: avoid crash when parsed profile name is empty When processing a packed profile in unpack_profile() described like "profile :ns::samba-dcerpcd /usr/lib*/samba/{,samba/}samba-dcerpcd {...}" a string

• CVE-2024-26585MedFeb 21, 2024
  affected < 5.14.21-150500.13.38.1fixed 5.14.21-150500.13.38.1

  In the Linux kernel, the following vulnerability has been resolved: tls: fix race between tx work scheduling and socket close Similarly to previous commit, the submitting thread (recvmsg/sendmsg) may exit as soon as the async crypto handler calls complete(). Reorder scheduling

• CVE-2024-26584MedFeb 21, 2024
  affected < 5.14.21-150500.13.64.1fixed 5.14.21-150500.13.64.1

  In the Linux kernel, the following vulnerability has been resolved: net: tls: handle backlogging of crypto requests Since we're setting the CRYPTO_TFM_REQ_MAY_BACKLOG flag on our requests to the crypto API, crypto_aead_{encrypt,decrypt} can return -EBUSY instead of -EINPROGRES