suse/kernel-rt&distro=SUSE Real Time Module 15 SP6

Vulnerabilities (3,740)

• CVE-2024-35814HigMay 17, 2024
  affected < 6.4.0-150600.10.5.1fixed 6.4.0-150600.10.5.1

  In the Linux kernel, the following vulnerability has been resolved: swiotlb: Fix double-allocation of slots due to broken alignment handling Commit bbb73a103fbb ("swiotlb: fix a braino in the alignment check fix"), which was a fix for commit 0eee5ae10256 ("swiotlb: fix slot ali

• CVE-2024-35813HigMay 17, 2024
  affected < 6.4.0-150600.10.5.1fixed 6.4.0-150600.10.5.1

  In the Linux kernel, the following vulnerability has been resolved: mmc: core: Avoid negative index with array access Commit 4d0c8d0aef63 ("mmc: core: Use mrq.sbc in close-ended ffu") assigns prev_idata = idatas[i - 1], but doesn't check that the iterator i is greater than zero

• CVE-2024-35811HigMay 17, 2024
  affected < 6.4.0-150600.10.5.1fixed 6.4.0-150600.10.5.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach This is the candidate patch of CVE-2023-47233 : https://nvd.nist.gov/vuln/detail/CVE-2023-47233 In brcm80211 driver,it starts with the following

• CVE-2024-35810HigMay 17, 2024
  affected < 6.4.0-150600.10.5.1fixed 6.4.0-150600.10.5.1

  In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix the lifetime of the bo cursor memory The cleanup can be dispatched while the atomic update is still active, which means that the memory acquired in the atomic update needs to not be invalidated

• CVE-2024-35809MedMay 17, 2024
  affected < 6.4.0-150600.10.5.1fixed 6.4.0-150600.10.5.1

  In the Linux kernel, the following vulnerability has been resolved: PCI/PM: Drain runtime-idle callbacks before driver removal A race condition between the .runtime_idle() callback and the .remove() callback in the rtsx_pcr PCI driver leads to a kernel crash due to an unhandled

• CVE-2024-35808HigMay 17, 2024
  affected < 6.4.0-150600.10.5.1fixed 6.4.0-150600.10.5.1

  In the Linux kernel, the following vulnerability has been resolved: md/dm-raid: don't call md_reap_sync_thread() directly Currently md_reap_sync_thread() is called from raid_message() directly without holding 'reconfig_mutex', this is definitely unsafe because md_reap_sync_thre

• CVE-2024-35807MedMay 17, 2024
  affected < 6.4.0-150600.10.5.1fixed 6.4.0-150600.10.5.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix corruption during on-line resize We observed a corruption during on-line resize of a file system that is larger than 16 TiB with 4k block size. With having more then 2^32 blocks resize_inode is turned

• CVE-2024-35806MedMay 17, 2024
  affected < 6.4.0-150600.10.5.1fixed 6.4.0-150600.10.5.1

  In the Linux kernel, the following vulnerability has been resolved: soc: fsl: qbman: Always disable interrupts when taking cgr_lock smp_call_function_single disables IRQs when executing the callback. To prevent deadlocks, we must disable IRQs when taking cgr_lock elsewhere. Thi

• CVE-2024-35805MedMay 17, 2024
  affected < 6.4.0-150600.10.5.1fixed 6.4.0-150600.10.5.1

  In the Linux kernel, the following vulnerability has been resolved: dm snapshot: fix lockup in dm_exception_table_exit There was reported lockup when we exit a snapshot with many exceptions. Fix this by adding "cond_resched" to the loop that frees the exceptions.

• CVE-2024-35804HigMay 17, 2024
  affected < 6.4.0-150600.10.5.1fixed 6.4.0-150600.10.5.1

  In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Mark target gfn of emulated atomic instruction as dirty When emulating an atomic access on behalf of the guest, mark the target gfn dirty if the CMPXCHG by KVM is attempted and doesn't fault. This fi

• CVE-2024-35803MedMay 17, 2024
  affected < 6.4.0-150600.10.5.1fixed 6.4.0-150600.10.5.1

  In the Linux kernel, the following vulnerability has been resolved: x86/efistub: Call mixed mode boot services on the firmware's stack Normally, the EFI stub calls into the EFI boot services using the stack that was live when the stub was entered. According to the UEFI spec, th

• CVE-2024-35801MedMay 17, 2024
  affected < 6.4.0-150600.10.5.1fixed 6.4.0-150600.10.5.1

  In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD Commit 672365477ae8 ("x86/fpu: Update XFD state where required") and commit 8bf26758ca96 ("x86/fpu: Add XFD state to fpstate") introduced a per CPU variable xfd

• CVE-2024-35800MedMay 17, 2024
  affected < 6.4.0-150600.10.5.1fixed 6.4.0-150600.10.5.1

  In the Linux kernel, the following vulnerability has been resolved: efi: fix panic in kdump kernel Check if get_next_variable() is actually valid pointer before calling it. In kdump kernel this method is set to NULL that causes panic during the kexec-ed kernel boot. Tested wit

• CVE-2024-35799MedMay 17, 2024
  affected < 6.4.0-150600.10.5.1fixed 6.4.0-150600.10.5.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Prevent crash when disable stream [Why] Disabling stream encoder invokes a function that no longer exists. [How] Check if the function declaration is NULL in disable stream encoder.

• CVE-2024-35796MedMay 17, 2024
  affected < 6.4.0-150600.10.5.1fixed 6.4.0-150600.10.5.1

  In the Linux kernel, the following vulnerability has been resolved: net: ll_temac: platform_get_resource replaced by wrong function The function platform_get_resource was replaced with devm_platform_ioremap_resource_byname and is called using 0 as name. This eventually ends up

• CVE-2024-35795MedMay 17, 2024
  affected < 6.4.0-150600.10.5.1fixed 6.4.0-150600.10.5.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix deadlock while reading mqd from debugfs An errant disk backup on my desktop got into debugfs and triggered the following deadlock scenario in the amdgpu debugfs files. The machine also hard-rese

• CVE-2023-52673MedMay 17, 2024
  affected < 6.4.0-150600.10.5.1fixed 6.4.0-150600.10.5.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix a debugfs null pointer error [WHY & HOW] Check whether get_subvp_en() callback exists before calling it.

• CVE-2023-52672MedMay 17, 2024
  affected < 6.4.0-150600.10.5.1fixed 6.4.0-150600.10.5.1

  In the Linux kernel, the following vulnerability has been resolved: pipe: wakeup wr_wait after setting max_usage Commit c73be61cede5 ("pipe: Add general notification queue support") a regression was introduced that would lock up resized pipes under certain conditions. See the r

• CVE-2023-52671MedMay 17, 2024
  affected < 6.4.0-150600.10.5.1fixed 6.4.0-150600.10.5.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix hang/underflow when transitioning to ODM4:1 [Why] Under some circumstances, disabling an OPTC and attempting to reclaim its OPP(s) for a different OPTC could cause a hang/underflow due to O

• CVE-2023-52670MedMay 17, 2024
  affected < 6.4.0-150600.10.5.1fixed 6.4.0-150600.10.5.1

  In the Linux kernel, the following vulnerability has been resolved: rpmsg: virtio: Free driver_override when rpmsg_remove() Free driver_override when rpmsg_remove(), otherwise the following memory leak will occur: unreferenced object 0xffff0000d55d7080 (size 128): comm "kwor