suse/kernel-rt&distro=SUSE Real Time Module 15 SP7

Vulnerabilities (2,202)

• CVE-2025-22018Apr 16, 2025
  affected < 6.4.0-150700.7.3.1fixed 6.4.0-150700.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: atm: Fix NULL pointer dereference When MPOA_cache_impos_rcvd() receives the msg, it can trigger Null Pointer Dereference Vulnerability if both entry and holding_time are NULL. Because there is only for the situ

• CVE-2025-22005Apr 3, 2025
  affected < 6.4.0-150700.7.8.1fixed 6.4.0-150700.7.8.1

  In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). fib_check_nh_v6_gw() expects that fib6_nh_init() cleans up everything when it fails. Commit 7dd73168e273 ("ipv6: Always allocate pcpu memory in

• CVE-2025-21997Apr 3, 2025
  affected < 6.4.0-150700.7.8.1fixed 6.4.0-150700.7.8.1

  In the Linux kernel, the following vulnerability has been resolved: xsk: fix an integer overflow in xp_create_and_assign_umem() Since the i and pool->chunk_size variables are of type 'u32', their product can wrap around and then be cast to 'u64'. This can lead to two different

• CVE-2025-21987Apr 2, 2025
  affected < 6.4.0-150700.7.8.1fixed 6.4.0-150700.7.8.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: init return value in amdgpu_ttm_clear_buffer Otherwise an uninitialized value can be returned if amdgpu_res_cleared returns true for all regions. Possibly closes: https://gitlab.freedesktop.org/drm

• CVE-2025-21964Apr 1, 2025
  affected < 6.4.0-150700.7.3.1fixed 6.4.0-150700.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing acregmax mount option User-provided mount parameter acregmax of type u32 is intended to have an upper limit, but before it is validated, the value is converted from s

• CVE-2025-21963Apr 1, 2025
  affected < 6.4.0-150700.7.3.1fixed 6.4.0-150700.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing acdirmax mount option User-provided mount parameter acdirmax of type u32 is intended to have an upper limit, but before it is validated, the value is converted from s

• CVE-2025-21962Apr 1, 2025
  affected < 6.4.0-150700.7.3.1fixed 6.4.0-150700.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing closetimeo mount option User-provided mount parameter closetimeo of type u32 is intended to have an upper limit, but before it is validated, the value is converted fr

• CVE-2025-21959Apr 1, 2025
  affected < 6.4.0-150700.7.8.1fixed 6.4.0-150700.7.8.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() Since commit b36e4523d4d5 ("netfilter: nf_conncount: fix garbage collection confirm race"), `cpu` and `jiffies32` were introd

• CVE-2025-21940Apr 1, 2025
  affected < 6.4.0-150700.7.8.1fixed 6.4.0-150700.7.8.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix NULL Pointer Dereference in KFD queue Through KFD IOCTL Fuzzing we encountered a NULL pointer derefrence when calling kfd_queue_acquire_buffers. (cherry picked from commit 049e5bf3c8406f87c3d8e

• CVE-2025-21939Apr 1, 2025
  affected < 6.4.0-150700.7.8.1fixed 6.4.0-150700.7.8.1

  In the Linux kernel, the following vulnerability has been resolved: drm/xe/hmm: Don't dereference struct page pointers without notifier lock The pnfs that we obtain from hmm_range_fault() point to pages that we don't have a reference on, and the guarantee that they are still in

• CVE-2025-21938Apr 1, 2025
  affected < 6.4.0-150700.7.8.1fixed 6.4.0-150700.7.8.1

  In the Linux kernel, the following vulnerability has been resolved: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr If multiple connection requests attempt to create an implicit mptcp endpoint in parallel, more than one caller may end up in mptcp_pm_nl

• CVE-2025-21929Apr 1, 2025
  affected < 6.4.0-150700.7.3.1fixed 6.4.0-150700.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() During the `rmmod` operation for the `intel_ishtp_hid` driver, a use-after-free issue can occur in the hid_ishtp_cl_remove() function. The f

• CVE-2025-21920Apr 1, 2025
  affected < 6.4.0-150700.7.8.1fixed 6.4.0-150700.7.8.1

  In the Linux kernel, the following vulnerability has been resolved: vlan: enforce underlying device type Currently, VLAN devices can be created on top of non-ethernet devices. Besides the fact that it doesn't make much sense, this also causes a bug which leaks the address of a

• CVE-2025-21919Apr 1, 2025
  affected < 6.4.0-150700.7.3.1fixed 6.4.0-150700.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list child_cfs_rq_on_list attempts to convert a 'prev' pointer to a cfs_rq. This 'prev' pointer can originate from struct rq's leaf_cfs_rq_list, ma

• CVE-2025-21911Apr 1, 2025
  affected < 6.4.0-150700.7.8.1fixed 6.4.0-150700.7.8.1

  In the Linux kernel, the following vulnerability has been resolved: drm/imagination: avoid deadlock on fence release Do scheduler queue fence release processing on a workqueue, rather than in the release function itself. Fixes deadlock issues such as the following: [ 607.400

• CVE-2025-21901Apr 1, 2025
  affected < 6.4.0-150700.7.8.1fixed 6.4.0-150700.7.8.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Add sanity checks on rdev validity There is a possibility that ulp_irq_stop and ulp_irq_start callbacks will be called when the device is in detached state. This can cause a crash due to NULL poin

• CVE-2025-21899Apr 1, 2025
  affected < 6.4.0-150700.7.8.1fixed 6.4.0-150700.7.8.1

  In the Linux kernel, the following vulnerability has been resolved: tracing: Fix bad hist from corrupting named_triggers list The following commands causes a crash: ~# cd /sys/kernel/tracing/events/rcu/rcu_callback ~# echo 'hist:name=bad:keys=common_pid:onmax(bogus).save(com

• CVE-2025-21898Apr 1, 2025
  affected < 6.4.0-150700.7.8.1fixed 6.4.0-150700.7.8.1

  In the Linux kernel, the following vulnerability has been resolved: ftrace: Avoid potential division by zero in function_stat_show() Check whether denominator expression x * (x - 1) * 1000 mod {2^32, 2^64} produce zero and skip stddev computation in that case. For now don't ca

• CVE-2025-21880Mar 27, 2025
  affected < 6.4.0-150700.7.8.1fixed 6.4.0-150700.7.8.1

  In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: fix EFAULT handling Currently we treat EFAULT from hmm_range_fault() as a non-fatal error when called from xe_vm_userptr_pin() with the idea that we want to avoid killing the entire vm and chuck

• CVE-2025-21872Mar 27, 2025
  affected < 6.4.0-150700.7.13.1fixed 6.4.0-150700.7.13.1

  In the Linux kernel, the following vulnerability has been resolved: efi: Don't map the entire mokvar table to determine its size Currently, when validating the mokvar table, we (re)map the entire table on each iteration of the loop, adding space as we discover new entries. If t