suse/kernel-rt&distro=SUSE Real Time Module 15 SP7

Vulnerabilities (2,100)

• CVE-2025-37892May 20, 2025
  affected < 6.4.0-150700.7.8.1fixed 6.4.0-150700.7.8.1

  In the Linux kernel, the following vulnerability has been resolved: mtd: inftlcore: Add error check for inftl_read_oob() In INFTL_findwriteunit(), the return value of inftl_read_oob() need to be checked. A proper implementation can be found in INFTL_deleteblock(). The status wi

• CVE-2025-37891May 19, 2025
  affected < 6.4.0-150700.7.8.1fixed 6.4.0-150700.7.8.1

  In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: Fix buffer overflow at UMP SysEx message conversion The conversion function from MIDI 1.0 to UMP packet contains an internal buffer to keep the incoming MIDI bytes, and its size is 4, as it was suppo

• CVE-2025-37890May 16, 2025
  affected < 6.4.0-150700.7.8.1fixed 6.4.0-150700.7.8.1

  In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc As described in Gerrard's report [1], we have a UAF case when an hfsc class has a netem child qdisc. The crux of the issue is that hfs

• CVE-2023-53146May 14, 2025
  affected < 6.4.0-150700.7.8.1fixed 6.4.0-150700.7.8.1

  In the Linux kernel, the following vulnerability has been resolved: media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() In dw2102_i2c_transfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be passed. Malicio

• CVE-2024-28956MedMay 13, 2025
  affected < 6.4.0-150700.7.3.1fixed 6.4.0-150700.7.3.1

  Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

• CVE-2025-37889May 9, 2025
  affected < 6.4.0-150700.7.8.1fixed 6.4.0-150700.7.8.1

  In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Consistently treat platform_max as control value This reverts commit 9bdd10d57a88 ("ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min"), and makes some additional related updates. There

• CVE-2025-37888May 9, 2025
  affected < 6.4.0-150700.7.8.1fixed 6.4.0-150700.7.8.1

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table() Add NULL check for mlx5_get_flow_namespace() returns in mlx5_create_inner_ttc_table() and mlx5_create_ttc_table() to prevent NULL pointer derefer

• CVE-2025-37887May 9, 2025
  affected < 6.4.0-150700.7.3.1fixed 6.4.0-150700.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result If the FW doesn't support the PDS_CORE_CMD_FW_CONTROL command the driver might at the least print garbage and at the worst crash when the user runs th

• CVE-2025-37886May 9, 2025
  affected < 6.4.0-150700.7.3.1fixed 6.4.0-150700.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: pds_core: make wait_context part of q_info Make the wait_context a full part of the q_info struct rather than a stack variable that goes away after pdsc_adminq_post() is done so that the context is still availa

• CVE-2025-37885May 9, 2025
  affected < 6.4.0-150700.7.13.1fixed 6.4.0-150700.7.13.1

  In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Reset IRTE to host control if *new* route isn't postable Restore an IRTE back to host control (remapped or posted MSI mode) if the *new* GSI route prevents posting the IRQ directly to a vCPU, regardle

• CVE-2025-37884May 9, 2025
  affected < 6.4.0-150700.7.8.1fixed 6.4.0-150700.7.8.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: Fix deadlock between rcu_tasks_trace and event_mutex. Fix the following deadlock: CPU A _free_event() perf_kprobe_destroy() mutex_lock(&event_mutex) perf_trace_event_unreg() synchronize

• CVE-2025-37881May 9, 2025
  affected < 6.4.0-150700.7.8.1fixed 6.4.0-150700.7.8.1

  In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() The variable d->name, returned by devm_kasprintf(), could be NULL. A pointer check is added to prevent potential NULL pointer dereference. This

• CVE-2025-37879May 9, 2025
  affected < 6.4.0-150700.7.3.1fixed 6.4.0-150700.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: 9p/net: fix improper handling of bogus negative read/write replies In p9_client_write() and p9_client_read_once(), if the server incorrectly replies with success but a negative write/read count then we would co

• CVE-2025-37875May 9, 2025
  affected < 6.4.0-150700.7.8.1fixed 6.4.0-150700.7.8.1

  In the Linux kernel, the following vulnerability has been resolved: igc: fix PTM cycle trigger logic Writing to clear the PTM status 'valid' bit while the PTM cycle is triggered results in unreliable PTM operation. To fix this, clear the PTM 'trigger' and status after each PTM

• CVE-2025-37874May 9, 2025
  affected < 6.4.0-150700.7.8.1fixed 6.4.0-150700.7.8.1

  In the Linux kernel, the following vulnerability has been resolved: net: ngbe: fix memory leak in ngbe_probe() error path When ngbe_sw_init() is called, memory is allocated for wx->rss_key in wx_init_rss_key(). However, in ngbe_probe() function, the subsequent error paths after

• CVE-2025-37873May 9, 2025
  affected < 6.4.0-150700.7.8.1fixed 6.4.0-150700.7.8.1

  In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix missing ring index trim on error path Commit under Fixes converted tx_prod to be free running but missed masking it on the Tx error path. This crashes on error conditions, for example when DMA ma

• CVE-2025-37871May 9, 2025
  affected < 6.4.0-150700.7.8.1fixed 6.4.0-150700.7.8.1

  In the Linux kernel, the following vulnerability has been resolved: nfsd: decrease sc_count directly if fail to queue dl_recall A deadlock warning occurred when invoking nfs4_put_stid following a failed dl_recall queue operation: T1 T2

• CVE-2025-37870May 9, 2025
  affected < 6.4.0-150700.7.3.1fixed 6.4.0-150700.7.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: prevent hang on link training fail [Why] When link training fails, the phy clock will be disabled. However, in enable_streams, it is assumed that link training succeeded and the mux selects the

• CVE-2025-37869May 9, 2025
  affected < 6.4.0-150700.7.8.1fixed 6.4.0-150700.7.8.1

  In the Linux kernel, the following vulnerability has been resolved: drm/xe: Use local fence in error path of xe_migrate_clear The intent of the error path in xe_migrate_clear is to wait on locally generated fence and then return. The code is waiting on m->fence which could be t

• CVE-2025-37868May 9, 2025
  affected < 6.4.0-150700.7.8.1fixed 6.4.0-150700.7.8.1

  In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: fix notifier vs folio deadlock User is reporting what smells like notifier vs folio deadlock, where migrate_pages_batch() on core kernel side is holding folio lock(s) and then interacting with t