suse/kernel-rt_debug&distro=SUSE Real Time Module 15 SP6

Vulnerabilities (3,740)

• CVE-2025-40052Oct 28, 2025
  affected < 6.4.0-150600.10.58.1fixed 6.4.0-150600.10.58.1

  In the Linux kernel, the following vulnerability has been resolved: smb: client: fix crypto buffers in non-linear memory The crypto API, through the scatterlist API, expects input buffers to be in linear memory. We handle this with the cifs_sg_set_buf() helper that converts vm

• CVE-2025-40051HigOct 28, 2025
  affected < 6.4.0-150600.10.58.1fixed 6.4.0-150600.10.58.1

  In the Linux kernel, the following vulnerability has been resolved: vhost: vringh: Modify the return value check The return value of copy_from_iter and copy_to_iter can't be negative, check whether the copied lengths are equal.

• CVE-2025-40049Oct 28, 2025
  affected < 6.4.0-150600.10.58.1fixed 6.4.0-150600.10.58.1

  In the Linux kernel, the following vulnerability has been resolved: Squashfs: fix uninit-value in squashfs_get_parent Syzkaller reports a "KMSAN: uninit-value in squashfs_get_parent" bug. This is caused by open_by_handle_at() being called with a file handle containing an inval

• CVE-2025-40048HigOct 28, 2025
  affected < 6.4.0-150600.10.61.1fixed 6.4.0-150600.10.61.1

  In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Let userspace take care of interrupt mask Remove the logic to set interrupt mask by default in uio_hv_generic driver as the interrupt mask value is supposed to be controlled completely by the us

• CVE-2025-40044HigOct 28, 2025
  affected < 6.4.0-150600.10.58.1fixed 6.4.0-150600.10.58.1

  In the Linux kernel, the following vulnerability has been resolved: fs: udf: fix OOB read in lengthAllocDescs handling When parsing Allocation Extent Descriptor, lengthAllocDescs comes from on-disk data and must be validated against the block size. Crafted or corrupted images m

• CVE-2025-40043HigOct 28, 2025
  affected < 6.4.0-150600.10.58.1fixed 6.4.0-150600.10.58.1

  In the Linux kernel, the following vulnerability has been resolved: net: nfc: nci: Add parameter validation for packet data Syzbot reported an uninitialized value bug in nci_init_req, which was introduced by commit 5aca7966d2a7 ("Merge tag 'perf-tools-fixes-for-v6.17-2025-09-16

• CVE-2025-40040HigOct 28, 2025
  affected < 6.4.0-150600.10.61.1fixed 6.4.0-150600.10.61.1

  In the Linux kernel, the following vulnerability has been resolved: mm/ksm: fix flag-dropping behavior in ksm_madvise syzkaller discovered the following crash: (kernel BUG) [ 44.607039] ------------[ cut here ]------------ [ 44.607422] kernel BUG at mm/userfaultfd.c:2067!

• CVE-2025-40038HigOct 28, 2025
  affected < 6.4.0-150600.10.61.1fixed 6.4.0-150600.10.61.1

  In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid Skip the WRMSR and HLT fastpaths in SVM's VM-Exit handler if the next RIP isn't valid, e.g. because KVM is running with nrips=false. SVM mus

• CVE-2025-40036Oct 28, 2025
  affected < 6.4.0-150600.10.58.1fixed 6.4.0-150600.10.58.1

  In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix possible map leak in fastrpc_put_args copy_to_user() failure would cause an early return without cleaning up the fdlist, which has been updated by the DSP. This could lead to map leak. Fix th

• CVE-2025-40035Oct 28, 2025
  affected < 6.4.0-150600.10.58.1fixed 6.4.0-150600.10.58.1

  In the Linux kernel, the following vulnerability has been resolved: Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak Struct ff_effect_compat is embedded twice inside uinput_ff_upload_compat, contains internal padding. In particular, there is a hole aft

• CVE-2025-40032Oct 28, 2025
  affected < 6.4.0-150600.10.58.1fixed 6.4.0-150600.10.58.1

  In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release The fields dma_chan_tx and dma_chan_rx of the struct pci_epf_test can be NULL even after EPF initialization. Then it is prudent to che

• CVE-2025-40030Oct 28, 2025
  affected < 6.4.0-150600.10.61.1fixed 6.4.0-150600.10.61.1

  In the Linux kernel, the following vulnerability has been resolved: pinctrl: check the return value of pinmux_ops::get_function_name() While the API contract in docs doesn't specify it explicitly, the generic implementation of the get_function_name() callback from struct pinmux

• CVE-2025-40029Oct 28, 2025
  affected < 6.4.0-150600.10.58.1fixed 6.4.0-150600.10.58.1

  In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: Check return value of platform_get_resource() platform_get_resource() returns NULL in case of failure, so check its return value and propagate the error in order to prevent NULL pointer dereference

• CVE-2025-40027HigOct 28, 2025
  affected < 6.4.0-150600.10.61.1fixed 6.4.0-150600.10.61.1

  In the Linux kernel, the following vulnerability has been resolved: net/9p: fix double req put in p9_fd_cancelled Syzkaller reports a KASAN issue as below: general protection fault, probably for non-canonical address 0xfbd59c0000000021: 0000 [#1] PREEMPT SMP KASAN NOPTI KASAN:

• CVE-2025-40021Oct 24, 2025
  affected < 6.4.0-150600.10.61.1fixed 6.4.0-150600.10.61.1

  In the Linux kernel, the following vulnerability has been resolved: tracing: dynevent: Add a missing lockdown check on dynevent Since dynamic_events interface on tracefs is compatible with kprobe_events and uprobe_events, it should also check the lockdown status and reject if i

• CVE-2025-40020Oct 24, 2025
  affected < 6.4.0-150600.10.58.1fixed 6.4.0-150600.10.58.1

  In the Linux kernel, the following vulnerability has been resolved: can: peak_usb: fix shift-out-of-bounds issue Explicitly uses a 64-bit constant when the number of bits used for its shifting is 32 (which is the case for PC CAN FD interfaces supported by this driver). [mkl: u

• CVE-2025-40019Oct 24, 2025
  affected < 6.4.0-150600.10.58.1fixed 6.4.0-150600.10.58.1

  In the Linux kernel, the following vulnerability has been resolved: crypto: essiv - Check ssize for decryption and in-place encryption Move the ssize check to the start in essiv_aead_crypt so that it's also checked for decryption and in-place encryption.

• CVE-2025-40018HigOct 24, 2025
  affected < 6.4.0-150600.10.58.1fixed 6.4.0-150600.10.58.1

  In the Linux kernel, the following vulnerability has been resolved: ipvs: Defer ip_vs_ftp unregister during netns cleanup On the netns cleanup path, __ip_vs_ftp_exit() may unregister ip_vs_ftp before connections with valid cp->app pointers are flushed, leading to a use-after-fr

• CVE-2023-53733HigOct 24, 2025
  affected < 6.4.0-150600.10.58.1fixed 6.4.0-150600.10.58.1

  In the Linux kernel, the following vulnerability has been resolved: net: sched: cls_u32: Undo tcf_bind_filter if u32_replace_hw_knode When u32_replace_hw_knode fails, we need to undo the tcf_bind_filter operation done at u32_set_parms.

• CVE-2023-53731Oct 22, 2025
  affected < 6.4.0-150600.10.58.1fixed 6.4.0-150600.10.58.1

  In the Linux kernel, the following vulnerability has been resolved: netlink: fix potential deadlock in netlink_set_err() syzbot reported a possible deadlock in netlink_set_err() [1] A similar issue was fixed in commit 1d482e666b8e ("netlink: disable IRQs for netlink_lock_table