suse/kernel-source&distro=SUSE Linux Enterprise Module for Basesystem 15 SP6

Vulnerabilities (3,752)

• CVE-2024-26976HigMay 1, 2024
  affected < 6.4.0-150600.23.22.1fixed 6.4.0-150600.23.22.1

  In the Linux kernel, the following vulnerability has been resolved: KVM: Always flush async #PF workqueue when vCPU is being destroyed Always flush the per-vCPU async #PF workqueue when a vCPU is clearing its completion queue, e.g. when a VM and all its vCPUs is being destroyed

• CVE-2024-26973MedMay 1, 2024
  affected < 6.4.0-150600.23.7.2fixed 6.4.0-150600.23.7.2

  In the Linux kernel, the following vulnerability has been resolved: fat: fix uninitialized field in nostale filehandles When fat_encode_fh_nostale() encodes file handle without a parent it stores only first 10 bytes of the file handle. However the length of the file handle must

• CVE-2024-26964MedMay 1, 2024
  affected < 6.4.0-150600.23.7.2fixed 6.4.0-150600.23.7.2

  In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Add error handling in xhci_map_urb_for_dma Currently xhci_map_urb_for_dma() creates a temporary buffer and copies the SG list to the new linear buffer. But if the kzalloc_node() fails, then the follo

• CVE-2024-26963MedMay 1, 2024
  affected < 6.4.0-150600.23.7.2fixed 6.4.0-150600.23.7.2

  In the Linux kernel, the following vulnerability has been resolved: usb: dwc3-am62: fix module unload/reload behavior As runtime PM is enabled, the module can be runtime suspended when .remove() is called. Do a pm_runtime_get_sync() to make sure module is active before doing a

• CVE-2024-26962MedMay 1, 2024
  affected < 6.4.0-150600.23.7.2fixed 6.4.0-150600.23.7.2

  In the Linux kernel, the following vulnerability has been resolved: dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape For raid456, if reshape is still in progress, then IO across reshape position will wait for reshape to make progress. Howev

• CVE-2024-26961HigMay 1, 2024
  affected < 6.4.0-150600.23.7.2fixed 6.4.0-150600.23.7.2

  In the Linux kernel, the following vulnerability has been resolved: mac802154: fix llsec key resources release in mac802154_llsec_key_del mac802154_llsec_key_del() can free resources of a key directly without following the RCU rules for waiting before the end of a grace period.

• CVE-2024-26960HigMay 1, 2024
  affected < 6.4.0-150600.23.7.2fixed 6.4.0-150600.23.7.2

  In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix race between free_swap_and_cache() and swapoff() There was previously a theoretical window where swapoff() could run and teardown a swap_info_struct while a call to free_swap_and_cache() was runni

• CVE-2024-26958HigMay 1, 2024
  affected < 6.4.0-150600.23.7.2fixed 6.4.0-150600.23.7.2

  In the Linux kernel, the following vulnerability has been resolved: nfs: fix UAF in direct writes In production we have been hitting the following warning consistently ------------[ cut here ]------------ refcount_t: underflow; use-after-free. WARNING: CPU: 17 PID: 1800359 at

• CVE-2024-26957HigMay 1, 2024
  affected < 6.4.0-150600.23.7.2fixed 6.4.0-150600.23.7.2

  In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: fix reference counting on zcrypt card objects Tests with hot-plugging crytpo cards on KVM guests with debug kernel build revealed an use after free for the load field of the struct zcrypt_card. The

• CVE-2024-26953CriMay 1, 2024
  affected < 6.4.0-150600.23.30.1fixed 6.4.0-150600.23.30.1

  In the Linux kernel, the following vulnerability has been resolved: net: esp: fix bad handling of pages from page_pool When the skb is reorganized during esp_output (!esp->inline), the pages coming from the original skb fragments are supposed to be released back to the system t

• CVE-2024-26951HigMay 1, 2024
  affected < 6.4.0-150600.23.7.2fixed 6.4.0-150600.23.7.2

  In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: check for dangling peer via is_dead instead of empty list If all peers are removed via wg_peer_remove_all(), rather than setting peer_list to empty, the peer is added to a temporary list wit

• CVE-2024-26950HigMay 1, 2024
  affected < 6.4.0-150600.23.7.2fixed 6.4.0-150600.23.7.2

  In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: access device through ctx instead of peer The previous commit fixed a bug that led to a NULL peer->device being dereferenced. It's actually easier and faster performance-wise to instead get

• CVE-2024-26949MedMay 1, 2024
  affected < 6.4.0-150600.23.7.2fixed 6.4.0-150600.23.7.2

  In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: Fix NULL pointer dereference when get power limit Because powerplay_table initialization is skipped under sriov case, We check and set default lower and upper OD value if powerplay_table is NULL.

• CVE-2024-26948MedMay 1, 2024
  affected < 6.4.0-150600.23.7.2fixed 6.4.0-150600.23.7.2

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add a dc_state NULL check in dc_state_release [How] Check wheather state is NULL before releasing it.

• CVE-2024-26946MedMay 1, 2024
  affected < 6.4.0-150600.23.7.2fixed 6.4.0-150600.23.7.2

  In the Linux kernel, the following vulnerability has been resolved: kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address Read from an unsafe address with copy_from_kernel_nofault() in arch_adjust_kprobe_addr() because this function is used before checking the

• CVE-2024-26945HigMay 1, 2024
  affected < 6.4.0-150600.23.7.2fixed 6.4.0-150600.23.7.2

  In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - Fix nr_cpus < nr_iaa case If nr_cpus < nr_iaa, the calculated cpus_per_iaa will be 0, which causes a divide-by-0 in rebalance_wq_table(). Make sure cpus_per_iaa is 1 in that case, and also in the

• CVE-2024-26944HigMay 1, 2024
  affected < 6.4.0-150600.23.17.1fixed 6.4.0-150600.23.17.1

  In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix use-after-free in do_zone_finish() Shinichiro reported the following use-after-free triggered by the device replace operation in fstests btrfs/070. BTRFS info (device nullb1): scrub: finishe

• CVE-2024-26943MedMay 1, 2024
  affected < 6.4.0-150600.23.7.2fixed 6.4.0-150600.23.7.2

  In the Linux kernel, the following vulnerability has been resolved: nouveau/dmem: handle kcalloc() allocation failure The kcalloc() in nouveau_dmem_evict_chunk() will return null if the physical memory has run out. As a result, if we dereference src_pfns, dst_pfns or dma_addrs,

• CVE-2024-26940MedMay 1, 2024
  affected < 6.4.0-150600.23.7.2fixed 6.4.0-150600.23.7.2

  In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed The driver creates /sys/kernel/debug/dri/0/mob_ttm even when the corresponding ttm_resource_manager is not allocated. This leads to a crash w

• CVE-2024-26938MedMay 1, 2024
  affected < 6.4.0-150600.23.7.2fixed 6.4.0-150600.23.7.2

  In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dp_dual_mode() If we have no VBT, or the VBT didn't declare the encoder in question, we won't have the 'devdata' for the encoder. Instead of