suse/kernel-source&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7

Vulnerabilities (2,262)

• CVE-2023-53356Sep 17, 2025
  affected < 6.4.0-150700.53.22.1fixed 6.4.0-150700.53.22.1

  In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_serial: Add null pointer check in gserial_suspend Consider a case where gserial_disconnect has already cleared gser->ioport. And if gserial_suspend gets called afterwards, it will lead to accessi

• CVE-2023-53354Sep 17, 2025
  affected < 6.4.0-150700.53.22.1fixed 6.4.0-150700.53.22.1

  In the Linux kernel, the following vulnerability has been resolved: skbuff: skb_segment, Call zero copy functions before using skbuff frags Commit bf5c25d60861 ("skbuff: in skb_segment, call zerocopy functions once per nskb") added the call to zero copy functions in skb_segment

• CVE-2023-53352Sep 17, 2025
  affected < 6.4.0-150700.53.22.1fixed 6.4.0-150700.53.22.1

  In the Linux kernel, the following vulnerability has been resolved: drm/ttm: check null pointer before accessing when swapping Add a check to avoid null pointer dereference as below: [ 90.002283] general protection fault, probably for non-canonical address 0xdffffc0000000000

• CVE-2023-53350Sep 17, 2025
  affected < 6.4.0-150700.53.22.1fixed 6.4.0-150700.53.22.1

  In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Fix slicing memory leak The temporary buffer storing slicing configuration data from user is only freed on error. This is a memory leak. Free the buffer unconditionally.

• CVE-2023-53343Sep 17, 2025
  affected < 6.4.0-150700.53.22.1fixed 6.4.0-150700.53.22.1

  In the Linux kernel, the following vulnerability has been resolved: icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). With some IPv6 Ext Hdr (RPL, SRv6, etc.), we can send a packet that has the link-local address as src and dst IP and will be forwarded to a

• CVE-2023-53342Sep 17, 2025
  affected < 6.4.0-150700.53.22.1fixed 6.4.0-150700.53.22.1

  In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix handling IPv4 routes with nhid Fix handling IPv4 routes referencing a nexthop via its id by replacing calls to fib_info_nh() with fib_info_nhc(). Trying to add an IPv4 route referen

• CVE-2023-53339Sep 17, 2025
  affected < 6.4.0-150700.53.22.1fixed 6.4.0-150700.53.22.1

  In the Linux kernel, the following vulnerability has been resolved: btrfs: fix BUG_ON condition in btrfs_cancel_balance Pausing and canceling balance can race to interrupt balance lead to BUG_ON panic in btrfs_cancel_balance. The BUG_ON condition in btrfs_cancel_balance does no

• CVE-2023-53338Sep 17, 2025
  affected < 6.4.0-150700.53.22.1fixed 6.4.0-150700.53.22.1

  In the Linux kernel, the following vulnerability has been resolved: lwt: Fix return values of BPF xmit ops BPF encap ops can return different types of positive values, such like NET_RX_DROP, NET_XMIT_CN, NETDEV_TX_BUSY, and so on, from function skb_do_redirect and bpf_lwt_xmit_

• CVE-2023-53336Sep 17, 2025
  affected < 6.4.0-150700.53.22.1fixed 6.4.0-150700.53.22.1

  In the Linux kernel, the following vulnerability has been resolved: media: ipu-bridge: Fix null pointer deref on SSDB/PLD parsing warnings When ipu_bridge_parse_rotation() and ipu_bridge_parse_orientation() run sensor->adev is not set yet. So if either of the dev_warn() calls

• CVE-2023-53333Sep 16, 2025
  affected < 6.4.0-150700.53.22.1fixed 6.4.0-150700.53.22.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one Eric Dumazet says: nf_conntrack_dccp_packet() has an unique: dh = skb_header_pointer(skb, dataoff, sizeof(_dh), &_dh);

• CVE-2023-53331Sep 16, 2025
  affected < 6.4.0-150700.53.22.1fixed 6.4.0-150700.53.22.1

  In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Check start of empty przs during init After commit 30696378f68a ("pstore/ram: Do not treat empty buffers as valid"), initialization would assume a prz was valid after seeing that the buffer_size is

• CVE-2023-53328Sep 16, 2025
  affected < 6.4.0-150700.53.22.1fixed 6.4.0-150700.53.22.1

  In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Enhance sanity check while generating attr_list ni_create_attr_list uses WARN_ON to catch error cases while generating attribute list, which only prints out stack trace and may not be enough. This rep

• CVE-2023-53325Sep 16, 2025
  affected < 6.4.0-150700.53.22.1fixed 6.4.0-150700.53.22.1

  In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: dp: Change logging to dev for mtk_dp_aux_transfer() Change logging from drm_{err,info}() to dev_{err,info}() in functions mtk_dp_aux_transfer() and mtk_dp_aux_do_transfer(): this will be essential

• CVE-2023-53324Sep 16, 2025
  affected < 6.4.0-150700.53.22.1fixed 6.4.0-150700.53.22.1

  In the Linux kernel, the following vulnerability has been resolved: drm/msm/mdp5: Don't leak some plane state Apparently no one noticed that mdp5 plane states leak like a sieve ever since we introduced plane_state->commit refcount a few years ago in 21a01abbe32a ("drm/atomic: F

• CVE-2023-53323Sep 16, 2025
  affected < 6.4.0-150700.53.22.1fixed 6.4.0-150700.53.22.1

  In the Linux kernel, the following vulnerability has been resolved: ext2/dax: Fix ext2_setsize when len is page aligned PAGE_ALIGN(x) macro gives the next highest value which is multiple of pagesize. But if x is already page aligned then it simply returns x. So, if x passed is

• CVE-2023-53322Sep 16, 2025
  affected < 6.4.0-150700.53.22.1fixed 6.4.0-150700.53.22.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Wait for io return on terminate rport System crash due to use after free. Current code allows terminate_rport_io to exit before making sure all IOs has returned. For FCP-2 device, IO's can hang o

• CVE-2023-53321Sep 16, 2025
  affected < 6.4.0-150700.53.22.1fixed 6.4.0-150700.53.22.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: drop short frames While technically some control frames like ACK are shorter and end after Address 1, such frames shouldn't be forwarded through wmediumd or similar userspace, so require t

• CVE-2023-53319Sep 16, 2025
  affected < 6.4.0-150700.53.22.1fixed 6.4.0-150700.53.22.1

  In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Handle kvm_arm_init failure correctly in finalize_pkvm Currently there is no synchronisation between finalize_pkvm() and kvm_arm_init() initcalls. The finalize_pkvm() proceeds happily even if kvm_ar

• CVE-2023-53316Sep 16, 2025
  affected < 6.4.0-150700.53.22.1fixed 6.4.0-150700.53.22.1

  In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: Free resources after unregistering them The DP component's unbind operation walks through the submodules to unregister and clean things up. But if the unbind happens because the DP controller itself

• CVE-2023-53314Sep 16, 2025
  affected < 6.4.0-150700.53.22.1fixed 6.4.0-150700.53.22.1

  In the Linux kernel, the following vulnerability has been resolved: fbdev/ep93xx-fb: Do not assign to struct fb_info.dev Do not assing the Linux device to struct fb_info.dev. The call to register_framebuffer() initializes the field to the fbdev device. Drivers should not overri