suse/kernel-source&distro=SUSE Linux Enterprise Server 12 SP5-LTSS

Vulnerabilities (1,794)

• CVE-2022-50289Sep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix memory leak in ocfs2_stack_glue_init() ocfs2_table_header should be free in ocfs2_stack_glue_init() if ocfs2_sysfs_init() failed, otherwise kmemleak will report memleak. BUG: memory leak unreference

• CVE-2022-50288Sep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure adapter->dcb would get silently freed inside qlcnic_dcb_enable() in case qlcnic_dcb_attach() would return an error, which always happens under

• CVE-2022-50285Sep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages The h->*_huge_pages counters are protected by the hugetlb_lock, but alloc_huge_page has a corner case where it can decrement the counter outs

• CVE-2022-50282Sep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: chardev: fix error handling in cdev_device_add() While doing fault injection test, I got the following report: ------------[ cut here ]------------ kobject: '(null)' (0000000039956980): is not initialized, yet

• CVE-2022-50280Sep 15, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: pnode: terminate at peers of source The propagate_mnt() function handles mount propagation when creating mounts and propagates the source mount tree @source_mnt to all applicable nodes of the destination propag

• CVE-2022-50278Sep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: PNP: fix name memory leak in pnp_alloc_dev() After commit 1fa5ae857bb1 ("driver core: get rid of struct device's bus_id string array"), the name of device is allocated dynamically, move dev_set_name() after pnp

• CVE-2022-50272Sep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() Wei Chen reports a kernel bug as blew: general protection fault, probably for non-canonical address KASAN: null-ptr-deref in range [0x00000000000

• CVE-2022-50271Sep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: vhost/vsock: Use kvmalloc/kvfree for larger packets. When copying a large file over sftp over vsock, data size is usually 32kB, and kmalloc seems to fail to try to allocate 32 32kB regions. vhost-5837: page a

• CVE-2022-50266Sep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: kprobes: Fix check for probe enabled in kill_kprobe() In kill_kprobe(), the check whether disarm_kprobe_ftrace() needs to be called always fails. This is because before that we set the KPROBE_FLAG_GONE flag for

• CVE-2022-50265Sep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: kcm: annotate data-races around kcm->rx_wait kcm->rx_psock can be read locklessly in kcm_rfree(). Annotate the read and writes accordingly. syzbot reported: BUG: KCSAN: data-race in kcm_rcv_strparser / kcm_rf

• CVE-2023-53191Sep 15, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains of_irq_find_parent() returns a node pointer with refcount incremented, We should use of_node_put() on it when not needed anymore. Add missing of

• CVE-2023-53189Sep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: ipv6/addrconf: fix a potential refcount underflow for idev Now in addrconf_mod_rs_timer(), reference idev depends on whether rs_timer is not pending. Then modify rs_timer timeout. There is a time gap in [1], d

• CVE-2023-53188Sep 15, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix race on port output assume the following setup on a single machine: 1. An openvswitch instance with one bridge and default flows 2. two network namespaces "server" and "client" 3. two ovs

• CVE-2023-53185Sep 15, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes A bad USB device is able to construct a service connection response message with target endpoint being ENDPOINT0 which is reserved for HTC_CTRL_RSVD_SV

• CVE-2023-53178Sep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: mm: fix zswap writeback race condition The zswap writeback mechanism can cause a race condition resulting in memory corruption, where a swapped out page gets swapped in with data that was written to a different

• CVE-2023-53176Sep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Reinit port->pm on port specific driver unbind When we unbind a serial port hardware specific 8250 driver, the generic serial8250 driver takes over the port. After that we see an oops about 10 sec

• CVE-2023-53174Sep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix possible memory leak if device_add() fails If device_add() returns error, the name allocated by dev_set_name() needs be freed. As the comment of device_add() says, put_device() should be used to

• CVE-2023-53165Sep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: udf: Fix uninitialized array access for some pathnames For filenames that begin with . and are between 2 and 5 characters long, UDF charset conversion code would read uninitialized memory in the output buffer.

• CVE-2023-53153Sep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Fix use after free for wext Key information in wext.connect is not reset on (re)connect and can hold data from a previous connection. Reset key data to avoid that drivers or mac80211 incorrectl

• CVE-2023-53151Sep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: md/raid10: prevent soft lockup while flush writes Currently, there is no limit for raid1/raid10 plugged bio. While flushing writes, raid1 has cond_resched() while raid10 doesn't, and too many writes can cause s