suse/kernel-source&distro=SUSE Linux Enterprise Server 15 SP3-LTSS

Vulnerabilities (1,483)

• CVE-2020-36784Feb 28, 2024
  affected < 5.3.18-150300.59.153.2fixed 5.3.18-150300.59.153.2

  In the Linux kernel, the following vulnerability has been resolved: i2c: cadence: fix reference leak when pm_runtime_get_sync fails The PM reference count is not expected to be incremented on return in functions cdns_i2c_master_xfer and cdns_reg_slave. However, pm_runtime_get_

• CVE-2020-36783Feb 28, 2024
  affected < 5.3.18-150300.59.158.1fixed 5.3.18-150300.59.158.1

  In the Linux kernel, the following vulnerability has been resolved: i2c: img-scb: fix reference leak when pm_runtime_get_sync fails The PM reference count is not expected to be incremented on return in functions img_i2c_xfer and img_i2c_init. However, pm_runtime_get_sync will

• CVE-2020-36782Feb 28, 2024
  affected < 5.3.18-150300.59.158.1fixed 5.3.18-150300.59.158.1

  In the Linux kernel, the following vulnerability has been resolved: i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails The PM reference count is not expected to be incremented on return in lpi2c_imx_master_enable. However, pm_runtime_get_sync will increment the

• CVE-2020-36781Feb 28, 2024
  affected < 5.3.18-150300.59.158.1fixed 5.3.18-150300.59.158.1

  In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix reference leak when pm_runtime_get_sync fails In i2c_imx_xfer() and i2c_imx_remove(), the pm reference count is not expected to be incremented on return. However, pm_runtime_get_sync will increme

• CVE-2020-36780Feb 28, 2024
  affected < 5.3.18-150300.59.158.1fixed 5.3.18-150300.59.158.1

  In the Linux kernel, the following vulnerability has been resolved: i2c: sprd: fix reference leak when pm_runtime_get_sync fails The PM reference count is not expected to be incremented on return in sprd_i2c_master_xfer() and sprd_i2c_remove(). However, pm_runtime_get_sync wil

• CVE-2021-46974Feb 27, 2024
  affected < 5.3.18-150300.59.153.2fixed 5.3.18-150300.59.153.2

  In the Linux kernel, the following vulnerability has been resolved: bpf: Fix masking negation logic upon negative dst register The negation logic for the case where the off_reg is sitting in the dst register is not correct given then we cannot just invert the add to a sub or vi

• CVE-2021-46971Feb 27, 2024
  affected < 5.3.18-150300.59.158.1fixed 5.3.18-150300.59.158.1

  In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix unconditional security_locked_down() call Currently, the lockdown state is queried unconditionally, even though its result is used only if the PERF_SAMPLE_REGS_INTR bit is set in attr.sample_type

• CVE-2021-46968Feb 27, 2024
  affected < 5.3.18-150300.59.153.2fixed 5.3.18-150300.59.153.2

  In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: fix zcard and zqueue hot-unplug memleak Tests with kvm and a kmemdebug kernel showed, that on hot unplug the zcard and zqueue structs for the unplugged card or queue are not properly freed because

• CVE-2021-46966Feb 27, 2024
  affected < 5.3.18-150300.59.153.2fixed 5.3.18-150300.59.153.2

  In the Linux kernel, the following vulnerability has been resolved: ACPI: custom_method: fix potential use-after-free issue In cm_write(), buf is always freed when reaching the end of the function. If the requested count is less than table.length, the allocated buffer will be

• CVE-2021-46964Feb 27, 2024
  affected < 5.3.18-150300.59.153.2fixed 5.3.18-150300.59.153.2

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Reserve extra IRQ vectors Commit a6dcfe08487e ("scsi: qla2xxx: Limit interrupt vectors to number of CPUs") lowers the number of allocated MSI-X vectors to the number of CPUs. That breaks vector

• CVE-2021-46963Feb 27, 2024
  affected < 5.3.18-150300.59.158.1fixed 5.3.18-150300.59.158.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand() RIP: 0010:kmem_cache_free+0xfa/0x1b0 Call Trace: qla2xxx_mqueuecommand+0x2b5/0x2c0 [qla2xxx] scsi_queue_rq+0x5e2/0xa40 __blk_mq_t

• CVE-2021-46962Feb 27, 2024
  affected < 5.3.18-150300.59.158.1fixed 5.3.18-150300.59.158.1

  In the Linux kernel, the following vulnerability has been resolved: mmc: uniphier-sd: Fix a resource leak in the remove function A 'tmio_mmc_host_free()' call is missing in the remove function, in order to balance a 'tmio_mmc_host_alloc()' call in the probe. This is done in the

• CVE-2021-46961Feb 27, 2024
  affected < 5.3.18-150300.59.158.1fixed 5.3.18-150300.59.158.1

  In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3: Do not enable irqs when handling spurious interrups We triggered the following error while running our 4.19 kernel with the pseudo-NMI patches backported to it: [ 14.816231] ------------[ cut

• CVE-2021-46960Feb 27, 2024
  affected < 5.3.18-150300.59.158.1fixed 5.3.18-150300.59.158.1

  In the Linux kernel, the following vulnerability has been resolved: cifs: Return correct error code from smb2_get_enc_key Avoid a warning if the error percolates back up: [440700.376476] CIFS VFS: \\otters.example.com crypt_message: Could not get encryption key [440700.386947]

• CVE-2021-46958Feb 27, 2024
  affected < 5.3.18-150300.59.158.1fixed 5.3.18-150300.59.158.1

  In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between transaction aborts and fsyncs leading to use-after-free There is a race between a task aborting a transaction during a commit, a task doing an fsync and the transaction kthread, which le

• CVE-2021-46956Feb 27, 2024
  affected < 5.3.18-150300.59.158.1fixed 5.3.18-150300.59.158.1

  In the Linux kernel, the following vulnerability has been resolved: virtiofs: fix memory leak in virtio_fs_probe() When accidentally passing twice the same tag to qemu, kmemleak ended up reporting a memory leak in virtiofs. Also, looking at the log I saw the following error (t

• CVE-2021-46955Feb 27, 2024
  affected < 5.3.18-150300.59.161.1fixed 5.3.18-150300.59.161.1

  In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB read while fragmenting IPv4 packets running openvswitch on kernels built with KASAN, it's possible to see the following splat while testing fragmentation of IPv4 packets: BUG: KASAN

• CVE-2021-46953Feb 27, 2024
  affected < 5.3.18-150300.59.153.2fixed 5.3.18-150300.59.153.2

  In the Linux kernel, the following vulnerability has been resolved: ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure When failing the driver probe because of invalid firmware properties, the GTDT driver unmaps the interrupt that it mapped earlier. However

• CVE-2021-46951Feb 27, 2024
  affected < 5.3.18-150300.59.158.1fixed 5.3.18-150300.59.158.1

  In the Linux kernel, the following vulnerability has been resolved: tpm: efi: Use local variable for calculating final log size When tpm_read_log_efi is called multiple times, which happens when one loads and unloads a TPM2 driver multiple times, then the global variable efi_tp

• CVE-2021-46950Feb 27, 2024
  affected < 5.3.18-150300.59.158.1fixed 5.3.18-150300.59.158.1

  In the Linux kernel, the following vulnerability has been resolved: md/raid1: properly indicate failure when ending a failed write request This patch addresses a data corruption bug in raid1 arrays using bitmaps. Without this fix, the bitmap bits for the failed I/O end up being