suse/kernel-source&distro=SUSE Linux Enterprise Server 15 SP4-LTSS

Vulnerabilities (2,830)

• CVE-2021-47204Apr 10, 2024
  affected < 5.14.21-150400.24.119.1fixed 5.14.21-150400.24.119.1

  In the Linux kernel, the following vulnerability has been resolved: net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove Access to netdev after free_netdev() will cause use-after-free bug. Move debug log before free_netdev() call to avoid it.

• CVE-2021-47203Apr 10, 2024
  affected < 5.14.21-150400.24.119.1fixed 5.14.21-150400.24.119.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() When parsing the txq list in lpfc_drain_txq(), the driver attempts to pass the requests to the adapter. If such an attempt fails, a local "fail_msg" str

• CVE-2021-47202Apr 10, 2024
  affected < 5.14.21-150400.24.119.1fixed 5.14.21-150400.24.119.1

  In the Linux kernel, the following vulnerability has been resolved: thermal: Fix NULL pointer dereferences in of_thermal_ functions of_parse_thermal_zones() parses the thermal-zones node and registers a thermal_zone device for each subnode. However, if a thermal zone is consumi

• CVE-2021-47201Apr 10, 2024
  affected < 5.14.21-150400.24.119.1fixed 5.14.21-150400.24.119.1

  In the Linux kernel, the following vulnerability has been resolved: iavf: free q_vectors before queues in iavf_disable_vf iavf_free_queues() clears adapter->num_active_queues, which iavf_free_q_vectors() relies on, so swap the order of these two function calls in iavf_disable_v

• CVE-2021-47200Apr 10, 2024
  affected < 5.14.21-150400.24.119.1fixed 5.14.21-150400.24.119.1

  In the Linux kernel, the following vulnerability has been resolved: drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap drm_gem_ttm_mmap() drops a reference to the gem object on success. If the gem object's refcount == 1 on entry to drm_gem_prime_mmap(), that drop will

• CVE-2021-47199Apr 10, 2024
  affected < 5.14.21-150400.24.119.1fixed 5.14.21-150400.24.119.1

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: CT, Fix multiple allocations and memleak of mod acts CT clear action offload adds additional mod hdr actions to the flow's original mod actions in order to clear the registers which hold ct_state. Wh

• CVE-2021-47198Apr 10, 2024
  affected < 5.14.21-150400.24.119.1fixed 5.14.21-150400.24.119.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine An error is detected with the following report when unloading the driver: "KASAN: use-after-free in lpfc_unreg_rpi+0x1b1b" The NLP_REG_LOGIN_SEND nl

• CVE-2021-47197Apr 10, 2024
  affected < 5.14.21-150400.24.119.1fixed 5.14.21-150400.24.119.1

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove() Prior to this patch in case mlx5_core_destroy_cq() failed it proceeds to rest of destroy operations. mlx5_core_destroy_cq() could be called again by

• CVE-2021-47196Apr 10, 2024
  affected < 5.14.21-150400.24.119.1fixed 5.14.21-150400.24.119.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Set send and receive CQ before forwarding to the driver Preset both receive and send CQ pointers prior to call to the drivers and overwrite it later again till the mlx4 is going to be changed do not

• CVE-2021-47195Apr 10, 2024
  affected < 5.14.21-150400.24.119.1fixed 5.14.21-150400.24.119.1

  In the Linux kernel, the following vulnerability has been resolved: spi: fix use-after-free of the add_lock mutex Commit 6098475d4cb4 ("spi: Fix deadlock when adding SPI controllers on SPI buses") introduced a per-controller mutex. But mutex_unlock() of said lock is called afte

• CVE-2021-47194Apr 10, 2024
  affected < 5.14.21-150400.24.119.1fixed 5.14.21-150400.24.119.1

  In the Linux kernel, the following vulnerability has been resolved: cfg80211: call cfg80211_stop_ap when switch from P2P_GO type If the userspace tools switch from NL80211_IFTYPE_P2P_GO to NL80211_IFTYPE_ADHOC via send_msg(NL80211_CMD_SET_INTERFACE), it does not call the cleanu

• CVE-2021-47193Apr 10, 2024
  affected < 5.14.21-150400.24.119.1fixed 5.14.21-150400.24.119.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Fix memory leak during rmmod Driver failed to release all memory allocated. This would lead to memory leak during driver removal. Properly free memory when the module is removed.

• CVE-2021-47192Apr 10, 2024
  affected < 5.14.21-150400.24.119.1fixed 5.14.21-150400.24.119.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: core: sysfs: Fix hang when device state is set via sysfs This fixes a regression added with: commit f0f82e2476f6 ("scsi: core: Fix capacity set to zero after offlinining device") The problem is that aft

• CVE-2021-47191Apr 10, 2024
  affected < 5.14.21-150400.24.119.1fixed 5.14.21-150400.24.119.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_debug: Fix out-of-bound read in resp_readcap16() The following warning was observed running syzkaller: [ 3813.830724] sg_write: data in/out 65466/242 bytes for SCSI command 0x9e-- guessing data in;

• CVE-2021-47189Apr 10, 2024
  affected < 5.14.21-150400.24.119.1fixed 5.14.21-150400.24.119.1

  In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory ordering between normal and ordered work functions Ordered work functions aren't guaranteed to be handled by the same thread which executed the normal work functions. The only way execution be

• CVE-2021-47188Apr 10, 2024
  affected < 5.14.21-150400.24.119.1fixed 5.14.21-150400.24.119.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Improve SCSI abort handling The following has been observed on a test setup: WARNING: CPU: 4 PID: 250 at drivers/scsi/ufs/ufshcd.c:2737 ufshcd_queuecommand+0x468/0x65c Call trace: ufshcd_queu

• CVE-2021-47187Apr 10, 2024
  affected < 5.14.21-150400.24.119.1fixed 5.14.21-150400.24.119.1

  In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency The entry/exit latency and minimum residency in state for the idle states of MSM8998 were ..bad: first of all, for all of them the timings

• CVE-2021-47185Apr 10, 2024
  affected < 5.14.21-150400.24.119.1fixed 5.14.21-150400.24.119.1

  In the Linux kernel, the following vulnerability has been resolved: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc When running ltp testcase(ltp/testcases/kernel/pty/pty04.c) with arm64, there is a soft lockup, which look like this one: Workqueue: events_unbound

• CVE-2021-47184Apr 10, 2024
  affected < 5.14.21-150400.24.119.1fixed 5.14.21-150400.24.119.1

  In the Linux kernel, the following vulnerability has been resolved: i40e: Fix NULL ptr dereference on VSI filter sync Remove the reason of null pointer dereference in sync VSI filters. Added new I40E_VSI_RELEASING flag to signalize deleting and releasing of VSI resources to syn

• CVE-2021-47183Apr 10, 2024
  affected < 5.14.21-150400.24.119.1fixed 5.14.21-150400.24.119.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix link down processing to address NULL pointer dereference If an FC link down transition while PLOGIs are outstanding to fabric well known addresses, outstanding ABTS requests may result in a NULL