suse/kernel-source&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Vulnerabilities (1,794)

• CVE-2023-53650Oct 7, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() If 'mipid_detect()' fails, we must free 'md' to avoid a memory leak.

• CVE-2023-53648Oct 7, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer smatch error: sound/pci/ac97/ac97_codec.c:2354 snd_ac97_mixer() error: we previously assumed 'rac97' could be null (see line 2072) remove redundant a

• CVE-2023-53647Oct 7, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Don't dereference ACPI root object handle Since the commit referenced in the Fixes: tag below the VMBus client driver is walking the ACPI namespace up from the VMBus ACPI device to the ACPI

• CVE-2023-53644Oct 7, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: media: radio-shark: Add endpoint checks The syzbot fuzzer was able to provoke a WARNING from the radio-shark2 driver: ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 1 != type 3 WARNING: CPU

• CVE-2023-53641Oct 7, 2025
  affected < 4.12.14-122.283.1fixed 4.12.14-122.283.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: hif_usb: fix memory leak of remain_skbs hif_dev->remain_skb is allocated and used exclusively in ath9k_hif_usb_rx_stream(). It is implied that an allocated remain_skb is processed and subsequently

• CVE-2023-53635Oct 7, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: fix wrong ct->timeout value (struct nf_conn)->timeout is an interval before the conntrack confirmed. After confirmed, it becomes a timestamp. It is observed that timeout of an unconfirme

• CVE-2023-53624Oct 7, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_fq: fix integer overflow of "credit" if sch_fq is configured with "initial quantum" having values greater than INT_MAX, the first assignment of "credit" does signed integer overflow to a very neg

• CVE-2023-53622Oct 7, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix possible data races in gfs2_show_options() Some fields such as gt_logd_secs of the struct gfs2_tune are accessed without holding the lock gt_spin in gfs2_show_options(): val = sdp->sd_tune.gt_logd_

• CVE-2023-53620Oct 7, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: md: fix soft lockup in status_resync status_resync() will calculate 'curr_resync - recovery_active' to show user a progress bar like following: [============>........] resync = 61.4% 'curr_resync' and 'recov

• CVE-2023-53619Oct 7, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free If nf_conntrack_init_start() fails (for example due to a register_nf_conntrack_bpf() failure), the nf_conntrack_helper_fini() clean-up path frees th

• CVE-2022-50534Oct 7, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: dm thin: Use last transaction's pmd->root when commit failed Recently we found a softlock up problem in dm thin pool btree lookup code due to corrupted metadata: Kernel panic - not syncing: softlockup: hung t

• CVE-2022-50532Oct 7, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() In mpt3sas_transport_port_add(), if sas_rphy_add() returns error, sas_rphy_free() needs be called to free the resource allocated in sas

• CVE-2022-50527Oct 7, 2025
  affected < 4.12.14-122.290.1fixed 4.12.14-122.290.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix size validation for non-exclusive domains (v4) Fix amdgpu_bo_validate_size() to check whether the TTM domain manager for the requested memory exists, else we get a kernel oops when dereferencing

• CVE-2022-50516Oct 7, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix invalid derefence of sb_lvbptr I experience issues when putting a lkbsb on the stack and have sb_lvbptr field to a dangled pointer while not using DLM_LKF_VALBLK. It will crash with the following k

• CVE-2022-50509Oct 7, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: media: coda: Add check for kmalloc As the kmalloc may return NULL pointer, it should be better to check the return value in order to avoid NULL poineter dereference, same as the others.

• CVE-2023-53540MedOct 4, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: reject auth/assoc to AP with our address If the AP uses our own address as its MLD address or BSSID, then clearly something's wrong. Reject such connections so we don't try and fail later.

• CVE-2023-53615Oct 4, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix deletion race condition System crash when using debug kernel due to link list corruption. The cause of the link list corruption is due to session deletion was allowed to queue up twice. Here

• CVE-2023-53611Oct 4, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: ipmi_si: fix a memleak in try_smi_init() Kmemleak reported the following leak info in try_smi_init(): unreferenced object 0xffff00018ecf9400 (size 1024): comm "modprobe", pid 2707763, jiffies 4300851415 (age

• CVE-2023-53604Oct 4, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path Otherwise the journal_io_cache will leak if dm_register_target() fails.

• CVE-2023-53603Oct 4, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Avoid fcport pointer dereference Klocwork reported warning of NULL pointer may be dereferenced. The routine exits when sa_ctl is NULL and fcport is allocated after the exit call thus causing NUL