suse/kernel-source&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Vulnerabilities (1,794)

• CVE-2025-71096Jan 13, 2026
  affected < 4.12.14-122.293.1fixed 4.12.14-122.293.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly The netlink response for RDMA_NL_LS_OP_IP_RESOLVE should always have a LS_NLA_TYPE_DGID attribute, it is invalid if it does not. Use the nl parsi

• CVE-2025-71093Jan 13, 2026
  affected < 4.12.14-122.293.1fixed 4.12.14-122.293.1

  In the Linux kernel, the following vulnerability has been resolved: e1000: fix OOB in e1000_tbi_should_accept() In e1000_tbi_should_accept() we read the last byte of the frame via 'data[length - 1]' to evaluate the TBI workaround. If the descriptor- reported length is zero or l

• CVE-2025-71091Jan 13, 2026
  affected < 4.12.14-122.293.1fixed 4.12.14-122.293.1

  In the Linux kernel, the following vulnerability has been resolved: team: fix check for port enabled in team_queue_override_port_prio_changed() There has been a syzkaller bug reported recently with the following trace: list_del corruption, ffff888058bea080->prev is LIST_POISON

• CVE-2025-71087Jan 13, 2026
  affected < 4.12.14-122.293.1fixed 4.12.14-122.293.1

  In the Linux kernel, the following vulnerability has been resolved: iavf: fix off-by-one issues in iavf_config_rss_reg() There are off-by-one bugs when configuring RSS hash key and lookup table, causing out-of-bounds reads to memory [1] and out-of-bounds writes to device regist

• CVE-2025-71085Jan 13, 2026
  affected < 4.12.14-122.293.1fixed 4.12.14-122.293.1

  In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() There exists a kernel oops caused by a BUG_ON(nhead < 0) at net/core/skbuff.c:2232 in pskb_expand_head(). This bug is triggered as part of t

• CVE-2025-71082Jan 13, 2026
  affected < 4.12.14-122.293.1fixed 4.12.14-122.293.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: revert use of devm_kzalloc in btusb This reverts commit 98921dbd00c4e ("Bluetooth: Use devm_kzalloc in btusb.c file"). In btusb_probe(), we use devm_kzalloc() to allocate the btusb data. This

• CVE-2025-71075Jan 13, 2026
  affected < 4.12.14-122.296.1fixed 4.12.14-122.296.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: aic94xx: fix use-after-free in device removal path The asd_pci_remove() function fails to synchronize with pending tasklets before freeing the asd_ha structure, leading to a potential use-after-free vulne

• CVE-2025-68757Jan 5, 2026
  affected < 4.12.14-122.293.1fixed 4.12.14-122.293.1

  In the Linux kernel, the following vulnerability has been resolved: drm/vgem-fence: Fix potential deadlock on release A timer that expires a vgem fence automatically in 10 seconds is now released with timer_delete_sync() from fence->ops.release() called on last dma_fence_put().

• CVE-2023-54317Dec 30, 2025
  affected < 4.12.14-122.290.1fixed 4.12.14-122.290.1

  In the Linux kernel, the following vulnerability has been resolved: dm flakey: don't corrupt the zero page When we need to zero some range on a block device, the function __blkdev_issue_zero_pages submits a write bio with the bio vector pointing to the zero page. If we use dm-f

• CVE-2023-54311Dec 30, 2025
  affected < 4.12.14-122.293.1fixed 4.12.14-122.293.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix deadlock when converting an inline directory in nojournal mode In no journal mode, ext4_finish_convert_inline_dir() can self-deadlock by calling ext4_handle_dirty_dirblock() when it already has taken

• CVE-2023-54309Dec 30, 2025
  affected < 4.12.14-122.290.1fixed 4.12.14-122.290.1

  In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation /dev/vtpmx is made visible before 'workqueue' is initialized, which can lead to a memory corruption in the worst case scenario. Address this by

• CVE-2023-54300Dec 30, 2025
  affected < 4.12.14-122.290.1fixed 4.12.14-122.290.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx For the reasons also described in commit b383e8abed41 ("wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()"), ath9k_htc_rx_msg() should

• CVE-2023-54294Dec 30, 2025
  affected < 4.12.14-122.290.1fixed 4.12.14-122.290.1

  In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix memleak of md thread In raid10_run(), if setup_conf() succeed and raid10_run() failed before setting 'mddev->thread', then in the error path 'conf->thread' is not freed. Fix the problem by setti

• CVE-2023-54289Dec 30, 2025
  affected < 4.12.14-122.290.1fixed 4.12.14-122.290.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Fix NULL dereference in error handling Smatch reported: drivers/scsi/qedf/qedf_main.c:3056 qedf_alloc_global_queues() warn: missing unwind goto? At this point in the function, nothing has been all

• CVE-2023-54287Dec 30, 2025
  affected < 4.12.14-122.293.1fixed 4.12.14-122.293.1

  In the Linux kernel, the following vulnerability has been resolved: tty: serial: imx: disable Ageing Timer interrupt request irq There maybe pending USR interrupt before requesting irq, however uart_add_one_port has not executed, so there will be kernel panic: [ 0.795668] Un

• CVE-2023-54286Dec 30, 2025
  affected < 4.12.14-122.290.1fixed 4.12.14-122.290.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace A received TKIP key may be up to 32 bytes because it may contain MIC rx/tx keys too. These are not used by iwl and copying these over over

• CVE-2023-54282Dec 30, 2025
  affected < 4.12.14-122.293.1fixed 4.12.14-122.293.1

  In the Linux kernel, the following vulnerability has been resolved: media: tuners: qt1010: replace BUG_ON with a regular error BUG_ON is unnecessary here, and in addition it confuses smatch. Replacing this with an error return help resolve this smatch warning: drivers/media/tu

• CVE-2023-54274Dec 30, 2025
  affected < 4.12.14-122.293.1fixed 4.12.14-122.293.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Add a check for valid 'mad_agent' pointer When unregistering MAD agent, srpt module has a non-null check for 'mad_agent' pointer before invoking ib_unregister_mad_agent(). This check can pass if 'mad

• CVE-2023-54271Dec 30, 2025
  affected < 4.12.14-122.290.1fixed 4.12.14-122.290.1

  In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before init blk-iocost sometimes causes the following crash: BUG: kernel NULL pointer dereference, address: 00000000000000e0 ... RIP:

• CVE-2023-54270Dec 30, 2025
  affected < 4.12.14-122.290.1fixed 4.12.14-122.290.1

  In the Linux kernel, the following vulnerability has been resolved: media: usb: siano: Fix use after free bugs caused by do_submit_urb There are UAF bugs caused by do_submit_urb(). One of the KASan reports is shown below: [ 36.403605] BUG: KASAN: use-after-free in worker_thr