suse/kernel-source&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Vulnerabilities (1,878)

• CVE-2022-49060Feb 26, 2025
  affected < 4.12.14-122.258.1fixed 4.12.14-122.258.1

  In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() dev_name() was called with dev.parent as argument but without to NULL-check it before. Solve this by checking the pointer before the call to dev_name(

• CVE-2022-49059Feb 26, 2025
  affected < 4.12.14-122.255.1fixed 4.12.14-122.255.1

  In the Linux kernel, the following vulnerability has been resolved: nfc: nci: add flush_workqueue to prevent uaf Our detector found a concurrent use-after-free bug when detaching an NCI device. The main reason for this bug is the unexpected scheduling between the used delayed m

• CVE-2022-49058Feb 26, 2025
  affected < 4.12.14-122.255.1fixed 4.12.14-122.255.1

  In the Linux kernel, the following vulnerability has been resolved: cifs: potential buffer overflow in handling symlinks Smatch printed a warning: arch/x86/crypto/poly1305_glue.c:198 poly1305_update_arch() error: __memcpy() 'dctx->buf' too small (16 vs u32max) It's caused be

• CVE-2022-49055Feb 26, 2025
  affected < 4.12.14-122.258.1fixed 4.12.14-122.258.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check for potential null return of kmalloc_array() As the kmalloc_array() may return null, the 'event_waiters[i].wait' would lead to null-pointer dereference. Therefore, it is better to check the re

• CVE-2022-49053Feb 26, 2025
  affected < 4.12.14-122.255.1fixed 4.12.14-122.255.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcmu: Fix possible page UAF tcmu_try_get_data_page() looks up pages under cmdr_lock, but it does not take refcount properly and just returns page pointer. When tcmu_try_get_data_page() returns, th

• CVE-2022-49051Feb 26, 2025
  affected < 4.12.14-122.255.1fixed 4.12.14-122.255.1

  In the Linux kernel, the following vulnerability has been resolved: net: usb: aqc111: Fix out-of-bounds accesses in RX fixup aqc111_rx_fixup() contains several out-of-bounds accesses that can be triggered by a malicious (or defective) USB device, in particular: - The metadata

• CVE-2022-49046Feb 26, 2025
  affected < 4.12.14-122.255.1fixed 4.12.14-122.255.1

  In the Linux kernel, the following vulnerability has been resolved: i2c: dev: check return value when calling dev_set_name() If dev_set_name() fails, the dev_name() is null, check the return value of dev_set_name() to avoid the null-ptr-deref.

• CVE-2022-49044Feb 26, 2025
  affected < 4.12.14-122.258.1fixed 4.12.14-122.258.1

  In the Linux kernel, the following vulnerability has been resolved: dm integrity: fix memory corruption when tag_size is less than digest size It is possible to set up dm-integrity in such a way that the "tag_size" parameter is less than the actual digest size. In this situatio

• CVE-2021-47652Feb 26, 2025
  affected < 4.12.14-122.255.1fixed 4.12.14-122.255.1

  In the Linux kernel, the following vulnerability has been resolved: video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() I got a null-ptr-deref report: BUG: kernel NULL pointer dereference, address: 0000000000000000 ... RIP: 0010:fb_destroy_modelist+0x38/0x100 ... Call

• CVE-2021-47648Feb 26, 2025
  affected < 4.12.14-122.255.1fixed 4.12.14-122.255.1

  In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix a memory leak in 'host1x_remove()' Add a missing 'host1x_channel_list_free()' call in the remove function, as already done in the error handling path of the probe function.

• CVE-2021-47645Feb 26, 2025
  affected < 4.12.14-122.255.1fixed 4.12.14-122.255.1

  In the Linux kernel, the following vulnerability has been resolved: media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com On the case tmp_dcim=1, the index of buffer is miscalculated. This generate a NULL pointer dereference later. So let's fi

• CVE-2021-47644Feb 26, 2025
  affected < 4.12.14-122.250.1fixed 4.12.14-122.250.1

  In the Linux kernel, the following vulnerability has been resolved: media: staging: media: zoran: move videodev alloc Move some code out of zr36057_init() and create new functions for handling zr->video_dev. This permit to ease code reading and fix a zr->video_dev memory leak.

• CVE-2021-47634Feb 26, 2025
  affected < 4.12.14-122.250.1fixed 4.12.14-122.250.1

  In the Linux kernel, the following vulnerability has been resolved: ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl Hulk Robot reported a KASAN report about use-after-free: ================================================================== BUG: KASAN: use-a

• CVE-2021-47633Feb 26, 2025
  affected < 4.12.14-122.255.1fixed 4.12.14-122.255.1

  In the Linux kernel, the following vulnerability has been resolved: ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 The bug was found during fuzzing. Stacktrace locates it in ath5k_eeprom_convert_pcal_info_5111. When none of the curve is selected in the loop, idx can go up t

• CVE-2025-21704HigFeb 22, 2025
  affected < 4.12.14-122.261.1fixed 4.12.14-122.261.1

  In the Linux kernel, the following vulnerability has been resolved: usb: cdc-acm: Check control transfer buffer size before access If the first fragment is shorter than struct usb_cdc_notification, we can't calculate an expected_size. Log an error and discard the notification i

• CVE-2025-21702HigFeb 18, 2025
  affected < 4.12.14-122.261.1fixed 4.12.14-122.261.1

  In the Linux kernel, the following vulnerability has been resolved: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 Expected behaviour: In case we reach scheduler's limit, pfifo_tail_enqueue() will drop a packet in scheduler's queue and decrease scheduler's qlen by one

• CVE-2025-21703Feb 18, 2025
  affected < 4.12.14-122.255.1fixed 4.12.14-122.255.1

  In the Linux kernel, the following vulnerability has been resolved: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() qdisc_tree_reduce_backlog() notifies parent qdisc only if child qdisc becomes empty, therefore we need to reduce the backlog of the child qdisc befor

• CVE-2025-21700Feb 13, 2025
  affected < 4.12.14-122.250.1fixed 4.12.14-122.250.1

  In the Linux kernel, the following vulnerability has been resolved: net: sched: Disallow replacing of child qdisc from one parent to another Lion Ackermann was able to create a UAF which can be abused for privilege escalation with the following script Step 1. create root qdisc

• CVE-2025-21690Feb 10, 2025
  affected < 4.12.14-122.250.1fixed 4.12.14-122.250.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Ratelimit warning logs to prevent VM denial of service If there's a persistent error in the hypervisor, the SCSI warning for failed I/O can flood the kernel log and max out CPU utilization, preve

• CVE-2025-21689Feb 10, 2025
  affected < 4.12.14-122.250.1fixed 4.12.14-122.250.1

  In the Linux kernel, the following vulnerability has been resolved: USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() This patch addresses a null-ptr-deref in qt2_process_read_urb() due to an incorrect bounds check in the following: if (newport > seria