suse/kernel-source&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP6

Vulnerabilities (421)

• CVE-2023-54080Dec 24, 2025
  affected < 6.4.0-150600.23.84.1fixed 6.4.0-150600.23.84.1

  In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: skip splitting and logical rewriting on pre-alloc write When doing a relocation, there is a chance that at the time of btrfs_reloc_clone_csums(), there is no checksum for the corresponding region.

• CVE-2023-54076Dec 24, 2025
  affected < 6.4.0-150600.23.84.1fixed 6.4.0-150600.23.84.1

  In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missed ses refcounting Use new cifs_smb_ses_inc_refcount() helper to get an active reference of @ses and @ses->dfs_root_ses (if set). This will prevent @ses->dfs_root_ses of being put in the n

• CVE-2023-54072Dec 24, 2025
  affected < 6.4.0-150600.23.84.1fixed 6.4.0-150600.23.84.1

  In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix potential data race at PCM memory allocation helpers The PCM memory allocation helpers have a sanity check against too many buffer allocations. However, the check is performed without a proper l

• CVE-2023-54070Dec 24, 2025
  affected < 6.4.0-150600.23.84.1fixed 6.4.0-150600.23.84.1

  In the Linux kernel, the following vulnerability has been resolved: igb: clean up in all error paths when enabling SR-IOV After commit 50f303496d92 ("igb: Enable SR-IOV after reinit"), removing the igb module could hang or crash (depending on the machine) when the module has be

• CVE-2023-54069Dec 24, 2025
  affected < 6.4.0-150600.23.84.1fixed 6.4.0-150600.23.84.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow When we calculate the end position of ext4_free_extent, this position may be exactly where ext4_lblk_t (i.e. uint) overflows. For example, if ac_g_ex.fe_l

• CVE-2023-54067Dec 24, 2025
  affected < 6.4.0-150600.23.84.1fixed 6.4.0-150600.23.84.1

  In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race when deleting free space root from the dirty cow roots list When deleting the free space tree we are deleting the free space root from the list fs_info->dirty_cowonly_roots without taking the lo

• CVE-2023-54066Dec 24, 2025
  affected < 6.4.0-150600.23.84.1fixed 6.4.0-150600.23.84.1

  In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer In gl861_i2c_master_xfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be pa

• CVE-2023-54064Dec 24, 2025
  affected < 6.4.0-150600.23.84.1fixed 6.4.0-150600.23.84.1

  In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: Fix a memory leak when scanning for an adapter The adapter scan ssif_info_find() sets info->adapter_name if the adapter info came from SMBIOS, as it's not set in that case. However, this function ca

• CVE-2023-54060Dec 24, 2025
  affected < 6.4.0-150600.23.84.1fixed 6.4.0-150600.23.84.1

  In the Linux kernel, the following vulnerability has been resolved: iommufd: Set end correctly when doing batch carry Even though the test suite covers this it somehow became obscured that this wasn't working. The test iommufd_ioas.mock_domain.access_domain_destory would blow

• CVE-2023-54052Dec 24, 2025
  affected < 6.4.0-150600.23.84.1fixed 6.4.0-150600.23.84.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix skb leak by txs missing in AMSDU txs may be dropped if the frame is aggregated in AMSDU. When the problem shows up, some SKBs would be hold in driver to cause network stopped temporarily

• CVE-2023-54051Dec 24, 2025
  affected < 6.4.0-150600.23.84.1fixed 6.4.0-150600.23.84.1

  In the Linux kernel, the following vulnerability has been resolved: net: do not allow gso_size to be set to GSO_BY_FRAGS One missing check in virtio_net_hdr_to_skb() allowed syzbot to crash kernels again [1] Do not allow gso_size to be set to GSO_BY_FRAGS (0xffff), because thi

• CVE-2023-54049Dec 24, 2025
  affected < 6.4.0-150600.23.84.1fixed 6.4.0-150600.23.84.1

  In the Linux kernel, the following vulnerability has been resolved: rpmsg: glink: Add check for kstrdup Add check for the return value of kstrdup() and return the error if it fails in order to avoid NULL pointer dereference.

• CVE-2023-54048Dec 24, 2025
  affected < 6.4.0-150600.23.84.1fixed 6.4.0-150600.23.84.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Prevent handling any completions after qp destroy HW may generate completions that indicates QP is destroyed. Driver should not be scheduling any more completion handlers for this QP, after the QP

• CVE-2023-54045Dec 24, 2025
  affected < 6.4.0-150600.23.84.1fixed 6.4.0-150600.23.84.1

  In the Linux kernel, the following vulnerability has been resolved: audit: fix possible soft lockup in __audit_inode_child() Tracefs or debugfs maybe cause hundreds to thousands of PATH records, too many PATH records maybe cause soft lockup. For example: 1. CONFIG_KASAN=y &&

• CVE-2025-68734Dec 24, 2025
  affected < 6.4.0-150600.23.84.1fixed 6.4.0-150600.23.84.1

  In the Linux kernel, the following vulnerability has been resolved: isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() In hfcsusb_probe(), the memory allocated for ctrl_urb gets leaked when setup_instance() fails with an error code. Fix that by freeing the urb before free

• CVE-2025-68732Dec 24, 2025
  affected < 6.4.0-150600.23.84.1fixed 6.4.0-150600.23.84.1

  In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix race in syncpt alloc/free Fix race condition between host1x_syncpt_alloc() and host1x_syncpt_put() by using kref_put_mutex() instead of kref_put() + manual mutex locking. This ensures no threa

• CVE-2025-68724Dec 24, 2025
  affected < 6.4.0-150600.23.84.1fixed 6.4.0-150600.23.84.1

  In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id Use check_add_overflow() to guard against potential integer overflows when adding the binary blob lengths and the size of an asymmetric_k

• CVE-2025-68380Dec 24, 2025
  affected < 6.4.0-150600.23.84.1fixed 6.4.0-150600.23.84.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix peer HE MCS assignment In ath11k_wmi_send_peer_assoc_cmd(), peer's transmit MCS is sent to firmware as receive MCS while peer's receive MCS sent as transmit MCS, which goes against firmwire's

• CVE-2025-68362Dec 24, 2025
  affected < 6.4.0-150600.23.84.1fixed 6.4.0-150600.23.84.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb() The rtl8187_rx_cb() calculates the rx descriptor header address by subtracting its size from the skb tail pointer. However, it does not

• CVE-2025-68354Dec 24, 2025
  affected < 6.4.0-150600.23.84.1fixed 6.4.0-150600.23.84.1

  In the Linux kernel, the following vulnerability has been resolved: regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex regulator_supply_alias_list was accessed without any locking in regulator_supply_alias(), regulator_register_supply_alias(), and re