rpm package
suse/kernel-source-azure&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP6
pkg:rpm/suse/kernel-source-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP6
Vulnerabilities (3,769)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-38448 | — | < 6.4.0-150600.8.48.1 | 6.4.0-150600.8.48.1 | Jul 25, 2025 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_serial: Fix race condition in TTY wakeup A race condition occurs when gs_start_io() calls either gs_start_rx() or gs_start_tx(), as those functions briefly drop the port_lock for usb_ep_queue(). | ||
| CVE-2025-38445 | — | < 6.4.0-150600.8.52.1 | 6.4.0-150600.8.52.1 | Jul 25, 2025 | In the Linux kernel, the following vulnerability has been resolved: md/raid1: Fix stack memory use after return in raid1_reshape In the raid1_reshape function, newpool is allocated on the stack and assigned to conf->r1bio_pool. This results in conf->r1bio_pool.wait.head pointin | ||
| CVE-2025-38444 | — | < 6.4.0-150600.8.52.1 | 6.4.0-150600.8.52.1 | Jul 25, 2025 | In the Linux kernel, the following vulnerability has been resolved: raid10: cleanup memleak at raid10_make_request If raid10_read_request or raid10_write_request registers a new request and the REQ_NOWAIT flag is set, the code does not free the malloc from the mempool. unrefer | ||
| CVE-2025-38443 | — | < 6.4.0-150600.8.48.1 | 6.4.0-150600.8.48.1 | Jul 25, 2025 | In the Linux kernel, the following vulnerability has been resolved: nbd: fix uaf in nbd_genl_connect() error path There is a use-after-free issue in nbd: block nbd6: Receive control failed (result -104) block nbd6: shutting down sockets ======================================== | ||
| CVE-2025-38441 | — | < 6.4.0-150600.8.52.1 | 6.4.0-150600.8.52.1 | Jul 25, 2025 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() syzbot found a potential access to uninit-value in nf_flow_pppoe_proto() Blamed commit forgot the Ethernet header. BUG: KMSAN: uninit | ||
| CVE-2025-38439 | — | < 6.4.0-150600.8.52.1 | 6.4.0-150600.8.52.1 | Jul 25, 2025 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT When transmitting an XDP_REDIRECT packet, call dma_unmap_len_set() with the proper length instead of 0. This bug triggers this warning on a system with IOM | ||
| CVE-2025-38436 | Med | 5.5 | < 6.4.0-150600.8.48.1 | 6.4.0-150600.8.48.1 | Jul 25, 2025 | In the Linux kernel, the following vulnerability has been resolved: drm/scheduler: signal scheduled fence when kill job When an entity from application B is killed, drm_sched_entity_kill() removes all jobs belonging to that entity through drm_sched_entity_kill_jobs_work(). If a | |
| CVE-2025-38430 | Med | 5.5 | < 6.4.0-150600.8.48.1 | 6.4.0-150600.8.48.1 | Jul 25, 2025 | In the Linux kernel, the following vulnerability has been resolved: nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request If the request being processed is not a v4 compound request, then examining the cstate can have undefined results. This patch adds a check | |
| CVE-2025-38429 | — | < 6.4.0-150600.8.48.1 | 6.4.0-150600.8.48.1 | Jul 25, 2025 | In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Update read pointer only after buffer is written Inside mhi_ep_ring_add_element, the read pointer (rd_offset) is updated before the buffer is written, potentially causing race conditions where the | ||
| CVE-2025-38428 | — | < 6.4.0-150600.8.48.1 | 6.4.0-150600.8.48.1 | Jul 25, 2025 | In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - check record size in ims_pcu_flash_firmware() The "len" variable comes from the firmware and we generally do trust firmware, but it's always better to double check. If the "len" is too large i | ||
| CVE-2025-38426 | — | < 6.4.0-150600.8.48.1 | 6.4.0-150600.8.48.1 | Jul 25, 2025 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add basic validation for RAS header If RAS header read from EEPROM is corrupted, it could result in trying to allocate huge memory for reading the records. Add some validation to header fields. | ||
| CVE-2025-38425 | — | < 6.4.0-150600.8.48.1 | 6.4.0-150600.8.48.1 | Jul 25, 2025 | In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: check msg length in SMBUS block read For SMBUS block read, do not continue to read if the message length passed from the device is '0' or greater than the maximum allowed bytes. | ||
| CVE-2025-38424 | — | < 6.4.0-150600.8.48.1 | 6.4.0-150600.8.48.1 | Jul 25, 2025 | In the Linux kernel, the following vulnerability has been resolved: perf: Fix sample vs do_exit() Baisheng Gao reported an ARM64 crash, which Mark decoded as being a synchronous external abort -- most likely due to trying to access MMIO in bad ways. The crash further shows per | ||
| CVE-2025-38420 | — | < 6.4.0-150600.8.48.1 | 6.4.0-150600.8.48.1 | Jul 25, 2025 | In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: do not ping device which has failed to load firmware Syzkaller reports [1, 2] crashes caused by an attempts to ping the device which has failed to load firmware. Since such a device doesn't pass | ||
| CVE-2025-38419 | — | < 6.4.0-150600.8.52.1 | 6.4.0-150600.8.52.1 | Jul 25, 2025 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() When rproc->state = RPROC_DETACHED and rproc_attach() is used to attach to the remote processor, if rproc_handl | ||
| CVE-2025-38418 | — | < 6.4.0-150600.8.52.1 | 6.4.0-150600.8.52.1 | Jul 25, 2025 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Release rproc->clean_table after rproc_attach() fails When rproc->state = RPROC_DETACHED is attached to remote processor through rproc_attach(), if rproc_handle_resources() returns failure, th | ||
| CVE-2025-38416 | — | < 6.4.0-150600.8.48.1 | 6.4.0-150600.8.48.1 | Jul 25, 2025 | In the Linux kernel, the following vulnerability has been resolved: NFC: nci: uart: Set tty->disc_data only in success path Setting tty->disc_data before opening the NCI device means we need to clean it up on error paths. This also opens some short window if device starts send | ||
| CVE-2025-38415 | — | < 6.4.0-150600.8.48.1 | 6.4.0-150600.8.48.1 | Jul 25, 2025 | In the Linux kernel, the following vulnerability has been resolved: Squashfs: check return result of sb_min_blocksize Syzkaller reports an "UBSAN: shift-out-of-bounds in squashfs_bio_read" bug. Syzkaller forks multiple processes which after mounting the Squashfs filesystem, is | ||
| CVE-2025-38414 | — | < 6.4.0-150600.8.48.1 | 6.4.0-150600.8.48.1 | Jul 25, 2025 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 GCC_GCC_PCIE_HOT_RST is wrongly defined for WCN7850, causing kernel crash on some specific platforms. Since this register is divergent for WCN7850 | ||
| CVE-2025-38412 | — | < 6.4.0-150600.8.48.1 | 6.4.0-150600.8.48.1 | Jul 25, 2025 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks After retrieving WMI data blocks in sysfs callbacks, check for the validity of them before dereferencing their content. |
- CVE-2025-38448Jul 25, 2025affected < 6.4.0-150600.8.48.1fixed 6.4.0-150600.8.48.1
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_serial: Fix race condition in TTY wakeup A race condition occurs when gs_start_io() calls either gs_start_rx() or gs_start_tx(), as those functions briefly drop the port_lock for usb_ep_queue().
- CVE-2025-38445Jul 25, 2025affected < 6.4.0-150600.8.52.1fixed 6.4.0-150600.8.52.1
In the Linux kernel, the following vulnerability has been resolved: md/raid1: Fix stack memory use after return in raid1_reshape In the raid1_reshape function, newpool is allocated on the stack and assigned to conf->r1bio_pool. This results in conf->r1bio_pool.wait.head pointin
- CVE-2025-38444Jul 25, 2025affected < 6.4.0-150600.8.52.1fixed 6.4.0-150600.8.52.1
In the Linux kernel, the following vulnerability has been resolved: raid10: cleanup memleak at raid10_make_request If raid10_read_request or raid10_write_request registers a new request and the REQ_NOWAIT flag is set, the code does not free the malloc from the mempool. unrefer
- CVE-2025-38443Jul 25, 2025affected < 6.4.0-150600.8.48.1fixed 6.4.0-150600.8.48.1
In the Linux kernel, the following vulnerability has been resolved: nbd: fix uaf in nbd_genl_connect() error path There is a use-after-free issue in nbd: block nbd6: Receive control failed (result -104) block nbd6: shutting down sockets ========================================
- CVE-2025-38441Jul 25, 2025affected < 6.4.0-150600.8.52.1fixed 6.4.0-150600.8.52.1
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() syzbot found a potential access to uninit-value in nf_flow_pppoe_proto() Blamed commit forgot the Ethernet header. BUG: KMSAN: uninit
- CVE-2025-38439Jul 25, 2025affected < 6.4.0-150600.8.52.1fixed 6.4.0-150600.8.52.1
In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT When transmitting an XDP_REDIRECT packet, call dma_unmap_len_set() with the proper length instead of 0. This bug triggers this warning on a system with IOM
- affected < 6.4.0-150600.8.48.1fixed 6.4.0-150600.8.48.1
In the Linux kernel, the following vulnerability has been resolved: drm/scheduler: signal scheduled fence when kill job When an entity from application B is killed, drm_sched_entity_kill() removes all jobs belonging to that entity through drm_sched_entity_kill_jobs_work(). If a
- affected < 6.4.0-150600.8.48.1fixed 6.4.0-150600.8.48.1
In the Linux kernel, the following vulnerability has been resolved: nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request If the request being processed is not a v4 compound request, then examining the cstate can have undefined results. This patch adds a check
- CVE-2025-38429Jul 25, 2025affected < 6.4.0-150600.8.48.1fixed 6.4.0-150600.8.48.1
In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Update read pointer only after buffer is written Inside mhi_ep_ring_add_element, the read pointer (rd_offset) is updated before the buffer is written, potentially causing race conditions where the
- CVE-2025-38428Jul 25, 2025affected < 6.4.0-150600.8.48.1fixed 6.4.0-150600.8.48.1
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - check record size in ims_pcu_flash_firmware() The "len" variable comes from the firmware and we generally do trust firmware, but it's always better to double check. If the "len" is too large i
- CVE-2025-38426Jul 25, 2025affected < 6.4.0-150600.8.48.1fixed 6.4.0-150600.8.48.1
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add basic validation for RAS header If RAS header read from EEPROM is corrupted, it could result in trying to allocate huge memory for reading the records. Add some validation to header fields.
- CVE-2025-38425Jul 25, 2025affected < 6.4.0-150600.8.48.1fixed 6.4.0-150600.8.48.1
In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: check msg length in SMBUS block read For SMBUS block read, do not continue to read if the message length passed from the device is '0' or greater than the maximum allowed bytes.
- CVE-2025-38424Jul 25, 2025affected < 6.4.0-150600.8.48.1fixed 6.4.0-150600.8.48.1
In the Linux kernel, the following vulnerability has been resolved: perf: Fix sample vs do_exit() Baisheng Gao reported an ARM64 crash, which Mark decoded as being a synchronous external abort -- most likely due to trying to access MMIO in bad ways. The crash further shows per
- CVE-2025-38420Jul 25, 2025affected < 6.4.0-150600.8.48.1fixed 6.4.0-150600.8.48.1
In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: do not ping device which has failed to load firmware Syzkaller reports [1, 2] crashes caused by an attempts to ping the device which has failed to load firmware. Since such a device doesn't pass
- CVE-2025-38419Jul 25, 2025affected < 6.4.0-150600.8.52.1fixed 6.4.0-150600.8.52.1
In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() When rproc->state = RPROC_DETACHED and rproc_attach() is used to attach to the remote processor, if rproc_handl
- CVE-2025-38418Jul 25, 2025affected < 6.4.0-150600.8.52.1fixed 6.4.0-150600.8.52.1
In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Release rproc->clean_table after rproc_attach() fails When rproc->state = RPROC_DETACHED is attached to remote processor through rproc_attach(), if rproc_handle_resources() returns failure, th
- CVE-2025-38416Jul 25, 2025affected < 6.4.0-150600.8.48.1fixed 6.4.0-150600.8.48.1
In the Linux kernel, the following vulnerability has been resolved: NFC: nci: uart: Set tty->disc_data only in success path Setting tty->disc_data before opening the NCI device means we need to clean it up on error paths. This also opens some short window if device starts send
- CVE-2025-38415Jul 25, 2025affected < 6.4.0-150600.8.48.1fixed 6.4.0-150600.8.48.1
In the Linux kernel, the following vulnerability has been resolved: Squashfs: check return result of sb_min_blocksize Syzkaller reports an "UBSAN: shift-out-of-bounds in squashfs_bio_read" bug. Syzkaller forks multiple processes which after mounting the Squashfs filesystem, is
- CVE-2025-38414Jul 25, 2025affected < 6.4.0-150600.8.48.1fixed 6.4.0-150600.8.48.1
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 GCC_GCC_PCIE_HOT_RST is wrongly defined for WCN7850, causing kernel crash on some specific platforms. Since this register is divergent for WCN7850
- CVE-2025-38412Jul 25, 2025affected < 6.4.0-150600.8.48.1fixed 6.4.0-150600.8.48.1
In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks After retrieving WMI data blocks in sysfs callbacks, check for the validity of them before dereferencing their content.
Page 35 of 189