suse/kernel-source-azure&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP7

Vulnerabilities (2,117)

• CVE-2023-54083Dec 24, 2025
  affected < 6.4.0-150700.20.24.1fixed 6.4.0-150700.20.24.1

  In the Linux kernel, the following vulnerability has been resolved: phy: tegra: xusb: Clear the driver reference in usb-phy dev For the dual-role port, it will assign the phy dev to usb-phy dev and use the port dev driver as the dev driver of usb-phy. When we try to destroy th

• CVE-2023-54081Dec 24, 2025
  affected < 6.4.0-150700.20.24.1fixed 6.4.0-150700.20.24.1

  In the Linux kernel, the following vulnerability has been resolved: xen: speed up grant-table reclaim When a grant entry is still in use by the remote domain, Linux must put it on a deferred list. Normally, this list is very short, because the PV network and block protocols ex

• CVE-2023-54080Dec 24, 2025
  affected < 6.4.0-150700.20.24.1fixed 6.4.0-150700.20.24.1

  In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: skip splitting and logical rewriting on pre-alloc write When doing a relocation, there is a chance that at the time of btrfs_reloc_clone_csums(), there is no checksum for the corresponding region.

• CVE-2023-54076Dec 24, 2025
  affected < 6.4.0-150700.20.24.1fixed 6.4.0-150700.20.24.1

  In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missed ses refcounting Use new cifs_smb_ses_inc_refcount() helper to get an active reference of @ses and @ses->dfs_root_ses (if set). This will prevent @ses->dfs_root_ses of being put in the n

• CVE-2023-54072Dec 24, 2025
  affected < 6.4.0-150700.20.24.1fixed 6.4.0-150700.20.24.1

  In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix potential data race at PCM memory allocation helpers The PCM memory allocation helpers have a sanity check against too many buffer allocations. However, the check is performed without a proper l

• CVE-2023-54070Dec 24, 2025
  affected < 6.4.0-150700.20.24.1fixed 6.4.0-150700.20.24.1

  In the Linux kernel, the following vulnerability has been resolved: igb: clean up in all error paths when enabling SR-IOV After commit 50f303496d92 ("igb: Enable SR-IOV after reinit"), removing the igb module could hang or crash (depending on the machine) when the module has be

• CVE-2023-54069Dec 24, 2025
  affected < 6.4.0-150700.20.24.1fixed 6.4.0-150700.20.24.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow When we calculate the end position of ext4_free_extent, this position may be exactly where ext4_lblk_t (i.e. uint) overflows. For example, if ac_g_ex.fe_l

• CVE-2023-54067Dec 24, 2025
  affected < 6.4.0-150700.20.24.1fixed 6.4.0-150700.20.24.1

  In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race when deleting free space root from the dirty cow roots list When deleting the free space tree we are deleting the free space root from the list fs_info->dirty_cowonly_roots without taking the lo

• CVE-2023-54066Dec 24, 2025
  affected < 6.4.0-150700.20.24.1fixed 6.4.0-150700.20.24.1

  In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer In gl861_i2c_master_xfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be pa

• CVE-2023-54064Dec 24, 2025
  affected < 6.4.0-150700.20.24.1fixed 6.4.0-150700.20.24.1

  In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: Fix a memory leak when scanning for an adapter The adapter scan ssif_info_find() sets info->adapter_name if the adapter info came from SMBIOS, as it's not set in that case. However, this function ca

• CVE-2023-54060Dec 24, 2025
  affected < 6.4.0-150700.20.24.1fixed 6.4.0-150700.20.24.1

  In the Linux kernel, the following vulnerability has been resolved: iommufd: Set end correctly when doing batch carry Even though the test suite covers this it somehow became obscured that this wasn't working. The test iommufd_ioas.mock_domain.access_domain_destory would blow

• CVE-2023-54052Dec 24, 2025
  affected < 6.4.0-150700.20.24.1fixed 6.4.0-150700.20.24.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix skb leak by txs missing in AMSDU txs may be dropped if the frame is aggregated in AMSDU. When the problem shows up, some SKBs would be hold in driver to cause network stopped temporarily

• CVE-2023-54051Dec 24, 2025
  affected < 6.4.0-150700.20.24.1fixed 6.4.0-150700.20.24.1

  In the Linux kernel, the following vulnerability has been resolved: net: do not allow gso_size to be set to GSO_BY_FRAGS One missing check in virtio_net_hdr_to_skb() allowed syzbot to crash kernels again [1] Do not allow gso_size to be set to GSO_BY_FRAGS (0xffff), because thi

• CVE-2023-54049Dec 24, 2025
  affected < 6.4.0-150700.20.24.1fixed 6.4.0-150700.20.24.1

  In the Linux kernel, the following vulnerability has been resolved: rpmsg: glink: Add check for kstrdup Add check for the return value of kstrdup() and return the error if it fails in order to avoid NULL pointer dereference.

• CVE-2023-54048Dec 24, 2025
  affected < 6.4.0-150700.20.24.1fixed 6.4.0-150700.20.24.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Prevent handling any completions after qp destroy HW may generate completions that indicates QP is destroyed. Driver should not be scheduling any more completion handlers for this QP, after the QP

• CVE-2023-54045Dec 24, 2025
  affected < 6.4.0-150700.20.24.1fixed 6.4.0-150700.20.24.1

  In the Linux kernel, the following vulnerability has been resolved: audit: fix possible soft lockup in __audit_inode_child() Tracefs or debugfs maybe cause hundreds to thousands of PATH records, too many PATH records maybe cause soft lockup. For example: 1. CONFIG_KASAN=y &&

• CVE-2025-68749Dec 24, 2025
  affected < 6.4.0-150700.20.24.1fixed 6.4.0-150700.20.24.1

  In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix race condition when unbinding BOs Fix 'Memory manager not clean during takedown' warning that occurs when ivpu_gem_bo_free() removes the BO from the BOs list before it gets unmapped. Then file_p

• CVE-2025-68734Dec 24, 2025
  affected < 6.4.0-150700.20.24.1fixed 6.4.0-150700.20.24.1

  In the Linux kernel, the following vulnerability has been resolved: isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() In hfcsusb_probe(), the memory allocated for ctrl_urb gets leaked when setup_instance() fails with an error code. Fix that by freeing the urb before free

• CVE-2025-68733Dec 24, 2025
  affected < 6.4.0-150700.20.27.1fixed 6.4.0-150700.20.27.1

  In the Linux kernel, the following vulnerability has been resolved: smack: fix bug: unprivileged task can create labels If an unprivileged task is allowed to relabel itself (/smack/relabel-self is not empty), it can freely create new labels by writing their names into own /proc

• CVE-2025-68732Dec 24, 2025
  affected < 6.4.0-150700.20.24.1fixed 6.4.0-150700.20.24.1

  In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix race in syncpt alloc/free Fix race condition between host1x_syncpt_alloc() and host1x_syncpt_put() by using kref_put_mutex() instead of kref_put() + manual mutex locking. This ensures no threa