suse/kernel-source-rt&distro=SUSE Linux Enterprise Micro 5.2

Vulnerabilities (1,394)

• CVE-2021-47163Mar 25, 2024
  affected < 5.3.18-150300.208.1fixed 5.3.18-150300.208.1

  In the Linux kernel, the following vulnerability has been resolved: tipc: wait and exit until all work queues are done On some host, a crash could be triggered simply by repeating these commands several times: # modprobe tipc # tipc bearer enable media udp name UDP1 locali

• CVE-2021-47161Mar 25, 2024
  affected < 5.3.18-150300.166.1fixed 5.3.18-150300.166.1

  In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-dspi: Fix a resource leak in an error handling path 'dspi_request_dma()' should be undone by a 'dspi_release_dma()' call in the error handling path of the probe function, as already done in the rem

• CVE-2021-47160Mar 25, 2024
  affected < 5.3.18-150300.166.1fixed 5.3.18-150300.166.1

  In the Linux kernel, the following vulnerability has been resolved: net: dsa: mt7530: fix VLAN traffic leaks PCR_MATRIX field was set to all 1's when VLAN filtering is enabled, but was not reset when it is disabled, which may cause traffic leaks: ip link add br0 type bridge v

• CVE-2021-47153Mar 25, 2024
  affected < 5.3.18-150300.166.1fixed 5.3.18-150300.166.1

  In the Linux kernel, the following vulnerability has been resolved: i2c: i801: Don't generate an interrupt on bus reset Now that the i2c-i801 driver supports interrupts, setting the KILL bit in a attempt to recover from a timed out transaction triggers an interrupt. Unfortunate

• CVE-2021-47150Mar 25, 2024
  affected < 5.3.18-150300.166.1fixed 5.3.18-150300.166.1

  In the Linux kernel, the following vulnerability has been resolved: net: fec: fix the potential memory leak in fec_enet_init() If the memory allocated for cbd_base is failed, it should free the memory allocated for the queues, otherwise it causes memory leak. And if the memory

• CVE-2021-47142Mar 25, 2024
  affected < 5.3.18-150300.166.1fixed 5.3.18-150300.166.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix a use-after-free looks like we forget to set ttm->sg to NULL. Hit panic below [ 1235.844104] general protection fault, probably for non-canonical address 0x6b6b6b6b6b6b7b4b: 0000 [#1] SMP DEBUG

• CVE-2021-47141Mar 25, 2024
  affected < 5.3.18-150300.166.1fixed 5.3.18-150300.166.1

  In the Linux kernel, the following vulnerability has been resolved: gve: Add NULL pointer checks when freeing irqs. When freeing notification blocks, we index priv->msix_vectors. If we failed to allocate priv->msix_vectors (see abort_with_msix_vectors) this could lead to a NULL

• CVE-2021-47139Mar 25, 2024
  affected < 5.3.18-150300.166.1fixed 5.3.18-150300.166.1

  In the Linux kernel, the following vulnerability has been resolved: net: hns3: put off calling register_netdev() until client initialize complete Currently, the netdevice is registered before client initializing complete. So there is a timewindow between netdevice available and

• CVE-2021-47138Mar 25, 2024
  affected < 5.3.18-150300.166.1fixed 5.3.18-150300.166.1

  In the Linux kernel, the following vulnerability has been resolved: cxgb4: avoid accessing registers when clearing filters Hardware register having the server TID base can contain invalid values when adapter is in bad state (for example, due to AER fatal error). Reading these i

• CVE-2021-47137Mar 25, 2024
  affected < 5.3.18-150300.166.1fixed 5.3.18-150300.166.1

  In the Linux kernel, the following vulnerability has been resolved: net: lantiq: fix memory corruption in RX ring In a situation where memory allocation or dma mapping fails, an invalid address is programmed into the descriptor. This can lead to memory corruption. If the memory

• CVE-2021-47136Mar 25, 2024
  affected < 5.3.18-150300.166.1fixed 5.3.18-150300.166.1

  In the Linux kernel, the following vulnerability has been resolved: net: zero-initialize tc skb extension on allocation Function skb_ext_add() doesn't initialize created skb extension with any value and leaves it up to the user. However, since extension of type TC_SKB_EXT origi

• CVE-2024-26643MedMar 21, 2024
  affected < 5.3.18-150300.172.1fixed 5.3.18-150300.172.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout While the rhashtable set gc runs asynchronously, a race allows it to collect elements from anonymous sets with timeouts while it

• CVE-2024-26642MedMar 21, 2024
  affected < 5.3.18-150300.166.1fixed 5.3.18-150300.166.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: disallow anonymous set with timeout flag Anonymous sets are never used with timeout from userspace, reject this. Exception to this rule is NFT_SET_EVAL to ensure legacy meters still work.

• CVE-2021-47131Mar 15, 2024
  affected < 5.3.18-150300.169.1fixed 5.3.18-150300.169.1

  In the Linux kernel, the following vulnerability has been resolved: net/tls: Fix use-after-free after the TLS device goes down and up When a netdev with active TLS offload goes down, tls_device_down is called to stop the offload and tear down the TLS context. However, the socke

• CVE-2021-47130Mar 15, 2024
  affected < 5.3.18-150300.166.1fixed 5.3.18-150300.166.1

  In the Linux kernel, the following vulnerability has been resolved: nvmet: fix freeing unallocated p2pmem In case p2p device was found but the p2p pool is empty, the nvme target is still trying to free the sgl from the p2p pool instead of the regular sgl pool and causing a cras

• CVE-2021-47126Mar 15, 2024
  affected < 5.3.18-150300.178.1fixed 5.3.18-150300.178.1

  In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions Reported by syzbot: HEAD commit: 90c911ad Merge tag 'fixes' of git://git.kernel.org/pub/scm.. git tree: git://git.kernel.org/pub/scm

• CVE-2021-47120Mar 15, 2024
  affected < 5.3.18-150300.166.1fixed 5.3.18-150300.166.1

  In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: fix NULL-deref on disconnect Commit 9d7b18668956 ("HID: magicmouse: add support for Apple Magic Trackpad 2") added a sanity check for an Apple trackpad but returned success instead of -ENODEV w

• CVE-2021-47119Mar 15, 2024
  affected < 5.3.18-150300.166.1fixed 5.3.18-150300.166.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix memory leak in ext4_fill_super Buffer head references must be released before calling kill_bdev(); otherwise the buffer head (and its page referenced by b_data) will not be freed by kill_bdev, and sub

• CVE-2021-47118Mar 15, 2024
  affected < 5.3.18-150300.166.1fixed 5.3.18-150300.166.1

  In the Linux kernel, the following vulnerability has been resolved: pid: take a reference when initializing `cad_pid` During boot, kernel_init_freeable() initializes `cad_pid` to the init task's struct pid. Later on, we may change `cad_pid` via a sysctl, and when this happens

• CVE-2021-47117Mar 15, 2024
  affected < 5.3.18-150300.166.1fixed 5.3.18-150300.166.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed We got follow bug_on when run fsstress with injecting IO fault: [130747.323114] kernel BUG at fs/ext4/extents_status.c:762! [130747.323117