suse/kernel-source-rt&distro=SUSE Linux Enterprise Micro 5.5

Vulnerabilities (4,559)

• CVE-2022-50277Sep 15, 2025
  affected < 5.14.21-150500.13.109.1fixed 5.14.21-150500.13.109.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: don't allow journal inode to have encrypt flag Mounting a filesystem whose journal inode has the encrypt flag causes a NULL dereference in fscrypt_limit_io_blocks() when the 'inlinecrypt' mount option is

• CVE-2022-50276Sep 15, 2025
  affected < 5.14.21-150500.13.109.1fixed 5.14.21-150500.13.109.1

  In the Linux kernel, the following vulnerability has been resolved: power: supply: fix null pointer dereferencing in power_supply_get_battery_info when kmalloc() fail to allocate memory in kasprintf(), propname will be NULL, strcmp() called by of_get_property() will cause null

• CVE-2022-50275Sep 15, 2025
  affected < 5.14.21-150500.13.109.1fixed 5.14.21-150500.13.109.1

  In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Add the missed acpi_put_table() to fix memory leak When the radeon driver reads the bios information from ACPI table in radeon_acpi_vfct_bios(), it misses to call acpi_put_table() to release the ACP

• CVE-2022-50272Sep 15, 2025
  affected < 5.14.21-150500.13.109.1fixed 5.14.21-150500.13.109.1

  In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() Wei Chen reports a kernel bug as blew: general protection fault, probably for non-canonical address KASAN: null-ptr-deref in range [0x00000000000

• CVE-2022-50271Sep 15, 2025
  affected < 5.14.21-150500.13.109.1fixed 5.14.21-150500.13.109.1

  In the Linux kernel, the following vulnerability has been resolved: vhost/vsock: Use kvmalloc/kvfree for larger packets. When copying a large file over sftp over vsock, data size is usually 32kB, and kmalloc seems to fail to try to allocate 32 32kB regions. vhost-5837: page a

• CVE-2022-50269Sep 15, 2025
  affected < 5.14.21-150500.13.109.1fixed 5.14.21-150500.13.109.1

  In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix memory leak in vkms_init() A memory leak was reported after the vkms module install failed. unreferenced object 0xffff88810bc28520 (size 16): comm "modprobe", pid 9662, jiffies 4298009455 (age

• CVE-2022-50268Sep 15, 2025
  affected < 5.14.21-150500.13.109.1fixed 5.14.21-150500.13.109.1

  In the Linux kernel, the following vulnerability has been resolved: mmc: moxart: fix return value check of mmc_add_host() mmc_add_host() may return error, if we ignore its return value, the memory that allocated in mmc_alloc_host() will be leaked and it will lead a kernel crash

• CVE-2022-50267Sep 15, 2025
  affected < 5.14.21-150500.13.109.1fixed 5.14.21-150500.13.109.1

  In the Linux kernel, the following vulnerability has been resolved: mmc: rtsx_pci: fix return value check of mmc_add_host() mmc_add_host() may return error, if we ignore its return value, the memory that allocated in mmc_alloc_host() will be leaked and it will lead a kernel cra

• CVE-2022-50266Sep 15, 2025
  affected < 5.14.21-150500.13.109.1fixed 5.14.21-150500.13.109.1

  In the Linux kernel, the following vulnerability has been resolved: kprobes: Fix check for probe enabled in kill_kprobe() In kill_kprobe(), the check whether disarm_kprobe_ftrace() needs to be called always fails. This is because before that we set the KPROBE_FLAG_GONE flag for

• CVE-2022-50264Sep 15, 2025
  affected < 5.14.21-150500.13.109.1fixed 5.14.21-150500.13.109.1

  In the Linux kernel, the following vulnerability has been resolved: clk: socfpga: Fix memory leak in socfpga_gate_init() Free @socfpga_clk and @ops on the error path to avoid memory leak issue.

• CVE-2023-53197Sep 15, 2025
  affected < 5.14.21-150500.13.109.1fixed 5.14.21-150500.13.109.1

  In the Linux kernel, the following vulnerability has been resolved: USB: uhci: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugf

• CVE-2023-53196Sep 15, 2025
  affected < 5.14.21-150500.13.109.1fixed 5.14.21-150500.13.109.1

  In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: qcom: Fix potential memory leak Function dwc3_qcom_probe() allocates memory for resource structure which is pointed by parent_res pointer. This memory is not freed. This leads to memory leak. Use sta

• CVE-2023-53193Sep 15, 2025
  affected < 5.14.21-150500.13.109.1fixed 5.14.21-150500.13.109.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini The gmc.ecc_irq is enabled by firmware per IFWI setting, and the host driver is not privileged to enable/disable the interrupt. So, it is meaningle

• CVE-2023-53189Sep 15, 2025
  affected < 5.14.21-150500.13.109.1fixed 5.14.21-150500.13.109.1

  In the Linux kernel, the following vulnerability has been resolved: ipv6/addrconf: fix a potential refcount underflow for idev Now in addrconf_mod_rs_timer(), reference idev depends on whether rs_timer is not pending. Then modify rs_timer timeout. There is a time gap in [1], d

• CVE-2023-53185Sep 15, 2025
  affected < 5.14.21-150500.13.109.1fixed 5.14.21-150500.13.109.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes A bad USB device is able to construct a service connection response message with target endpoint being ENDPOINT0 which is reserved for HTC_CTRL_RSVD_SV

• CVE-2023-53182Sep 15, 2025
  affected < 5.14.21-150500.13.109.1fixed 5.14.21-150500.13.109.1

  In the Linux kernel, the following vulnerability has been resolved: ACPICA: Avoid undefined behavior: applying zero offset to null pointer ACPICA commit 770653e3ba67c30a629ca7d12e352d83c2541b1e Before this change we see the following UBSAN stack trace in Fuchsia: #0 0x00

• CVE-2023-53181Sep 15, 2025
  affected < 5.14.21-150500.13.109.1fixed 5.14.21-150500.13.109.1

  In the Linux kernel, the following vulnerability has been resolved: dma-buf/dma-resv: Stop leaking on krealloc() failure Currently dma_resv_get_fences() will leak the previously allocated array if the fence iteration got restarted and the krealloc_array() fails. Free the old a

• CVE-2023-53179Sep 15, 2025
  affected < 5.14.21-150500.13.109.1fixed 5.14.21-150500.13.109.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c The missing IP_SET_HASH_WITH_NET0 macro in ip_set_hash_netportnet can lead to the use of wrong `CIDR_POS(c)` for calcul

• CVE-2023-53178Sep 15, 2025
  affected < 5.14.21-150500.13.109.1fixed 5.14.21-150500.13.109.1

  In the Linux kernel, the following vulnerability has been resolved: mm: fix zswap writeback race condition The zswap writeback mechanism can cause a race condition resulting in memory corruption, where a swapped out page gets swapped in with data that was written to a different

• CVE-2023-53176Sep 15, 2025
  affected < 5.14.21-150500.13.109.1fixed 5.14.21-150500.13.109.1

  In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Reinit port->pm on port specific driver unbind When we unbind a serial port hardware specific 8250 driver, the generic serial8250 driver takes over the port. After that we see an oops about 10 sec