suse/kernel-source-rt&distro=SUSE Linux Enterprise Micro 5.5

Vulnerabilities (4,559)

• CVE-2022-50192Jun 18, 2025
  affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1

  In the Linux kernel, the following vulnerability has been resolved: spi: tegra20-slink: fix UAF in tegra_slink_remove() After calling spi_unregister_master(), the refcount of master will be decrease to 0, and it will be freed in spi_controller_release(), the device data also wi

• CVE-2022-50191Jun 18, 2025
  affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1

  In the Linux kernel, the following vulnerability has been resolved: regulator: of: Fix refcount leak bug in of_get_regulation_constraints() We should call the of_node_put() for the reference returned by of_get_child_by_name() which has increased the refcount.

• CVE-2022-50190Jun 18, 2025
  affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1

  In the Linux kernel, the following vulnerability has been resolved: spi: Fix simplification of devm_spi_register_controller This reverts commit 59ebbe40fb51 ("spi: simplify devm_spi_register_controller"). If devm_add_action() fails in devm_add_action_or_reset(), devm_spi_unreg

• CVE-2022-50188Jun 18, 2025
  affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1

  In the Linux kernel, the following vulnerability has been resolved: drm/meson: Fix refcount leak in meson_encoder_hdmi_init of_find_device_by_node() takes reference, we should use put_device() to release it when not need anymore. Add missing put_device() in error path to avoid

• CVE-2022-50187Jun 18, 2025
  affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1

  In the Linux kernel, the following vulnerability has been resolved: ath11k: fix netdev open race Make sure to allocate resources needed before registering the device. This specifically avoids having a racing open() trigger a BUG_ON() in mod_timer() when ath11k_mac_op_start() i

• CVE-2022-50186Jun 18, 2025
  affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1

  In the Linux kernel, the following vulnerability has been resolved: ath11k: fix missing skb drop on htc_tx_completion error On htc_tx_completion error the skb is not dropped. This is wrong since the completion_handler logic expect the skb to be consumed anyway even when an erro

• CVE-2022-50185Jun 18, 2025
  affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1

  In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() The last case label can write two buffers 'mc_reg_address[j]' and 'mc_data[j]' with 'j' offset equal to SMC_NISLANDS_MC_REGISTER_ARRAY_

• CVE-2022-50184Jun 18, 2025
  affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1

  In the Linux kernel, the following vulnerability has been resolved: drm/meson: encoder_hdmi: Fix refcount leak in meson_encoder_hdmi_init of_graph_get_remote_node() returns remote device nodepointer with refcount incremented, we should use of_node_put() on it when done. Add mis

• CVE-2022-50183Jun 18, 2025
  affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1

  In the Linux kernel, the following vulnerability has been resolved: drm/meson: encoder_cvbs: Fix refcount leak in meson_encoder_cvbs_init of_graph_get_remote_node() returns remote device nodepointer with refcount incremented, we should use of_node_put() on it when done. Add mis

• CVE-2022-50181Jun 18, 2025
  affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1

  In the Linux kernel, the following vulnerability has been resolved: virtio-gpu: fix a missing check to avoid NULL dereference 'cache_ent' could be set NULL inside virtio_gpu_cmd_get_capset() and it will lead to a NULL dereference by a lately use of it (i.e., ptr = cache_ent->ca

• CVE-2022-50179Jun 18, 2025
  affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1

  In the Linux kernel, the following vulnerability has been resolved: ath9k: fix use-after-free in ath9k_hif_usb_rx_cb Syzbot reported use-after-free Read in ath9k_hif_usb_rx_cb() [0]. The problem was in incorrect htc_handle->drv_priv initialization. Probable call trace which ca

• CVE-2022-50178Jun 18, 2025
  affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: 8852a: rfk: fix div 0 exception The DPK is a kind of RF calibration whose algorithm is to fine tune parameters and calibrate, and check the result. If the result isn't good enough, it could adjust

• CVE-2022-50176Jun 18, 2025
  affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1

  In the Linux kernel, the following vulnerability has been resolved: drm/mcde: Fix refcount leak in mcde_dsi_bind Every iteration of for_each_available_child_of_node() decrements the reference counter of the previous node. There is no decrement when break out from the loop and r

• CVE-2022-50175Jun 18, 2025
  affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1

  In the Linux kernel, the following vulnerability has been resolved: media: tw686x: Fix memory leak in tw686x_video_init video_device_alloc() allocates memory for vdev, when video_register_device() fails, it doesn't release the memory and leads to memory leak, call video_device_

• CVE-2022-50173Jun 18, 2025
  affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1

  In the Linux kernel, the following vulnerability has been resolved: drm/msm/mdp5: Fix global state lock backoff We need to grab the lock after the early return for !hwpipe case. Otherwise, we could have hit contention yet still returned 0. Fixes an issue that the new CONFIG_DR

• CVE-2022-50172Jun 18, 2025
  affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1

  In the Linux kernel, the following vulnerability has been resolved: mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg Free the skb if mt76u_bulk_msg fails in __mt76x02u_mcu_send_msg routine.

• CVE-2022-50171Jun 18, 2025
  affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1

  In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec - don't sleep when in softirq When kunpeng920 encryption driver is used to deencrypt and decrypt packets during the softirq, it is not allowed to use mutex lock. The kernel will report the

• CVE-2022-50169Jun 18, 2025
  affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() The simple_write_to_buffer() function will succeed if even a single byte is initialized. However, we need to initialize the whole buffer to prevent

• CVE-2022-50166Jun 18, 2025
  affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: When HCI work queue is drained, only queue chained work The HCI command, event, and data packet processing workqueue is drained to avoid deadlock in commit 76727c02c1e1 ("Bluetooth: Call drain_workqu

• CVE-2022-50165Jun 18, 2025
  affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` Commit 7a4836560a61 changes simple_write_to_buffer() with memdup_user() but it forgets to change the value to be returned that ca