rpm package
suse/kernel-source-rt&distro=SUSE Linux Enterprise Micro 5.5
pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.5
Vulnerabilities (4,559)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-50139 | — | < 5.14.21-150500.13.100.1 | 5.14.21-150500.13.100.1 | Jun 18, 2025 | In the Linux kernel, the following vulnerability has been resolved: usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc() We should call of_node_put() for the reference returned by of_get_child_by_name() which has increased the refcount. | ||
| CVE-2022-50138 | — | < 5.14.21-150500.13.100.1 | 5.14.21-150500.13.100.1 | Jun 18, 2025 | In the Linux kernel, the following vulnerability has been resolved: RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() __qedr_alloc_mr() allocates a memory chunk for "mr->info.pbl_table" with init_mr_info(). When rdma_alloc_tid() and rdma_register_tid() fail, "mr" is rel | ||
| CVE-2022-50137 | — | < 5.14.21-150500.13.100.1 | 5.14.21-150500.13.100.1 | Jun 18, 2025 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix a window for use-after-free During a destroy CQ an interrupt may cause processing of a CQE after CQ resources are freed by irdma_cq_free_rsrc(). Fix this by moving the call to irdma_cq_free_rsrc | ||
| CVE-2022-50136 | — | < 5.14.21-150500.13.100.1 | 5.14.21-150500.13.100.1 | Jun 18, 2025 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event If siw_recv_mpa_rr returns -EAGAIN, it means that the MPA reply hasn't been received completely, and should not report IW_CM_EVENT_CONNECT_REPLY | ||
| CVE-2022-50135 | — | < 5.14.21-150500.13.100.1 | 5.14.21-150500.13.100.1 | Jun 18, 2025 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix BUG: KASAN: null-ptr-deref in rxe_qp_do_cleanup The function rxe_create_qp calls rxe_qp_from_init. If some error occurs, the error handler of function rxe_qp_from_init will set both scq and rcq to | ||
| CVE-2022-50134 | — | < 5.14.21-150500.13.100.1 | 5.14.21-150500.13.100.1 | Jun 18, 2025 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: fix potential memory leak in setup_base_ctxt() setup_base_ctxt() allocates a memory chunk for uctxt->groups with hfi1_alloc_ctxt_rcv_groups(). When init_user_ctxt() fails, uctxt->groups is not releas | ||
| CVE-2022-50133 | — | < 5.14.21-150500.13.100.1 | 5.14.21-150500.13.100.1 | Jun 18, 2025 | In the Linux kernel, the following vulnerability has been resolved: usb: xhci_plat_remove: avoid NULL dereference Since commit 4736ebd7fcaff1eb8481c140ba494962847d6e0a ("usb: host: xhci-plat: omit shared hcd if either root hub has no ports") xhci->shared_hcd can be NULL, which | ||
| CVE-2022-50132 | — | < 5.14.21-150500.13.100.1 | 5.14.21-150500.13.100.1 | Jun 18, 2025 | In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable() If 'ep' is NULL, result of ep_to_cdns3_ep(ep) is invalid pointer and its dereference with priv_ep->cdns3_d | ||
| CVE-2022-50131 | — | < 5.14.21-150500.13.100.1 | 5.14.21-150500.13.100.1 | Jun 18, 2025 | In the Linux kernel, the following vulnerability has been resolved: HID: mcp2221: prevent a buffer overflow in mcp_smbus_write() Smatch Warning: drivers/hid/hid-mcp2221.c:388 mcp_smbus_write() error: __memcpy() '&mcp->txbuf[5]' too small (59 vs 255) drivers/hid/hid-mcp2221.c:38 | ||
| CVE-2022-50129 | — | < 5.14.21-150500.13.100.1 | 5.14.21-150500.13.100.1 | Jun 18, 2025 | In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Fix a use-after-free Change the LIO port members inside struct srpt_port from regular members into pointers. Allocate the LIO port data structures from inside srpt_make_tport() and free these from in | ||
| CVE-2022-50127 | — | < 5.14.21-150500.13.100.1 | 5.14.21-150500.13.100.1 | Jun 18, 2025 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix error unwind in rxe_create_qp() In the function rxe_create_qp(), rxe_qp_from_init() is called to initialize qp, internally things like the spin locks are not setup until rxe_qp_init_req(). If an | ||
| CVE-2022-50126 | — | < 5.14.21-150500.13.100.1 | 5.14.21-150500.13.100.1 | Jun 18, 2025 | In the Linux kernel, the following vulnerability has been resolved: jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted Following process will fail assertion 'jh->b_frozen_data == NULL' in jbd2_journal_dirty_metadata(): jbd2_journal_ | ||
| CVE-2022-50125 | — | < 5.14.21-150500.13.100.1 | 5.14.21-150500.13.100.1 | Jun 18, 2025 | In the Linux kernel, the following vulnerability has been resolved: ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probe of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing o | ||
| CVE-2022-50124 | — | < 5.14.21-150500.13.100.1 | 5.14.21-150500.13.100.1 | Jun 18, 2025 | In the Linux kernel, the following vulnerability has been resolved: ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_nod | ||
| CVE-2022-50121 | — | < 5.14.21-150500.13.100.1 | 5.14.21-150500.13.100.1 | Jun 18, 2025 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init Every iteration of for_each_available_child_of_node() decrements the reference count of the previous node. When breaking early from a for_each_avail | ||
| CVE-2022-50120 | — | < 5.14.21-150500.13.100.1 | 5.14.21-150500.13.100.1 | Jun 18, 2025 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: imx_rproc: Fix refcount leak in imx_rproc_addr_init of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not needed anymore. This function has | ||
| CVE-2022-50118 | — | < 5.14.21-150500.13.100.1 | 5.14.21-150500.13.100.1 | Jun 18, 2025 | In the Linux kernel, the following vulnerability has been resolved: powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable commit 2c9ac51b850d ("powerpc/perf: Fix PMU callbacks to clear pending PMI before resetting an overflown PMC | ||
| CVE-2022-50117 | — | < 5.14.21-150500.13.100.1 | 5.14.21-150500.13.100.1 | Jun 18, 2025 | In the Linux kernel, the following vulnerability has been resolved: vfio: Split migration ops from main device ops vfio core checks whether the driver sets some migration op (e.g. set_state/get_state) and accordingly calls its op. However, currently mlx5 driver sets the above | ||
| CVE-2022-50115 | — | < 5.14.21-150500.13.100.1 | 5.14.21-150500.13.100.1 | Jun 18, 2025 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-topology: Prevent double freeing of ipc_control_data via load_bytes We have sanity checks for byte controls and if any of the fail the locally allocated scontrol->ipc_control_data is freed up, b | ||
| CVE-2022-50112 | — | < 5.14.21-150500.13.100.1 | 5.14.21-150500.13.100.1 | Jun 18, 2025 | In the Linux kernel, the following vulnerability has been resolved: rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. |
- CVE-2022-50139Jun 18, 2025affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1
In the Linux kernel, the following vulnerability has been resolved: usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc() We should call of_node_put() for the reference returned by of_get_child_by_name() which has increased the refcount.
- CVE-2022-50138Jun 18, 2025affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1
In the Linux kernel, the following vulnerability has been resolved: RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() __qedr_alloc_mr() allocates a memory chunk for "mr->info.pbl_table" with init_mr_info(). When rdma_alloc_tid() and rdma_register_tid() fail, "mr" is rel
- CVE-2022-50137Jun 18, 2025affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1
In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix a window for use-after-free During a destroy CQ an interrupt may cause processing of a CQE after CQ resources are freed by irdma_cq_free_rsrc(). Fix this by moving the call to irdma_cq_free_rsrc
- CVE-2022-50136Jun 18, 2025affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1
In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event If siw_recv_mpa_rr returns -EAGAIN, it means that the MPA reply hasn't been received completely, and should not report IW_CM_EVENT_CONNECT_REPLY
- CVE-2022-50135Jun 18, 2025affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix BUG: KASAN: null-ptr-deref in rxe_qp_do_cleanup The function rxe_create_qp calls rxe_qp_from_init. If some error occurs, the error handler of function rxe_qp_from_init will set both scq and rcq to
- CVE-2022-50134Jun 18, 2025affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1
In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: fix potential memory leak in setup_base_ctxt() setup_base_ctxt() allocates a memory chunk for uctxt->groups with hfi1_alloc_ctxt_rcv_groups(). When init_user_ctxt() fails, uctxt->groups is not releas
- CVE-2022-50133Jun 18, 2025affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1
In the Linux kernel, the following vulnerability has been resolved: usb: xhci_plat_remove: avoid NULL dereference Since commit 4736ebd7fcaff1eb8481c140ba494962847d6e0a ("usb: host: xhci-plat: omit shared hcd if either root hub has no ports") xhci->shared_hcd can be NULL, which
- CVE-2022-50132Jun 18, 2025affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1
In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable() If 'ep' is NULL, result of ep_to_cdns3_ep(ep) is invalid pointer and its dereference with priv_ep->cdns3_d
- CVE-2022-50131Jun 18, 2025affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1
In the Linux kernel, the following vulnerability has been resolved: HID: mcp2221: prevent a buffer overflow in mcp_smbus_write() Smatch Warning: drivers/hid/hid-mcp2221.c:388 mcp_smbus_write() error: __memcpy() '&mcp->txbuf[5]' too small (59 vs 255) drivers/hid/hid-mcp2221.c:38
- CVE-2022-50129Jun 18, 2025affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1
In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Fix a use-after-free Change the LIO port members inside struct srpt_port from regular members into pointers. Allocate the LIO port data structures from inside srpt_make_tport() and free these from in
- CVE-2022-50127Jun 18, 2025affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix error unwind in rxe_create_qp() In the function rxe_create_qp(), rxe_qp_from_init() is called to initialize qp, internally things like the spin locks are not setup until rxe_qp_init_req(). If an
- CVE-2022-50126Jun 18, 2025affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1
In the Linux kernel, the following vulnerability has been resolved: jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted Following process will fail assertion 'jh->b_frozen_data == NULL' in jbd2_journal_dirty_metadata(): jbd2_journal_
- CVE-2022-50125Jun 18, 2025affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1
In the Linux kernel, the following vulnerability has been resolved: ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probe of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing o
- CVE-2022-50124Jun 18, 2025affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1
In the Linux kernel, the following vulnerability has been resolved: ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_nod
- CVE-2022-50121Jun 18, 2025affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1
In the Linux kernel, the following vulnerability has been resolved: remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init Every iteration of for_each_available_child_of_node() decrements the reference count of the previous node. When breaking early from a for_each_avail
- CVE-2022-50120Jun 18, 2025affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1
In the Linux kernel, the following vulnerability has been resolved: remoteproc: imx_rproc: Fix refcount leak in imx_rproc_addr_init of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not needed anymore. This function has
- CVE-2022-50118Jun 18, 2025affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1
In the Linux kernel, the following vulnerability has been resolved: powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable commit 2c9ac51b850d ("powerpc/perf: Fix PMU callbacks to clear pending PMI before resetting an overflown PMC
- CVE-2022-50117Jun 18, 2025affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1
In the Linux kernel, the following vulnerability has been resolved: vfio: Split migration ops from main device ops vfio core checks whether the driver sets some migration op (e.g. set_state/get_state) and accordingly calls its op. However, currently mlx5 driver sets the above
- CVE-2022-50115Jun 18, 2025affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-topology: Prevent double freeing of ipc_control_data via load_bytes We have sanity checks for byte controls and if any of the fail the locally allocated scontrol->ipc_control_data is freed up, b
- CVE-2022-50112Jun 18, 2025affected < 5.14.21-150500.13.100.1fixed 5.14.21-150500.13.100.1
In the Linux kernel, the following vulnerability has been resolved: rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when done.
Page 56 of 228