suse/kernel-source-rt&distro=SUSE Linux Enterprise Real Time 12 SP5

Vulnerabilities (1,429)

• CVE-2024-38558MedJun 19, 2024
  affected < 4.12.14-10.197.1fixed 4.12.14-10.197.1

  In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix overwriting ct original tuple for ICMPv6 OVS_PACKET_CMD_EXECUTE has 3 main attributes: - OVS_PACKET_ATTR_KEY - Packet metadata in a netlink format. - OVS_PACKET_ATTR_PACKET - Binary pack

• CVE-2024-38552HigJun 19, 2024
  affected < 4.12.14-10.191.1fixed 4.12.14-10.191.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential index out of bounds in color transformation function Fixes index out of bounds issue in the color transformation function. The issue could occur when the index 'i' exceeds the num

• CVE-2024-38618Jun 19, 2024
  affected < 4.12.14-10.191.1fixed 4.12.14-10.191.1

  In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Set lower bound of start tick time Currently ALSA timer doesn't have the lower limit of the start tick time, and it allows a very small size, e.g. 1 tick with 1ns resolution for hrtimer. Such a si

• CVE-2024-38608Jun 19, 2024
  affected < 4.12.14-10.191.1fixed 4.12.14-10.191.1

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix netif state handling mlx5e_suspend cleans resources only if netif_device_present() returns true. However, mlx5e_resume changes the state of netif, via mlx5e_nic_enable, only if reg_state == NETRE

• CVE-2024-38601Jun 19, 2024
  affected < 4.12.14-10.191.1fixed 4.12.14-10.191.1

  In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix a race between readers and resize checks The reader code in rb_get_reader_page() swaps a new reader page into the ring buffer by doing cmpxchg on old->list.prev->next to point it to the new pag

• CVE-2024-38597Jun 19, 2024
  affected < 4.12.14-10.191.1fixed 4.12.14-10.191.1

  In the Linux kernel, the following vulnerability has been resolved: eth: sungem: remove .ndo_poll_controller to avoid deadlocks Erhard reports netpoll warnings from sungem: netpoll_send_skb_on_dev(): eth0 enabled interrupts in poll (gem_start_xmit+0x0/0x398) WARNING: CPU:

• CVE-2024-38580Jun 19, 2024
  affected < 4.12.14-10.191.1fixed 4.12.14-10.191.1

  In the Linux kernel, the following vulnerability has been resolved: epoll: be better about file lifetimes epoll can call out to vfs_poll() with a file pointer that may race with the last 'fput()'. That would make f_count go down to zero, and while the ep->mtx locking means that

• CVE-2024-38553Jun 19, 2024
  affected < 4.12.14-10.191.1fixed 4.12.14-10.191.1

  In the Linux kernel, the following vulnerability has been resolved: net: fec: remove .ndo_poll_controller to avoid deadlocks There is a deadlock issue found in sungem driver, please refer to the commit ac0a230f719b ("eth: sungem: remove .ndo_poll_controller to avoid deadlocks")

• CVE-2024-38549Jun 19, 2024
  affected < 4.12.14-10.191.1fixed 4.12.14-10.191.1

  In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Add 0 size check to mtk_drm_gem_obj Add a check to mtk_drm_gem_init if we attempt to allocate a GEM object of 0 bytes. Currently, no such check exists and the kernel will panic if a userspace appl

• CVE-2024-38546Jun 19, 2024
  affected < 4.12.14-10.191.1fixed 4.12.14-10.191.1

  In the Linux kernel, the following vulnerability has been resolved: drm: vc4: Fix possible null pointer dereference In vc4_hdmi_audio_init() of_get_address() may return NULL which is later dereferenced. Fix this bug by adding NULL check. Found by Linux Verification Center (lin

• CVE-2024-38545Jun 19, 2024
  affected < 4.12.14-10.191.1fixed 4.12.14-10.191.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix UAF for cq async event The refcount of CQ is not protected by locks. When CQ asynchronous events and CQ destruction are concurrent, CQ may have been released, which will cause UAF. Use the xa_loc

• CVE-2024-38544Jun 19, 2024
  affected < 4.12.14-10.191.1fixed 4.12.14-10.191.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt In rxe_comp_queue_pkt() an incoming response packet skb is enqueued to the resp_pkts queue and then a decision is made whether to run the completer task inline or s

• CVE-2024-36964Jun 3, 2024
  affected < 4.12.14-10.191.1fixed 4.12.14-10.191.1

  In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bits is allowed through, which causes it to be able to set (among others) the suid bit. This was presumably not the intent s

• CVE-2024-36960Jun 3, 2024
  affected < 4.12.14-10.191.1fixed 4.12.14-10.191.1

  In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix invalid reads in fence signaled events Correctly set the length of the drm_event to the size of the structure that's actually used. The length of the drm_event was set to the parent structure i

• CVE-2024-36940HigMay 30, 2024
  affected < 4.12.14-10.191.1fixed 4.12.14-10.191.1

  In the Linux kernel, the following vulnerability has been resolved: pinctrl: core: delete incorrect free in pinctrl_enable() The "pctldev" struct is allocated in devm_pinctrl_register_and_init(). It's a devm_ managed pointer that is freed by devm_pinctrl_dev_release(), so freei

• CVE-2024-36939MedMay 30, 2024
  affected < 4.12.14-10.197.1fixed 4.12.14-10.197.1

  In the Linux kernel, the following vulnerability has been resolved: nfs: Handle error of rpc_proc_register() in nfs_net_init(). syzkaller reported a warning [0] triggered while destroying immature netns. rpc_proc_register() was called in init_nfs_fs(), but its error has been i

• CVE-2024-36902MedMay 30, 2024
  affected < 4.12.14-10.197.1fixed 4.12.14-10.197.1

  In the Linux kernel, the following vulnerability has been resolved: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() syzbot is able to trigger the following crash [1], caused by unsafe ip6_dst_idev() use. Indeed ip6_dst_idev() can return NULL, and must a

• CVE-2024-36894MedMay 30, 2024
  affected < 4.12.14-10.191.1fixed 4.12.14-10.191.1

  In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete FFS based applications can utilize the aio_cancel() callback to dequeue pending USB requests submitted to the UDC. There is a scenario

• CVE-2024-36954May 30, 2024
  affected < 4.12.14-10.188.1fixed 4.12.14-10.188.1

  In the Linux kernel, the following vulnerability has been resolved: tipc: fix a possible memleak in tipc_buf_append __skb_linearize() doesn't free the skb when it fails, so move '*buf = NULL' after __skb_linearize(), so that the skb can be freed on the err path.

• CVE-2024-36950May 30, 2024
  affected < 4.12.14-10.191.1fixed 4.12.14-10.191.1

  In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: mask bus reset interrupts between ISR and bottom half In the FireWire OHCI interrupt handler, if a bus reset interrupt has occurred, mask bus reset interrupts until bus_reset_work has serviced a