suse/kernel-source-rt&distro=SUSE Linux Enterprise Real Time 12 SP5

Vulnerabilities (1,429)

• CVE-2024-46686Sep 13, 2024
  affected < 4.12.14-10.203.1fixed 4.12.14-10.203.1

  In the Linux kernel, the following vulnerability has been resolved: smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req() This happens when called from SMB2_read() while using rdma and reaching the rdma_readwrite_threshold.

• CVE-2024-46685Sep 13, 2024
  affected < 4.12.14-10.203.1fixed 4.12.14-10.203.1

  In the Linux kernel, the following vulnerability has been resolved: pinctrl: single: fix potential NULL dereference in pcs_get_function() pinmux_generic_get_function() can return NULL and the pointer 'function' was dereferenced without checking against NULL. Add checking of poi

• CVE-2024-46677Sep 13, 2024
  affected < 4.12.14-10.203.1fixed 4.12.14-10.203.1

  In the Linux kernel, the following vulnerability has been resolved: gtp: fix a potential NULL pointer dereference When sockfd_lookup() fails, gtp_encap_enable_socket() returns a NULL pointer, but its callers only check for error pointers thus miss the NULL pointer case. Fix it

• CVE-2024-46676Sep 13, 2024
  affected < 4.12.14-10.203.1fixed 4.12.14-10.203.1

  In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Add poll mod list filling check In case of im_protocols value is 1 and tm_protocols value is 0 this combination successfully passes the check 'if (!im_protocols && !tm_protocols)' in the nfc_start_p

• CVE-2024-46675Sep 13, 2024
  affected < 4.12.14-10.203.1fixed 4.12.14-10.203.1

  In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Prevent USB core invalid event buffer address access This commit addresses an issue where the USB core could access an invalid event buffer address during runtime suspend, potentially causing S

• CVE-2024-46673Sep 13, 2024
  affected < 4.12.14-10.203.1fixed 4.12.14-10.203.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: aacraid: Fix double-free on probe failure aac_probe_one() calls hardware-specific init functions through the aac_driver_ident::init pointer, all of which eventually call down to aac_init_adapter(). If aa

• CVE-2023-52915Sep 6, 2024
  affected < 4.12.14-10.203.1fixed 4.12.14-10.203.1

  In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer In af9035_i2c_master_xfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be

• CVE-2024-44987HigSep 4, 2024
  affected < 4.12.14-10.203.1fixed 4.12.14-10.203.1

  In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent UAF in ip6_send_skb() syzbot reported an UAF in ip6_send_skb() [1] After ip6_local_out() has returned, we no longer can safely dereference rt, unless we hold rcu_read_lock(). A similar issue has

• CVE-2024-45008Sep 4, 2024
  affected < 4.12.14-10.203.1fixed 4.12.14-10.203.1

  In the Linux kernel, the following vulnerability has been resolved: Input: MT - limit max slots syzbot is reporting too large allocation at input_mt_init_slots(), for num_slots is supplied from userspace using ioctl(UI_DEV_CREATE). Since nobody knows possible max slots, this p

• CVE-2024-44999Sep 4, 2024
  affected < 4.12.14-10.203.1fixed 4.12.14-10.203.1

  In the Linux kernel, the following vulnerability has been resolved: gtp: pull network headers in gtp_dev_xmit() syzbot/KMSAN reported use of uninit-value in get_dev_xmit() [1] We must make sure the IPv4 or Ipv6 header is pulled in skb->head before accessing fields in them. Us

• CVE-2024-44998Sep 4, 2024
  affected < 4.12.14-10.203.1fixed 4.12.14-10.203.1

  In the Linux kernel, the following vulnerability has been resolved: atm: idt77252: prevent use after free in dequeue_rx() We can't dereference "skb" after calling vcc->push() because the skb is released.

• CVE-2024-44982Sep 4, 2024
  affected < 4.12.14-10.203.1fixed 4.12.14-10.203.1

  In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails If the dpu_format_populate_layout() fails, then FB is prepared, but not cleaned up. This ends up leaking the pin_count on the GEM object and causes a

• CVE-2024-44948MedSep 4, 2024
  affected < 4.12.14-10.203.1fixed 4.12.14-10.203.1

  In the Linux kernel, the following vulnerability has been resolved: x86/mtrr: Check if fixed MTRRs exist before saving them MTRRs have an obsolete fixed variant for fine grained caching control of the 640K-1MB region that uses separate MSRs. This fixed variant has a separate ca

• CVE-2024-44969Sep 4, 2024
  affected < 4.12.14-10.203.1fixed 4.12.14-10.203.1

  In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Prevent release of buffer in I/O When a task waiting for completion of a Store Data operation is interrupted, an attempt is made to halt this operation. If this attempt fails due to a hardware or fir

• CVE-2024-44954Sep 4, 2024
  affected < 4.12.14-10.203.1fixed 4.12.14-10.203.1

  In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Fix racy access to midibuf There can be concurrent accesses to line6 midibuf from both the URB completion callback and the rawmidi API access. This could be a cause of KMSAN warning triggered by s

• CVE-2024-44950Sep 4, 2024
  affected < 4.12.14-10.203.1fixed 4.12.14-10.203.1

  In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: fix invalid FIFO access with special register set When enabling access to the special register set, Receiver time-out and RHR interrupts can happen. In this case, the IRQ handler will try to

• CVE-2024-44947Sep 2, 2024
  affected < 4.12.14-10.203.1fixed 4.12.14-10.203.1

  In the Linux kernel, the following vulnerability has been resolved: fuse: Initialize beyond-EOF page contents before setting uptodate fuse_notify_store(), unlike fuse_do_readpage(), does not enable page zeroing (because it can be used to change partial page contents). So fuse_

• CVE-2024-44946Aug 31, 2024
  affected < 4.12.14-10.203.1fixed 4.12.14-10.203.1

  In the Linux kernel, the following vulnerability has been resolved: kcm: Serialise kcm_sendmsg() for the same socket. syzkaller reported UAF in kcm_release(). [0] The scenario is 1. Thread A builds a skb with MSG_MORE and sets kcm->seq_skb. 2. Thread A resumes building s

• CVE-2021-4442Aug 29, 2024
  affected < 4.12.14-10.203.1fixed 4.12.14-10.203.1

  In the Linux kernel, the following vulnerability has been resolved: tcp: add sanity tests to TCP_QUEUE_SEQ Qingyu Li reported a syzkaller bug where the repro changes RCV SEQ _after_ restoring data in the receive queue. mprotect(0x4aa000, 12288, PROT_READ) = 0 mmap(0x1ffff00

• CVE-2024-43893MedAug 26, 2024
  affected < 4.12.14-10.200.1fixed 4.12.14-10.200.1

  In the Linux kernel, the following vulnerability has been resolved: serial: core: check uartclk for zero to avoid divide by zero Calling ioctl TIOCSSERIAL with an invalid baud_base can result in uartclk being zero, which will result in a divide by zero error in uart_get_divisor