suse/kernel-source-rt&distro=SUSE Linux Enterprise Real Time 12 SP5

Vulnerabilities (1,429)

• CVE-2023-52587Mar 6, 2024
  affected < 4.12.14-10.182.1fixed 4.12.14-10.182.1

  In the Linux kernel, the following vulnerability has been resolved: IB/ipoib: Fix mcast list locking Releasing the `priv->lock` while iterating the `priv->multicast_list` in `ipoib_mcast_join_task()` opens a window for `ipoib_mcast_dev_flush()` to remove the items while in the

• CVE-2023-52586Mar 6, 2024
  affected < 4.12.14-10.188.1fixed 4.12.14-10.188.1

  In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add mutex lock in control vblank irq Add a mutex lock to control vblank irq to synchronize vblank enable/disable operations happening from different threads to prevent race conditions while registe

• CVE-2023-52583Mar 6, 2024
  affected < 4.12.14-10.182.1fixed 4.12.14-10.182.1

  In the Linux kernel, the following vulnerability has been resolved: ceph: fix deadlock or deadcode of misusing dget() The lock order is incorrect between denty and its parent, we should always make sure that the parent get the lock first. But since this deadcode is never used

• CVE-2021-47104Mar 4, 2024
  affected < 4.12.14-10.182.1fixed 4.12.14-10.182.1

  In the Linux kernel, the following vulnerability has been resolved: IB/qib: Fix memory leak in qib_user_sdma_queue_pkts() The wrong goto label was used for the error case and missed cleanup of the pkt allocation. Addresses-Coverity-ID: 1493352 ("Resource leak")

• CVE-2021-47103Mar 4, 2024
  affected < 4.12.14-10.191.1fixed 4.12.14-10.191.1

  In the Linux kernel, the following vulnerability has been resolved: inet: fully convert sk->sk_rx_dst to RCU rules syzbot reported various issues around early demux, one being included in this changelog [1] sk->sk_rx_dst is using RCU protection without clearly documenting it.

• CVE-2021-47101Mar 4, 2024
  affected < 4.12.14-10.182.1fixed 4.12.14-10.182.1

  In the Linux kernel, the following vulnerability has been resolved: asix: fix uninit-value in asix_mdio_read() asix_read_cmd() may read less than sizeof(smsr) bytes and in this case smsr will be uninitialized. Fail log: BUG: KMSAN: uninit-value in asix_check_host_enable driver

• CVE-2021-47100Mar 4, 2024
  affected < 4.12.14-10.182.1fixed 4.12.14-10.182.1

  In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module Hi, When testing install and uninstall of ipmi_si.ko and ipmi_msghandler.ko, the system crashed. The log as follows: [ 141.087026] BUG: unable

• CVE-2024-26622Mar 4, 2024
  affected < 4.12.14-10.171.1fixed 4.12.14-10.171.1

  In the Linux kernel, the following vulnerability has been resolved: tomoyo: fix UAF write bug in tomoyo_write_control() Since tomoyo_write_control() updates head->write_buf when write() of long lines is requested, we need to fetch head->write_buf after head->io_sem is held. Ot

• CVE-2023-52574Mar 2, 2024
  affected < 4.12.14-10.171.1fixed 4.12.14-10.171.1

  In the Linux kernel, the following vulnerability has been resolved: team: fix null-ptr-deref when team device type is changed Get a null-ptr-deref bug as follows with reproducer [1]. BUG: kernel NULL pointer dereference, address: 0000000000000228 ... RIP: 0010:vlan_dev_hard_he

• CVE-2023-52532Mar 2, 2024
  affected < 4.12.14-10.171.1fixed 4.12.14-10.171.1

  In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix TX CQE error handling For an unknown TX CQE error type (probably from a newer hardware), still free the SKB, update the queue tail, etc., otherwise the accounting will be wrong. Also, TX errors

• CVE-2023-52531Mar 2, 2024
  affected < 4.12.14-10.171.1fixed 4.12.14-10.171.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: Fix a memory corruption issue A few lines above, space is kzalloc()'ed for: sizeof(struct iwl_nvm_data) + sizeof(struct ieee80211_channel) + sizeof(struct ieee80211_rate) 'mvm->nvm_data'

• CVE-2023-52530Mar 2, 2024
  affected < 4.12.14-10.171.1fixed 4.12.14-10.171.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix potential key use-after-free When ieee80211_key_link() is called by ieee80211_gtk_rekey_add() but returns 0 due to KRACK protection (identical key reinstall), ieee80211_gtk_rekey_add() will

• CVE-2023-52528Mar 2, 2024
  affected < 4.12.14-10.182.1fixed 4.12.14-10.182.1

  In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg syzbot reported the following uninit-value access issue: ===================================================== BUG: KMSAN: uninit-value in sms

• CVE-2023-52527Mar 2, 2024
  affected < 4.12.14-10.188.1fixed 4.12.14-10.188.1

  In the Linux kernel, the following vulnerability has been resolved: ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() Including the transhdrlen in length is a problem when the packet is partially filled (e.g. something like send(MSG_MORE) happened previously) wh

• CVE-2023-52524Mar 2, 2024
  affected < 4.12.14-10.182.1fixed 4.12.14-10.182.1

  In the Linux kernel, the following vulnerability has been resolved: net: nfc: llcp: Add lock when modifying device list The device list needs its associated lock held when modifying it, or the list could become corrupted, as syzbot discovered.

• CVE-2023-52515Mar 2, 2024
  affected < 4.12.14-10.182.1fixed 4.12.14-10.182.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: Do not call scsi_done() from srp_abort() After scmd_eh_abort_handler() has called the SCSI LLD eh_abort_handler callback, it performs one of the following actions: * Call scsi_queue_insert(). * Call s

• CVE-2023-52509Mar 2, 2024
  affected < 4.12.14-10.182.1fixed 4.12.14-10.182.1

  In the Linux kernel, the following vulnerability has been resolved: ravb: Fix use-after-free issue in ravb_tx_timeout_work() The ravb_stop() should call cancel_work_sync(). Otherwise, ravb_tx_timeout_work() is possible to use the freed priv after ravb_remove() was called like b

• CVE-2023-52507Mar 2, 2024
  affected < 4.12.14-10.194.1fixed 4.12.14-10.194.1

  In the Linux kernel, the following vulnerability has been resolved: nfc: nci: assert requested protocol is valid The protocol is used in a bit mask to determine if the protocol is supported. Assert the provided protocol is less than the maximum defined so it doesn't potentially

• CVE-2023-52502Mar 2, 2024
  affected < 4.12.14-10.171.1fixed 4.12.14-10.171.1

  In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() Sili Luo reported a race in nfc_llcp_sock_get(), leading to UAF. Getting a reference on the socket found in a lookup while holding a lock s

• CVE-2022-48627Mar 2, 2024
  affected < 4.12.14-10.171.1fixed 4.12.14-10.171.1

  In the Linux kernel, the following vulnerability has been resolved: vt: fix memory overlapping when deleting chars in the buffer A memory overlapping copy occurs when deleting a long line. This memory overlapping copy can cause data corruption when scr_memcpyw is optimized to m