VYPR

rpm package

suse/kernel-source-rt&distro=SUSE Real Time Module 15 SP7

pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP7

Vulnerabilities (2,202)

  • CVE-2026-23102HigFeb 4, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: signal: Fix restoration of SVE context When SME is supported, Restoring SVE signal context can go wrong in a few ways, including placing the task into an invalid state where the kernel may read fr

  • CVE-2026-23101MedFeb 4, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: leds: led-class: Only Add LED to leds_list when it is fully ready Before this change the LED was added to leds_list before led_init_core() gets called adding it the list before led_classdev.set_brightness_work

  • CVE-2026-23099HigFeb 4, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: bonding: limit BOND_MODE_8023AD to Ethernet devices BOND_MODE_8023AD makes sense for ARPHRD_ETHER only. syzbot reported: BUG: KASAN: global-out-of-bounds in __hw_addr_create net/core/dev_addr_lists.c:63 [inl

  • CVE-2026-23096MedFeb 4, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: uacce: fix cdev handling in the cleanup path When cdev_device_add fails, it internally releases the cdev memory, and if cdev_device_del is then executed, it will cause a hang error. To fix it, we check the retu

  • CVE-2026-23095HigFeb 4, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: gue: Fix skb memleak with inner IP protocol 0. syzbot reported skb memleak below. [0] The repro generated a GUE packet with its inner protocol 0. gue_udp_recv() returns -guehdr->proto_ctype for "resubmit" in

  • CVE-2026-23094MedFeb 4, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: uacce: fix isolate sysfs check condition uacce supports the device isolation feature. If the driver implements the isolate_err_threshold_read and isolate_err_threshold_write callback functions, uacce will creat

  • CVE-2026-23091MedFeb 4, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: intel_th: fix device leak on output open() Make sure to drop the reference taken when looking up the th device during output device open() on errors and on close(). Note that a recent commit fixed the leak in

  • CVE-2026-23090MedFeb 4, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: slimbus: core: fix device reference leak on report present Slimbus devices can be allocated dynamically upon reception of report-present messages. Make sure to drop the reference taken when looking up already

  • CVE-2026-23089HigFeb 4, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() When snd_usb_create_mixer() fails, snd_usb_mixer_free() frees mixer->id_elems but the controls already added to the card still reference the freed mem

  • CVE-2026-23088MedFeb 4, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: tracing: Fix crash on synthetic stacktrace field usage When creating a synthetic event based on an existing synthetic event that had a stacktrace field and the new synthetic event used that field a kernel crash

  • CVE-2026-23086MedFeb 4, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: cap TX credit to local buffer size The virtio transports derives its TX credit directly from peer_buf_alloc, which is set from the remote endpoint's SO_VM_SOCKETS_BUFFER_SIZE value. On the host s

  • CVE-2026-23085MedFeb 4, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Avoid truncating memory addresses On 32-bit machines with CONFIG_ARM_LPAE, it is possible for lowmem allocations to be backed by addresses physical memory above the 32-bit address limit, as

  • CVE-2026-23084MedFeb 4, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list When the parameter pmac_id_valid argument of be_cmd_get_mac_from_list() is set to false, the driver may request the PMAC_ID from the firmware of

  • CVE-2026-23083HigFeb 4, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: fou: Don't allow 0 for FOU_ATTR_IPPROTO. fou_udp_recv() has the same problem mentioned in the previous patch. If FOU_ATTR_IPPROTO is set to 0, skb is not freed by fou_udp_recv() nor "resubmit"-ted in ip_protoc

  • CVE-2026-23082MedFeb 4, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error In commit 7352e1d5932a ("can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak"), the URB was re-anchored before us

  • CVE-2026-23080MedFeb 4, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak Fix similar memory leak as in commit 7352e1d5932a ("can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak"). In mcba_usb_probe() ->

  • CVE-2026-23078HigFeb 4, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Fix buffer overflow in config retrieval The scarlett2_usb_get_config() function has a logic error in the endianness conversion code that can cause buffer overflows when count > 1. The code che

  • CVE-2026-23076HigFeb 4, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Fix potential OOB access in audio mixer handling In the audio mixer handling code of ctxfi driver, the conf field is used as a kind of loop index, and it's referred in the index callbacks (amixer_i

  • CVE-2026-23074HigFeb 4, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: net/sched: Enforce that teql can only be used as root qdisc Design intent of teql is that it is only supposed to be used as root qdisc. We need to check for that constraint. Although not important, I will desc

  • CVE-2026-23073HigFeb 4, 2026
    affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

    In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: Fix memory corruption due to not set vif driver data size The struct ieee80211_vif contains trailing space for vif driver data, when struct ieee80211_vif is allocated, the total memory size that is a

Page 11 of 111