suse/kernel-syms&distro=SUSE Linux Enterprise Server 12 SP5-LTSS

Vulnerabilities (1,878)

• CVE-2023-53611MedOct 4, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: ipmi_si: fix a memleak in try_smi_init() Kmemleak reported the following leak info in try_smi_init(): unreferenced object 0xffff00018ecf9400 (size 1024): comm "modprobe", pid 2707763, jiffies 4300851415 (age

• CVE-2023-53604HigOct 4, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path Otherwise the journal_io_cache will leak if dm_register_target() fails.

• CVE-2023-53603MedOct 4, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Avoid fcport pointer dereference Klocwork reported warning of NULL pointer may be dereferenced. The routine exits when sa_ctl is NULL and fcport is allocated after the exit call thus causing NUL

• CVE-2023-53597HigOct 4, 2025
  affected < 4.12.14-122.283.1fixed 4.12.14-122.283.1

  In the Linux kernel, the following vulnerability has been resolved: cifs: fix mid leak during reconnection after timeout threshold When the number of responses with status of STATUS_IO_TIMEOUT exceeds a specified threshold (NUM_STATUS_IO_TIMEOUT), we reconnect the connection. B

• CVE-2023-53596HigOct 4, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: drivers: base: Free devm resources when unregistering a device In the current code, devres_release_all() only gets called if the device has a bus and has been probed. This leads to issues when using bus-less o

• CVE-2023-53594MedOct 4, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: driver core: fix resource leak in device_add() When calling kobject_add() failed in device_add(), it will call cleanup_glue_dir() to free resource. But in kobject_add(), dev->kobj.parent has been set to NULL. T

• CVE-2023-53593MedOct 4, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: cifs: Release folio lock on fscache read hit. Under the current code, when cifs_readpage_worker is called, the call contract is that the callee should unlock the page. This is documented in the read_folio secti

• CVE-2023-53589HigOct 4, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't trust firmware n_channels If the firmware sends us a corrupted MCC response with n_channels much larger than the command response can be, we might copy far too much (uninitialized) mem

• CVE-2023-53587HigOct 4, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Sync IRQ works before buffer destruction If something was written to the buffer just before destruction, it may be possible (maybe not in a real system, but it did happen in ARCH=um with time-trave

• CVE-2023-53582MedOct 4, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds Fix a stack-out-of-bounds read in brcmfmac that occurs when 'buf' that is not null-terminated is passed as an argument of str

• CVE-2023-53568MedOct 4, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: don't leak memory if dev_set_name() fails When dev_set_name() fails, zcdn_create() doesn't free the newly allocated resources. Do it.

• CVE-2023-53564MedOct 4, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix defrag path triggering jbd2 ASSERT code path: ocfs2_ioctl_move_extents ocfs2_move_extents ocfs2_defrag_extent __ocfs2_move_extent + ocfs2_journal_access_di + ocfs2_split_extent //sub-

• CVE-2023-53559HigOct 4, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: ip_vti: fix potential slab-use-after-free in decode_session6 When ip_vti device is set to the qdisc of the sfb type, the cb field of the sent skb may be modified during enqueuing. Then, slab-use-after-free may

• CVE-2023-53556HigOct 4, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: iavf: Fix use-after-free in free_netdev We do netif_napi_add() for all allocated q_vectors[], but potentially do netif_napi_del() for part of them, then kfree q_vectors and leave invalid pointers at dev->napi_l

• CVE-2023-53548MedOct 4, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb The syzbot fuzzer identified a problem in the usbnet driver: usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 0 PID: 754 at drivers/usb/core/

• CVE-2023-53542MedOct 4, 2025
  affected < 4.12.14-122.283.1fixed 4.12.14-122.283.1

  In the Linux kernel, the following vulnerability has been resolved: ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy For some reason, the driver adding support for Exynos5420 MIPI phy back in 2016 wasn't used on Exynos5420, which caused a kernel panic. Add the

• CVE-2023-53540HigOct 4, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: reject auth/assoc to AP with our address If the AP uses our own address as its MLD address or BSSID, then clearly something's wrong. Reject such connections so we don't try and fail later.

• CVE-2023-53533MedOct 4, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe rpi_firmware_get() take reference, we need to release it in error paths as well. Use devm_rpi_firmware_get() helper to handling the resources. Also remo

• CVE-2022-50505MedOct 4, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix pci device refcount leak in ppr_notifier() As comment of pci_get_domain_bus_and_slot() says, it returns a pci device with refcount increment, when finish using it, the caller must decrement the r

• CVE-2022-50504MedOct 4, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: avoid scheduling in rtas_os_term() It's unsafe to use rtas_busy_delay() to handle a busy status from the ibm,os-term RTAS function in rtas_os_term(): Kernel panic - not syncing: Attempted to kill