suse/kernel-syms&distro=SUSE Linux Enterprise Server 12 SP5-LTSS

Vulnerabilities (1,878)

• CVE-2023-53333Sep 16, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one Eric Dumazet says: nf_conntrack_dccp_packet() has an unique: dh = skb_header_pointer(skb, dataoff, sizeof(_dh), &_dh);

• CVE-2023-53332Sep 16, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask() If ipi_send_{mask|single}() is called with an invalid interrupt number, all the local variables there will be NULL. ipi_send_verify() which is

• CVE-2023-53331Sep 16, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Check start of empty przs during init After commit 30696378f68a ("pstore/ram: Do not treat empty buffers as valid"), initialization would assume a prz was valid after seeing that the buffer_size is

• CVE-2023-53326Sep 16, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: powerpc: Don't try to copy PPR for task with NULL pt_regs powerpc sets up PF_KTHREAD and PF_IO_WORKER with a NULL pt_regs, which from my (arguably very short) checking is not commonly done for other archs. This

• CVE-2023-53322Sep 16, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Wait for io return on terminate rport System crash due to use after free. Current code allows terminate_rport_io to exit before making sure all IOs has returned. For FCP-2 device, IO's can hang o

• CVE-2023-53321Sep 16, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: drop short frames While technically some control frames like ACK are shorter and end after Address 1, such frames shouldn't be forwarded through wmediumd or similar userspace, so require t

• CVE-2023-53317Sep 16, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix WARNING in mb_find_extent Syzbot found the following issue: EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! EXT4-fs (loop0)

• CVE-2023-53313Sep 16, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix wrong setting of max_corr_read_errors There is no input check when echo md/max_read_errors and overflow might occur. Add check of input number.

• CVE-2023-53309Sep 16, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix integer overflow in radeon_cs_parser_init The type of size is unsigned, if size is 0x40000000, there will be an integer overflow, size will be zero after size *= sizeof(uint32_t), will cause uni

• CVE-2023-53308Sep 16, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: net: fec: Better handle pm_runtime_get() failing in .remove() In the (unlikely) event that pm_runtime_get() (disguised as pm_runtime_resume_and_get()) fails, the remove callback returned an error early. The pro

• CVE-2023-53307Sep 16, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails If getting an ID or setting up a work queue in rbd_dev_create() fails, use-after-free on rbd_dev->rbd_client, rbd_dev->spec and rbd_dev->opt

• CVE-2023-53305Sep 16, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free Fix potential use-after-free in l2cap_le_command_rej.

• CVE-2022-50352Sep 16, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: net: hns: fix possible memory leak in hnae_ae_register() Inject fault while probing module, if device_register() fails, but the refcount of kobject is not decreased to 0, the name allocated in dev_set_name() is

• CVE-2022-50351Sep 16, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifs_create() If the cifs already shutdown, we should free the xid before return, otherwise, the xid will be leaked.

• CVE-2022-50350Sep 16, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix a race condition between login_work and the login thread In case a malicious initiator sends some random data immediately after a login PDU; the iscsi_target_sk_data_ready() callback wi

• CVE-2022-50349Sep 16, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() If device_register() returns error in tifm_7xx1_switch_media(), name of kobject which is allocated in dev_set_name() called in device_add() is le

• CVE-2022-50347Sep 16, 2025
  affected < 4.12.14-122.293.1fixed 4.12.14-122.293.1

  In the Linux kernel, the following vulnerability has been resolved: mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() mmc_add_host() may return error, if we ignore its return value, the memory that allocated in mmc_alloc_host() will be leaked and it will lead a kern

• CVE-2022-50346Sep 16, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: init quota for 'old.inode' in 'ext4_rename' Syzbot found the following issue: ext4_parse_param: s_want_extra_isize=128 ext4_inode_info_init: s_want_extra_isize=32 ext4_rename: old.inode=ffff88823869a2c8 o

• CVE-2022-50344Sep 16, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix null-ptr-deref in ext4_write_info I caught a null-ptr-deref bug as follows: ================================================================== KASAN: null-ptr-deref in range [0x0000000000000068-0x0000

• CVE-2025-39824HigSep 16, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix UAF via HID_CLAIMED_INPUT validation After hid_hw_start() is called hidinput_connect() will eventually be called to set up the device with the input layer since the HID_CONNECT_DEFAULT connect ma